Provyne privacy notice

Who operates Provyne and who may join

Connor Savenas operates Provyne. The initial pilot is for people who are at least 18 years old and reside in the United States. This is a product participation rule. A school email or school affiliation does not establish age or permit disclosure of another person's records.

This notice covers the Provyne website and its connected pilot experience. It does not cover an employer's separate application website or an independent site you choose to visit. Use the monitored support contact shown on this page for privacy, account or safety questions.

Account and security information

We use your name, account email, chosen workspace, email verification, sessions and security activity to provide access and protect accounts. If you set a password, we store a salted password derivation rather than the password itself. Authenticator protection uses a protected authenticator secret and recovery-code hashes.

For the adult U.S. pilot, we record your age and U.S.-residence attestations, acceptance of the current terms and acknowledgment of the privacy notice. These are your statements; they are not an identity document check, proof of exact age or proof of location. We do not request a date of birth or identity document for this attestation.

The private acceptance record contains the policy versions and links, accepted time, country selection and whether confirmation used email proof or email plus an existing authenticator. It is saved after the required proof succeeds, appears in your account export and is removed during account closure.

Your career workspace

Your workspace may include reviewed resume text, document names, experience, education, skills, projects, credentials, interests, saved searches, applications, preparation drafts, rehearsal answers and learning progress. The resume parser processes supported files in your browser; saving the reviewed information sends that information to Provyne.

An imported contact or community reference is stored information, not a new account, accepted connection or granted group membership. Upload only records and documents you are authorized to use. Do not include passwords, verification codes, government identifiers, medical information or unnecessary sensitive details in career fields.

Profiles, connections and communities

Social discovery starts off. Separate controls determine whether eligible members can see your school, company, affiliations, connections, city and state, or profile visits. Network maps respect the relevant visibility and relationship settings. They use the location you supply and do not publish a live precise location.

Posts, comments, messages, group participation and event registrations share information with their chosen audiences. A mutual connection requires acceptance. Recipients may retain information they have already received, even after you change a setting or close your account.

Applications and recruiter information

Before a Provyne application is submitted, you review the information to share with the receiving employer's authorized hiring team. The submitted resume, profile and answers become an application snapshot; later profile edits do not rewrite that copy. Recruiter-only notes and confidential interview questions are separate from feedback an employer chooses to share with you.

An external application follows the destination site's process and privacy notice. Confirming in Provyne that you applied updates your tracker; it does not prove that an outside employer received or reviewed the application. Employers remain responsible for their own recruiting records and decisions.

Public pages and outside destinations

Public job and company pages can appear in search engines. Private resumes, account messages and recruiter notes are not content for those public search pages. Directory or verification labels do not guarantee an employer's future conduct or that every listed position remains available.

Following an external application link or choosing to play an externally hosted career video sends the destination the browser and network information needed to handle that request. Those independent services have their own practices.

Hosting, email and abuse prevention

The hosted service uses request information, such as network addresses and browser details, for delivery, security and abuse review. Necessary cookies maintain sessions and verification steps. Browser storage also helps clear stale account views across tabs. An explicitly labeled offline demonstration keeps demo workspace data on that device.

Provyne's application and primary databases run on DigitalOcean in New York, United States. We use Resend for requested account verification and recovery email and for incoming support and security messages, and Cloudflare Turnstile to distinguish human visitors from automated traffic. These services process the recipient, message, network, browser and security information needed for their functions. Their processing and retention practices also apply to provider-held information; selecting a U.S. application server does not mean that every provider processes all information only in that location.

For opted-in pilot participation, Provyne records days with successful signed-in activity and application outcomes. The pilot activity module removes activity days older than 180 days when activity is recorded; this is not a promise of a daily purge or that small-cohort reports are anonymous.

The web proxy does not keep HTTP access logs. Application and system security records are separate: container output uses size-based rotation targeting about 30 MiB per container rather than a fixed number of days, and the system journal is configured for 30-day retention and a 100 MiB size limit. Package-maintenance logs use six monthly rotations, and other system logs managed by rsyslog use four weekly rotations. Active log files and rotation schedules affect when older entries are removed. We use these operational records to maintain the service and investigate faults or abuse.

