PRIVACY POLICY
Last updated July 25, 2026
This Privacy Notice for Provenant LLC ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://provenantforensics.com/ or any website of ours that links to this Privacy Notice
- Use our forensic integrity platform. Provenant™ is a forensic integrity platform that provides forensic workstations and creative sandboxes. We utilize proprietary cadence analysis and rhythmic typing metadata to verify the human origin of digital content and assess academic or creative integrity. Our platform serves freelance writers, academic institutions, and enterprise entities by providing tools to protect and authenticate human-created work.
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your keystroke cadence and typing rhythm metadata. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process.
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. Learn more about how we keep your information safe.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by emailing us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us and the Services. The personal information we collect may include: names, email addresses, usernames, passwords, and payment metadata.
Sensitive Information. When necessary, with your consent or as permitted by law, we process:
- biometric data
- behavioral metadata (keystroke cadence and typing rhythm for integrity analysis)
Payment Data. We use Stripe for payment processing. We do not store or process your complete credit card information on our own servers. All financial data is encrypted and handled directly by Stripe in accordance with their privacy policy (https://stripe.com/privacy) and PCI-DSS compliance standards.
Information automatically collected
In Short: Some information — such as IP address and browser/device characteristics — is collected automatically when you visit our Services.
Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice section below.
- Log and Usage Data: Diagnostic, usage, and performance information collected by our servers.
- Device Data: IP address, browser type, hardware model, operating system, and system configurations.
- Location Data: Device location metrics based on IP address.
- Behavioral Integrity Metadata: Technical metrics including keystroke cadence, rhythmic typing patterns, and interaction intervals collected during workstation use to perform human-origin integrity verification.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
- Account Creation & Management: Retained for the duration of the account plus 30 days after deletion.
- Service Delivery: Retained for the duration of the user's active subscription.
- Customer Support: Retained for ticket resolution plus 90 days.
- Order Processing: Retained for 7 years from transaction date for tax compliance.
- Forensic Integrity Analysis: Processing keystroke cadence and typing rhythm metadata to generate integrity reports (Anonymized upon account closure or end of session).
- Security & Anti-Fraud Monitoring: Security logs retained for 12 months.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
We rely on legal bases such as Consent, Performance of a Contract, Legitimate Interests, and Legal Obligations under GDPR and UK GDPR.
- Analyze how our Services are used so we can improve user engagement and retention.
- Support marketing and promotional activities.
- Diagnose technical issues and prevent fraudulent activities.
- Understand how our users interact with our platform to improve overall user experience.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
We share data with select third-party service providers performing essential operations on our behalf:
- Payment & Billing Processing: Stripe
- Form Submission & Communication Services: Formspree
- Web Analytics Services: Google Analytics
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
We use cookies and Google Analytics to track and analyze site usage. To opt out of Google Analytics tracking across our Services, visit Google Analytics Opt-out.
6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
We offer tools powered by proprietary text and behavioral analysis engines designed to verify document origin. All input text processed via our analysis workstations is handled strictly in accordance with user data privacy standards and is not transmitted to third-party public models.
7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
Our primary servers are located in the United States. We implement Standard Contractual Clauses (SCCs) to protect international data transfers.
8. HOW LONG DO WE KEEP YOUR INFORMATION?
We keep your personal information for as long as necessary to fulfill the operational purposes outlined in this notice or as required by financial/tax laws.
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
We employ robust technical and organizational security controls designed to safeguard your metadata and personal information.
10. DO WE COLLECT INFORMATION FROM MINORS?
We do not knowingly collect data from or market to children under 18 years of age.
11. WHAT ARE YOUR PRIVACY RIGHTS?
Depending on your location (EEA, UK, Switzerland, Canada, US states), you have rights regarding data access, correction, deletion, and consent withdrawal.
12. CONTROLS FOR DO-NOT-TRACK FEATURES
We do not currently respond to automated browser Do-Not-Track (DNT) signals due to the absence of a uniform technology standard.
13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
US state residents (including California, Virginia, Colorado, etc.) possess specific rights to know, access, delete, and opt out of data sharing under local state privacy frameworks.
14. DO WE MAKE UPDATES TO THIS NOTICE?
Yes, we update this notice as needed to remain compliant with applicable legal standards.
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
To request a review, update, or deletion of your personal information, please submit a request to [email protected].