Privacy Policy

Effective August 8, 2026. This policy covers the Provostry service (provostry.com and api.provostry.com) and the Provostry Approvals iOS app.

What we collect

Only what the service needs to run

• Account email. Used to sign you in (passwordless magic links) and to send service email. Linked to your identity.
• Organizational operational data. The events your organization writes to its ledger — work packages, evidence, escalations, decisions, incidents, metrics. This is your data; we store and process it solely to provide the service.
• Billing. Payments are processed by Stripe. We never see or store card numbers; we keep only subscription status.

The iOS app

Provostry Approvals

The app collects your account email (sign-in) and displays your organization's escalations and decisions. Decisions you make are recorded in your organization's audit ledger, attributed to you — that attribution is the product. Your session token is stored in the device Keychain. The app contains no advertising, no analytics SDKs, and no tracking, and collects no data used to track you across apps or websites.

What we never do

Lines we don't cross

• We do not sell your data, ever.
• We do not use your organization's data to train models.
• We do not track you across other apps or websites, and we serve no third-party ads.
• We do not share your data with third parties except the processors that run the service (hosting, email delivery, payments) and integrations your organization explicitly connects (e.g. Slack, Teams, Telegram — escalation content is sent to the channel you configure, encrypted at rest on our side).

Retention & deletion

Your ledger is yours

Organizational ledgers are append-only by design — that immutability is the audit guarantee your organization relies on. If you want your account or your organization's data deleted, email dorrian@agent-forge.app and we will delete it within 30 days, subject to legal retention obligations.

Where data lives

Infrastructure

The hosted service runs on Fly.io (United States). Transactional email is delivered by Resend. Payments are processed by Stripe. Self-hosted enterprise deployments keep all data on your own infrastructure and none of it reaches us.

Changes

Updates to this policy

If this policy changes materially we will note it here with a new effective date. Questions: dorrian@agent-forge.app.