Hardproof LLC ("Hardproof," "we," "us"), 30 N Gould St, Ste N, Sheridan, WY 82801, provides business-to-business consulting and professional services. This policy explains what we collect, why, who we share it with, and the choices you have. Questions or requests: blake@hardproof.io.
This policy applies to hardproof.io, our storefront and community hosted on Whop, our intake and onboarding forms, proposal and payment pages, and our products and services for business clients. Our clients operate their own websites and privacy policies; when we build or maintain systems for a client, that client is the controller of their own customer data and we act as their service provider under their instructions.
| Category | Examples | Why |
|---|---|---|
| Business contact | Name, business email, phone, company, role, timezone | Respond to inquiries, send proposals, deliver services, support |
| Course & community activity | Lessons opened, progress and completion, downloads, posts, comments, and chat messages you publish in the community | Deliver the content, verify entitlements and refund eligibility, moderate the community |
| Engagement details | Brand, scope answers, project preferences, assets you upload, approvals (typed name, timestamp, IP address) | Scope and perform the work; evidence a quote was approved |
| Onboarding progress | The answers you type as you go, including a form you haven't sent yet (never your EIN), which screen you reached, your IP address, approximate city, browser and device type | So your team can see where you got stuck, help you finish, and send you up to 3 reminders |
| Billing | Billing contact, invoice and transaction records, payment status, last four digits and card brand | Invoicing, payment processing, accounting, dispute handling |
| Account access | Platform invitations and permissions you grant us | Perform the build or maintenance you engaged us for |
| Usage | IP address, device/browser type, pages viewed, referring page, timestamps | Security, abuse and rate-limit protection, improving our site |
We collect information you give us directly (forms, email, calls, documents) and, automatically, standard technical data when you visit our site. We do not knowingly collect information from anyone under 18; our services are sold to business operators only.
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
Only with service providers that help us operate, under contracts limiting their use to our instructions:
We may also disclose information when required by law or valid legal process, to protect our rights, prevent fraud, or in connection with a merger, acquisition, or sale of assets (with notice where required).
Our site uses strictly necessary cookies and similar technologies for security, session handling, and to remember your progress in a form. We also keep a random device ID in your browser that links your visits to our onboarding form, client app and setup form, so we can help if you get stuck between them. Where we use analytics, it is limited to aggregate site-performance measurement. You can block or delete cookies in your browser; some form features may not work without them. We honor Global Privacy Control (GPC) signals where required.
We keep engagement and billing records for as long as needed to deliver services and then as required for tax, accounting, and dispute purposes, generally 7 years for financial records. Prospect and intake submissions that don't become engagements are deleted or anonymized within 24 months. Answers from an onboarding form that is never sent are deleted 90 days after your last activity. Sign-in and form records, including IP addresses, are kept for up to 365 days. You may request earlier deletion (see §08), subject to records we must retain by law.
We use encryption in transit (HTTPS/TLS), access controls and least-privilege permissions, password- and token-gated admin systems, and reputable infrastructure providers. Client secrets and API keys are stored in encrypted environment configuration, never in documents or email. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify affected parties and regulators of a qualifying breach as required by law.
We operate in the United States; if you contact us from outside the U.S., your information is processed in the U.S. under appropriate safeguards where required. We may update this policy prospectively; the current version and effective date are always posted at hardproof.io/privacy, and material changes will be communicated to active clients by email.