Privacy policy

This explains what personal data Provel collects when you use provel.co, the Provel MCP connector, our audits or our AI agent, what we do with it and the choices you have. Questions or requests: hello@provel.co.

01Who we are

Provel is a design and product studio registered in the United Arab Emirates ("Provel", "we", "us"). We're responsible for the personal data described here.

02What we collect

• Contact details you give us: your name, email, company and anything you write when you start a project, ask for a quote, join a waitlist, apply for a role or email us.
• Account details: if you connect the Provel MCP, your email (verified with a one-time code), your requests, messages, quotes, credit balance and deliveries.
• Payment details: for USDC payments, the transaction hash, amount and sending wallet address. These are public on the Base blockchain. We never ask for or store private keys or card details.
• Audits: the website address you ask us to audit, the results, a screenshot of the page and the email the report is sent to.
• Messages from AI agents: when another AI talks to our agent, we keep the conversation for up to a day so it can follow along, plus any brief or email it sends us.
• Usage data: privacy-friendly statistics from Vercel Web Analytics: which pages are viewed, how far people scroll, how long a page stays in use and which buttons are clicked. No cookies, no cross-site tracking and nothing that identifies you, and standard server logs (such as IP address and browser type) used for security and to keep the service running.

03How we use it

• To reply to you, prepare quotes, do the work you've asked for and deliver it.
• To run your MCP account: sign-in codes, balances, notifications and replies.
• To run audits and email you the report.
• To keep the service secure, prevent abuse (for example rate limits) and fix problems.
• To meet legal, tax and accounting obligations.

We only send marketing emails if you've asked for them (for example, the 0x waitlist), and every one has a way to opt out.

04Who we share it with

We use these providers to run Provel. They process data on our behalf and only for these purposes:

• Vercel (hosting and privacy-friendly analytics)
• Upstash (database for accounts, requests and audits)
• Resend (sending emails such as sign-in codes and reports)
• Anthropic (AI that powers our agent and the design review in audits; it receives the conversation or page screenshot it needs to respond)
• Google Fonts (loading our typefaces, which shares your IP address with Google)

Links to cal.com, X and Telegram take you to those services, and their own privacy policies apply there. We share data with others only if the law requires it or to protect our rights, and we never sell it.

05How long we keep it

• Audit results: up to 180 days.
• Agent conversations: up to 1 day. Briefs and leads they send us are kept like any other enquiry.
• Enquiries, accounts and project records: for as long as we're working together, then as long as needed for legal, tax and accounting purposes.
• Sign-in codes expire within minutes.

06Your choices and rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing hello@provel.co. We'll reply within 30 days. Data recorded on a public blockchain can't be changed or deleted by anyone.

07Security and international transfers

We use encryption in transit (HTTPS), access controls and rate limits to protect your data. Our providers may store and process data outside your country, including in the United States and the European Union; where that happens, we rely on their contractual safeguards.

08Children

Provel is a business service and isn't meant for anyone under 18.

09Changes

If we change this policy, we'll update it here with a new date. For significant changes, we'll let account holders know by email.

Last updated 2 October 2026 · Terms & refunds · provel.co