Privacy Policy

Prova Technologies, Inc. (“Prova,” “we,” “us,” or “our”) is committed to protecting the privacy of our customers and their clients. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our vehicle storage operations platform (the “Service”). Please read this policy carefully before accessing or using our platform.

Personal Information. When you register for Prova, we collect information you provide directly, including your full name, email address, phone number, company name, billing address, and payment information. For team members added to your account, we collect their name and email address.

Facility Data. We collect data about your facility including its name, address, physical configuration (bay layouts, climate zones), operational settings, and subscription preferences. This information is necessary to deliver the core features of the Service.

Vehicle Data. We store comprehensive vehicle records that you input into the platform, including make, model, year, VIN, color, condition notes, photographs, service history, and climate log data. We also store owner association records linking vehicles to their registered owners.

Owner Contact Data. For vehicle owners whose assets you manage, we store the contact information you provide, including name, email address, phone number, and mailing address. This data is held on your behalf as a data processor.

Usage Analytics. We automatically collect certain technical and usage data when you interact with the Service, including IP address, browser type, operating system, pages visited, features used, session duration, and clickstream data. This information helps us improve the platform and diagnose technical issues.

IoT and Sensor Data. For facilities using connected climate monitoring hardware, we collect temperature, humidity, and environmental readings from integrated sensors at the frequency configured by the facility administrator.

Service Delivery. We use the information we collect to operate, maintain, and improve the Prova platform; to process transactions; to authenticate users and control access; and to generate the reports, alerts, and records that are core to the Service.

Communication. We use your contact information to send transactional emails (account setup, billing receipts, password resets), operational notifications (climate alerts, service reminders), and, with your consent, product updates and announcements. You may opt out of marketing communications at any time.

Platform Improvement. Aggregated and anonymized usage data helps us understand how facilities use Prova, identify areas for improvement, develop new features, and optimize platform performance. We do not use individual vehicle or owner records for product development purposes.

Compliance and Safety. We may use information to detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service; to comply with legal obligations; and to protect the rights and safety of Prova, our customers, and third parties.

All data stored on the Prova platform is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. We maintain SOC 2 Type II compliance, which is audited annually by an independent third-party assessor. Audit reports are available to Enterprise customers upon request under NDA.

The Prova platform is hosted on Amazon Web Services (AWS) in the United States, specifically in the us-east-1 (N. Virginia) region. We utilize AWS security services including AWS Shield for DDoS protection, AWS WAF for application-layer filtering, and AWS KMS for encryption key management.

We maintain automated daily backups with a 30-day retention period. Backups are stored in geographically separate AWS regions and are encrypted using the same standards as primary data. Recovery time objectives (RTO) and recovery point objectives (RPO) are documented in our Enterprise SLA.

Access to customer data by Prova personnel is restricted on a need-to-know basis, governed by role-based access controls, and logged for audit purposes. All Prova employees with data access undergo background checks and sign confidentiality agreements.

We do not sell, rent, or trade your personal information or your customers' data to any third parties for their marketing or commercial purposes — ever. Data you enter into Prova belongs to you.

We share data with third-party service providers only to the extent necessary to deliver the Service. These providers are contractually bound to process data only as directed by Prova and in accordance with this Privacy Policy. Current sub-processors include:

• Stripe — Payment processing and billing
• Amazon Web Services — Cloud infrastructure and storage
• SendGrid — Transactional email delivery
• Datadog — Application monitoring and error tracking

We may disclose information when required by law, court order, or governmental authority; when necessary to protect our rights or the safety of our users; or in connection with a merger, acquisition, or sale of assets (in which case we will notify you before your data is transferred and becomes subject to a different privacy policy).

As a Prova account holder, you have the following rights with respect to your personal information:

• Access. You may request a copy of the personal information we hold about you at any time.
• Correction. You may update or correct inaccurate personal information through your account settings or by contacting support.
• Deletion. You may request deletion of your account and associated personal data. Vehicle and facility operational records will be purged within 30 days of account closure, subject to any legal retention requirements.
• Portability. You may export your facility data, vehicle records, and operational history in machine-readable formats (CSV, JSON) at any time from the platform settings.
• Opt-out. You may opt out of non-essential marketing communications at any time by clicking the unsubscribe link in any email or by updating your notification preferences in account settings.

California residents have additional rights under the CCPA, including the right to know what personal information is collected and how it is used. To exercise any of these rights, contact us at privacy@getprova.com.

Essential Cookies. We use session cookies that are strictly necessary to authenticate users and maintain sessions on the Prova platform. These cookies cannot be disabled without disabling the Service.

Analytics. With your consent, we use analytics tools to understand usage patterns and improve the platform. Analytics data is anonymized and aggregated. You may opt out of analytics tracking via the cookie preference center accessible from the platform settings.

We do not use third-party advertising cookies or sell tracking data. We do not participate in cross-site tracking networks.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (sent to the address associated with your account) and by posting a prominent notice on the platform at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account before the effective date.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 5 business days.