Privacy Policy

What we collect

To produce a report we collect: your email address (to deliver the report), the pay stub file(s) you upload, and the details you enter about the application — the applicant’s first name and last initial only, the stated employer, state, and claimed income.

Data minimization

We deliberately store the applicant’s first name and last initial only — not a full name, Social Security number, or date of birth. ProofSweep is a document-and-business check, so we keep the minimum needed to run it.

Security & encryption

Uploaded pay stubs are encrypted in transit and at rest and kept in private storage that is never publicly accessible. They are used only to produce your report — never shared or sold. (Our reviewer accesses them solely to verify the documents.)

Report availability & retention

Your report is available to view and download for up to 365 days after it’s delivered. After that, the report and the uploaded pay stubs are automatically deleted. These files are never shared, sold, or included in any other customer’s report, and you can request their removal at any time by emailing support@proofsweep.com.

We keep a minimal, de-identified fraud-prevention fingerprint of each submission for longer than the document-retention window above: the risk verdict together with one-way hashes and normalized features of the documents (for example the employer name and the pay amounts). This fingerprint never includes your Social Security number or an image of your documents. It exists solely to recognize the same fabricated documents if they are submitted again — by anyone — and is never shared, sold, or included in any other customer’s report.

Shared verifications (renter self-check)

If you check your own pay stubs and choose to share the result, we create a link — protected by a short access code you control — that lets whoever you send it to view your verification on ProofSweep. It shows your name, employer, and the reviewed result as of the date checked. The link is viewable for 30 days (after which a fresh check is needed so the information is never stale); this access window is separate from how long we retain the underlying data (above). You decide who to share the link and code with, and you can ask us to switch a link off at any time by emailing support@proofsweep.com.

How we use it

• To run automated checks and prepare your report.
• To detect documents recycled across different applicants (the duplicate scan).
• To deliver the report to the email address you provided.

Who we share it with

We use third-party services strictly to produce the report (document AI, business-records lookups, payment processing, email delivery). We do not sell your data.

Cookies & analytics

On our public website pages we use Google Analytics to understand how visitors find and use the site — for example, which pages are viewed. It sets cookies and collects standard, non-identifying usage data such as pages visited, browser and device type, and approximate (city-level) location. We do notrun analytics on the private, tokenized report links, so your report and the documents behind it are never sent to any analytics service. You can opt out with Google’s browser add-on or your browser’s cookie controls.

No accounts

There is no account or password. Your report is delivered through a private, tokenized link emailed to you.

Contact & data requests

For privacy questions, information, or to request deletion of your data, email support@proofsweep.com.