Privacy

Information we handle

• Account information: your email address, account identifier, authentication and session information, notification preferences, widget settings, and subscription status.
• Testimonials: the name, text, rating, optional role and company, and optional photo provided through a collection form or added or imported by a widget owner, along with submission time and moderation status.
• Payments: Stripe customer and subscription identifiers, plan information, and payment status. Card details are entered through Stripe's checkout and handled by Stripe.
• Usage and technical information: product interactions, page categories, account or widget identifiers, request timestamps, browser information, and network information used to operate the service and limit abuse. Operational logs can include account identifiers and email addresses.
• Support: the contact details and information you send when asking for help.

How information is used

We use this information to authenticate users, store and display testimonials, manage subscriptions, deliver service emails, respond to support requests, prevent abuse, diagnose errors, and understand product usage.

Testimonials and photos can become public

A collection form sends your submission to the business or person who owns that widget. They can review and publish it. Approved testimonials and their associated names, roles, companies, ratings and photos can appear on websites using the widget. Manually added and CSV-imported testimonials can be published immediately.

Uploaded photos are stored at public image URLs. Knowing a photo's URL can allow someone to access it even before a testimonial is approved. Only submit information you are comfortable sharing. The website displaying a widget may have its own privacy practices.

Services that process information

• Neon provides our database, authentication, and object storage for uploaded photos.
• Stripe handles checkout, subscriptions, payment processing, and the billing portal.
• Resend delivers transactional emails, including testimonial notifications and related account messages.
• PostHog receives configured product analytics events and pseudonymous identifiers.
• If you use tweet import, the public tweet URL is sent to X's oEmbed service to retrieve the post and author information.
• Vercel hosts the application and processes requests and operational logs. Our support email provider, AgentMail, handles messages sent to our support address.

These services process the information needed for their functions. Their locations, backups and retention practices can differ; this notice does not promise that all information stays in one country.

Cookies, analytics and widget requests

Authentication uses cookies to keep you signed in. Browser storage also remembers app preferences. When analytics is configured, PostHog uses browser identifiers and we set an analytics cookie named ep_did with a one-year lifetime. Signing in can associate product activity with your account identifier.

Analytics records selected actions such as page visits, sign-ins, widget changes and billing milestones. The app disables PostHog session recording and automatic click capture. Its explicit analytics events exclude email addresses, names, testimonial text, passwords and collection tokens; page categories remove query strings and private identifiers.

Widget and referral requests can record the referring website's hostname, a browser category, time, and a hash derived from an IP address and widget identifier to measure usage and reduce duplicate counts. Network providers still receive request information when delivering the service.

You can clear or block cookies and browser storage in your browser settings. Blocking authentication cookies can prevent sign-in. Clearing storage alone does not opt you out of future analytics or remove server-side records.

Retention and deletion

Account owners can delete testimonials or widgets from the dashboard and request account deletion in Account settings. Successful account deletion removes the authentication identity and its linked application records, and cancels associated active subscriptions.

Uploaded photos are scheduled for automatic deletion after they are at least 24 hours old and no testimonial references them. The cleanup job runs daily; unreferenced uploads are normally removed within about 48 hours, while failures or a backlog can take longer. Photos shared by multiple testimonials remain until all references are removed. Existing abandoned uploads are discovered gradually. We retain object identifiers and deletion timestamps to prevent deleted photos from being reused. For help with photo removal, contact embedproof@agentmail.to with the relevant collection or widget link and, if available, the photo URL. We may need to verify ownership or your connection to the submission before taking action.

Deletion from the application is not instant erasure from backups, provider records, operational logs, analytics, payment records, emails, caches, or copies already made by other websites or visitors. Those records follow separate provider and operational retention processes. Contact us to discuss a broader removal request.

Your choices and requests

You can manage your password and testimonial email preferences in Account settings. If you submitted a testimonial, contact the business that collected it to request a correction or removal. You can also ask EmbedProof about access, correction or deletion by emailing embedproof@agentmail.to. Include enough information to locate the account or testimonial; do not send your password or payment-card details.

Updates to this notice

We may update this notice as the service changes. The date above identifies this version.