Privacy policy
FedPulse runs Proofsheet. This policy explains what we collect when you use https://getproofsheet.com, why we collect it, how long we keep it, and what you can ask us to do about it.
Last updated: 29 October 2026. Version: 1.0.
Proofsheet reports are technical evidence, not a legal certificate or legal advice. This policy covers the data behind those reports, not the reports themselves. The two are connected, so both statements appear on every legal page.
1. Who is responsible
FedPulse, available on request by email, is the controller of the personal data described below. For privacy questions, and to exercise any right in section 8, email support@getproofsheet.com.
2. What we collect
We keep the list short on purpose.
| What | When | Why |
|---|---|---|
| The software file you upload | When you upload | To produce the report. Deleted within 24 hours |
| File details: name, size, hash, detected type | When you upload | To identify the job and prove which file a report describes |
| Your email address | If you ask us to send you the link, buy anything, or write to us | To deliver the report, the receipt, alerts, and replies |
| Payment details | When you pay | Handled by Paddle. We receive a transaction reference, the plan, the amount, your country, and the invoice details. We never see your card number |
| The report itself | When the analysis finishes | So you can open your link again. Kept 30 days |
| Technical logs: IP address, browser type, timestamps, error messages | On every request | To run the service, stop abuse, and fix faults |
| Support emails | When you write to us | To answer you and keep a record of what was agreed |
| Waitlist email, plan, product count, and note | When you join the Watchdog or Agency waitlist | To tell you once when the plan opens. No marketing, no newsletter |
We do not buy personal data, and we do not collect it from social networks or data brokers.
3. Why we use it, and the legal basis
We use your data for these purposes only:
To produce and deliver your report. The legal basis is performing our contract with you: you asked for a report, we have to read the file to make one.
To take payment and keep accounting records. The legal basis is performing the contract, plus our legal obligation to keep tax and accounting records.
To keep the service working and stop abuse. The legal basis is our legitimate interest in running a service that is not overloaded, defrauded, or used to attack someone else. We keep this to what is needed: rate limits, error logs, and records of failed payments.
To answer your emails. The legal basis is our legitimate interest in supporting customers, or performing the contract if your message is about an order.
To keep a waitlist. The legal basis is your consent when you submit the form. You can withdraw it at any time by emailing us, and we delete the entry.
To send you product news. We do not do this today. If we ever do, it will be opt-in only, on a separate checkbox, and the legal basis will be your consent. Buying a report will never add you to a mailing list.
We do not use your file or your report to train machine learning models, and we do not sell or rent personal data to anyone.
4. How long we keep it
| Data | Retention |
|---|---|
| Your uploaded file | Deleted within 24 hours of upload, by an automatic job |
| The report and its document pack | 30 days from creation |
| Your email address and order details | As long as needed to provide the service, then deleted or anonymised |
| Waitlist entry | Until the plan opens, or until you ask us to delete it, whichever comes first |
| Payment and invoice records | For as long as tax and accounting law requires us to keep them |
| Technical logs | 30 days, then deleted or aggregated |
| Support emails | 2 years, so we can remember what was agreed |
If you ask us to delete something sooner and we are not required by law to keep it, we do. Email support@getproofsheet.com.
5. Who else touches it
We use a small number of service providers. Each one processes data only on our instructions, and each is bound by a data processing agreement.
Paddle. Takes payments, calculates tax, issues invoices, and handles refunds. Paddle is the seller of record for these transactions and is a controller in its own right for payment data. Its privacy policy applies to the card details you enter on its checkout.
Our hosting provider. Runs the website, the analysis worker, and our database. Uploaded files and reports sit on a private disk volume on that server. Access is limited to the service processes and the operator. We plan to host in the European Union when the service leaves the test environment.
Cloudflare. Provides the network path to the test environment and, later, DNS and protection for the live domain. It may process IP addresses and request metadata as part of that service.
Resend. Delivers our transactional email: report links, receipts, alerts, and replies. It is not switched on until the live domain is verified.
We do not share your file or your report with anyone else, except where the law requires it, or where you ask us to.
6. International transfers
Some of these providers store data outside the country where you live, including in the United States. When data leaves the European Economic Area, we rely on the European Commission's standard contractual clauses, or on a provider's certified framework where one applies. You can ask for a copy of the safeguards at support@getproofsheet.com.
7. How we protect it
Files travel over HTTPS and sit on a private disk volume with access limited to the service processes and the operator. Access to the database and the admin tools is restricted to the people who run the service. Payment card data never reaches our systems.
No service can promise perfect security. If a breach affects your data, we will tell you and the relevant authority as the law requires, and we will say what happened in plain words.
8. Your rights
You can ask us to:
- Show you the personal data we hold about you
- Correct it if it is wrong
- Delete it, where we are not required to keep it
- Send it to you or another company in a common format
- Stop using it for a particular purpose, where our basis is legitimate interest
- Withdraw a consent you gave earlier
Email support@getproofsheet.com and we answer within one month. We may ask one question to confirm who you are, usually by replying from the address on the order.
If you think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first, so we can fix it.
9. Children
Proofsheet is a tool for businesses. It is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has used the service, email support@getproofsheet.com and we will delete the data.
10. Cookies
We do not set first-party cookies or advertising trackers. Paddle may set cookies on its own checkout page, as described in Paddle's own privacy and cookie notice.
11. Changes to this policy
We may update this policy. The version number and date at the top change when we do. If a change affects what we do with data you have already given us, we will email anyone with an active plan at least 14 days before it takes effect.
12. Contact
FedPulse, available on request by email. Company registration: available on request by email. Email: support@getproofsheet.com.