Features disabled for this launch

Paid checkout, live AI support and interview voice, external calendar synchronization, external video meetings and background-report purchases are not enabled for this free pilot. No subscription is activated by accepting these terms. Any later activation needs its own clear availability, data-use and consent notices.

Available support guidance and practice tools do not independently change account access, reveal an employer's undisclosed decision reasons or guarantee a human response. If a later live AI option would send questions, audio or career details to an outside provider, its confirmation must explain that transfer before you use it.

Optional career emails

Optional career-email delivery is off for launch. If it is enabled later, it requires a verified destination and opt-in. That destination does not change the sign-in or account-recovery email. Career digests contain job summaries and notices to check application updates, not private resumes, recruiter notes, interview questions or personal feedback text.

The prepared unsubscribe flow works without signing in: opening its link shows a confirmation page and confirming stops future optional digests and cancels queued ones. Pausing or unsubscribing does not stop requested account verification or recovery messages. A message already accepted by an outside email provider cannot be recalled.

Exports, suspension and deletion

Account settings let you edit profile details, change visibility, block or report members, review sessions, request an export, suspend the account or request deletion. Suspension retains saved information and submitted records while restricting access; it is separate from deletion.

A deletion request has a seven-day cancellation period, followed by authorized staff review and processing. Deletion is not instant or automatically completed on day seven. Identity checks protect these requests. Use support if you cannot access your account or need a privacy request reviewed.

Processing removes account-specific information across the registered stores. Delivered messages, employer application snapshots, certain shared history and restricted safety evidence may remain. Deleting an account does not erase a moderation ban or recall copies already held by another person or provider.

Retention and restricted records

Security-event history is bounded to 100 events per account and records older than 90 days are pruned during maintenance. Employer application records, delivered shared history, restricted moderation evidence and ban records do not all have automatic expiry. Their retention depends on the continuing purpose described here and the operator's review; an account deletion does not by itself remove every shared or restricted record.

Connor Savenas reviews retained records each month to determine whether they remain necessary for recruiting records, recipient history, security, a documented dispute or another applicable obligation. The review records the purpose, access restriction, any continuing hold and next review or disposal action. Information no longer needed is removed through the applicable account, provider or controlled maintenance process. Imported contact references are part of the importing member's private workspace and are removed with that workspace during completed account deletion; imports do not create another person's account or consent.

Routine backups are encrypted, with encryption keys held separately. Backup cleanup targets eligible archive-and-verification-receipt pairs older than 30 days, while preserving the newest verified recovery copy when needed. An older necessary recovery copy, an incomplete archive or a copy on an unavailable owner computer may remain longer and requires operator review. This is a cleanup target, not a guarantee that every copy expires on day 30. Offhost encrypted archives are held on the operator's access-protected computer. Before a restore is used to serve users, completed deletions must be reconciled so that an old backup does not silently restore a deleted account.

Minimal completed-deletion records are retained while needed for a permitted restore, a documented obligation or review of the deletion process. They are reviewed along with retained records and removed when those purposes end. Email already delivered to a recipient, employer downloads and other independent copies remain subject to their holders' practices.

Support, safety and policy changes

Authorized support and moderation reviewers may examine the issues and evidence submitted to them. We use access controls and other safeguards, but cannot promise that all scams or security incidents will be prevented. Never send passwords, sign-in codes or full identity documents through a support message.

Contact support@provyne.com to request access, correction, deletion or review of a restriction, and security@provyne.com for security concerns. Connor Savenas reviews these requests each weekday and may request information needed to verify your authority and protect another person's information. Requests for disclosure are reviewed before information is provided, and any disclosure is limited to the information appropriate for its documented purpose or applicable obligation. We do not promise a fixed resolution time.

We will publish a new dated version when this notice changes. When the current pilot participation requirements or published terms version changes, you must review and accept the updated requirements before continuing ordinary account use. Updating the privacy notice alone does not trigger that acceptance prompt. Recovery and security controls remain available to protect access.

Contact

support@provyne.com