Privacy Policy

Overview

Prova is a financial modeling platform operated by IndraNet Technologies LLC (“we,” “us,” “our”). We take your data privacy seriously — especially because we know the financial data you work with can be sensitive. This policy explains exactly what data we collect, how we process it, and what we never do with it.

What We Collect

• Account information: Your email address and name when you create an account. Passwords are hashed and salted — we never store them in plain text.
• Model inputs and outputs: When you save a model, your inputs and computed results are stored in our database so you can access them later. You can delete saved models at any time.
• Authentication tokens: If you sign in with Google, we receive a profile token from Google OAuth. We do not access your Google data beyond basic profile information.

Document Uploads

When you upload a document (PDF, Excel, Word, or CSV) to auto-fill model inputs:

• Your file is processed in memory on our servers. It is never written to disk and never stored.
• Text is extracted, matched to model fields, and then the file data is immediately discarded.
• If AI-powered parsing is used, extracted key-value pairs (not the raw file) are sent to our AI provider for field matching. See the AI section below.

AI Features & Third-Party Processing

Prova uses Anthropic's Claude API to power AI insights, document parsing, and investment memo generation. When you use these features:

• Your model inputs, outputs, and extracted document text may be sent to Anthropic's API for processing.
• Anthropic's API has a zero-data-retention policy — they do not store, log, or train on any data sent through their API. Your data is processed and immediately discarded.
• No raw uploaded files are ever sent to third parties — only extracted numerical values and text context.
• AI features are optional. All models work fully without them, using built-in analysis rules.

What We Never Do

• We never sell your data to third parties.
• We never use your financial data for advertising or profiling.
• We never store uploaded documents beyond the parsing session.
• We never share your model inputs or outputs with other users.
• We never train AI models on your data — neither do our AI providers.

Data Storage & Security

• All data is transmitted over HTTPS/TLS encryption.
• Our database is hosted on Neon (PostgreSQL) with encryption at rest and network-level isolation.
• Authentication is handled through NextAuth.js with industry-standard session management.
• Passwords are hashed using bcrypt before storage.

Your Rights

• Delete your data: You can delete any saved model from your account at any time. Contact us to delete your entire account.
• Export your data: You can export any model results as PDF or Excel at any time.
• Opt out of AI: All models function fully without AI features. If AI processing fails or is unavailable, the platform falls back to built-in analysis automatically.

Contact

Questions about your data or this policy? Reach out at privacy@prova.finance