Privacy Policy
Last updated: 22 August 2026
This policy explains what personal data Proven collects, why, and the rights you have over it. It covers both employers (hiring teams with accounts) and candidates (people taking a trial shift). We process data in line with UK GDPR.
Who is responsible
Proven operates the platform. For candidate data processed during a trial, the hiring employer decides the purposes of the recruitment exercise and Proven processes candidate data to deliver it. Contact for all privacy matters: team@provenshifts.com.
What we collect
- Employers: your work email, company name, and the role descriptions and materials you provide.
- Candidates: your name and email; everything you produce during a shift — conversation transcripts, voice recordings (both what you say and the AI teammate's replies), code changes, test results, terminal activity, written standups, and your usage of the in-trial AI assistant where the employer allows it; plus the AI-generated evaluation and feedback derived from that material.
- Technical: essential cookies for signing in and running a session. No advertising cookies, no third-party analytics.
Why we process it
- To run the recruitment exercise you're taking part in (performance of steps taken at your request prior to a possible contract, and the employer's legitimate interest in assessing candidates).
- To produce your evaluation and your written feedback report. Automated tools assist the assessment, but the hiring decision is always made by a human at the employer — Proven only ranks and evidences.
- To keep an audit record of AI prompts and outputs (quality, safety and compliance), and to measure per-session service costs.
Where it lives and who touches it
Data is stored with Supabase in the UK/EU (London region). To provide the service we use a small set of processors: Supabase (database, authentication, file storage), Anthropic (language-model processing of transcripts and code for trial generation, conversation and evaluation), Deepgram (speech-to-text and text-to-speech for voice blocks), Fly.io (isolated coding sandboxes), Resend (transactional email) and Vercel (application hosting). We don't sell personal data, and we don't use candidate material to train models.
How long we keep it
Candidate material is kept for the duration of the employer's recruitment exercise and then for a limited period so the employer can review decisions, unless deletion is requested sooner. Sandboxes are destroyed at the end of each coding block.
Your rights
- You can request access to, correction of, or deletion of your data at any time — candidates included. Deletion removes your profile, transcripts, recordings, code and evaluations. Email team@provenshifts.com or ask the employer who invited you.
- You have the right not to be subject to a solely automated decision with legal or similarly significant effect. Proven is built so that no such decision occurs: rankings are decision support, and advancing or rejecting is a human choice.
- If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
We'll post any changes here and update the date above. Material changes affecting candidates will be reflected on the trial landing page before you start a shift.