Privacy Policy

This Privacy Policy explains what information Proofboard Technologies collects, how we use it, and the choices you have, across the Proofboard dashboard, public profiles, the Proofboard CLI, and the recruiter platform at verify.proofboard.io.

Account information — via GitHub or GitLab OAuth: your name, email address, username/handle, and public avatar. We request only read:user user:email scope; we never request the repo scope to create your account.

Profile information you provide — headline, bio, skills, tools, social links, profile picture and cover image, and any narrative text you write for your proof assets.

Verified work data — depending on which verification method you use:

• Volume Proof: contribution counts from the GitHub contributions API.
• Public Proof: classification of your public repositories, performed server-side via the GitHub API.
• SHA Proof (via the CLI): commit SHAs, timestamps, commit counts, category labels, and milestone clusters — generated locally on your machine. Organization and repository identifiers are converted to a one-way SHA-256 hash before ever reaching our servers. Your git config email is likewise converted to a hash (“emailHash”) to link CLI activity back to your account without storing the raw address twice.

The Proofboard CLI is built around a step called the Shredder. Before any data leaves your machine, the Shredder permanently destroys and dereferences:

• Commit message text, in full;
• File names and file paths;
• Code diffs or file contents of any kind;
• Raw organization or repository names (only a SHA-256 hash is retained).

The CLI also never reads any file outside a repository’s .gitdirectory. This is an architectural guarantee, not a configurable setting — it applies to every sync, on every machine, without exception.

We use the information above to:

• Operate your dashboard, proof assets, and public profile;
• Calculate verification tiers and your Reputation Index;
• Send account-related notifications (e.g. sync completion, proof asset milestones);
• Operate the recruiter platform, where applicable and only as described in Section 6;
• Maintain the security and integrity of the Service.

We use essential cookies and local storage to keep you signed in and remember your theme preference. We do not use third-party advertising trackers.

We share information only in the following circumstances:

• Public profile: if you set your profile to public, the profile information and proof asset summaries you’ve chosen to display are visible to anyone with your profile URL, and may be indexed by search engines.
• Recruiter platform: only if you turn on the “Discoverability” setting (default: off) will your profile be surfaced to recruiters. The identity of any interested company is never shown to you until you engage with their screening questions; likewise, your identity is not disclosed to a company beyond what your Discoverability and public-profile settings already allow.
• Service providers: infrastructure and image-hosting providers that process data strictly on our behalf, under confidentiality obligations.
• Legal requirements: if required to comply with applicable law, regulation, or valid legal process.

We do not sell your personal information.

We retain account and profile information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required for legal or legitimate business purposes (e.g. fraud prevention, dispute resolution).

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information;
• Export your data;
• Opt out of Discoverability on the recruiter platform at any time;
• Withdraw consent where processing is based on consent.

You can exercise most of these rights directly from your account settings, or by contacting founders@proofboard.io.

We use industry-standard technical and organizational measures to protect your information, including encryption in transit. No system is completely secure, and we cannot guarantee absolute security.

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children under 16.

Proofboard is operated from Nigeria. If you access the Service from outside Nigeria, your information will be transferred to and processed in Nigeria, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and we will update the effective date above.

Questions about this Privacy Policy can be sent to founders@proofboard.io.