Privacy Policy

1. Who we are

Prove We Can't ("PWC", "we", "us") operates the Prove We Can't platform and community. We are committed to protecting your privacy and handling your data in an open and lawful way.

2. Data we collect

We collect and process the following where relevant to your use of the service:

• Account data: email address, display name, and password (stored securely).
• Profile data: badge number, membership status and expiry, and any information you add to your profile.
• Content you create: Shine stories, job listings, Tumbleweed posts, comments, likes, address book entries, and reports.
• Payment data: we do not store full card details; payments are processed by Stripe. We may store billing-related identifiers and membership status linked to your account.
• Technical and usage data: IP address, browser type, device information, and logs of how you use the site (e.g. for security and improving the service).

3. How we use your data

We use your data to:

• Provide, maintain and improve the PWC platform and membership services.
• Authenticate you and manage your account and membership.
• Process payments and manage subscriptions (via Stripe).
• Display your content (e.g. stories, jobs, posts) in accordance with your choices and our terms.
• Enforce our Acceptable Use policy, respond to reports, and protect the community.
• Comply with legal obligations and protect our and others' rights.
• Send you service-related messages (e.g. password reset, membership confirmation). With your consent we may send marketing; you can opt out at any time.

4. Legal basis (UK/EEA)

We process your data on the basis of: (a) contract (to provide the service you signed up for); (b) legal obligation (e.g. tax, fraud); (c) legitimate interests (security, improving the service, enforcing our terms); and (d) where we ask for consent, your consent (e.g. optional marketing).

5. Sharing your data

We may share data with:

• Service providers: e.g. Supabase (hosting and databases), Stripe (payments), and providers that help us run the site. They act on our instructions and are bound by data protection obligations.
• Other members: where you choose to make content or profile information visible (e.g. display name on posts, address book entries marked public to members).
• Authorities: when required by law or to protect rights and safety.

We do not sell your personal data.

6. Retention

We keep your data only as long as needed for the purposes above: e.g. for the life of your account and membership, and afterwards as required for legal, tax or safety reasons. You can request deletion of your account and associated data subject to those exceptions.

7. Your rights

Depending on where you live, you may have the right to: access your data; correct or complete it; request deletion; restrict or object to certain processing; data portability; and withdraw consent. You also have the right to complain to a supervisory authority. To exercise these rights, contact us using the details below.

8. Security

We use appropriate technical and organisational measures to protect your data (e.g. encryption, access controls, secure providers). No system is completely secure; we will notify you and regulators where we are required to do so in the event of a breach affecting your data.

9. International transfers

Our providers may process data outside the UK/EEA. Where we do so, we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) are in place.

10. Contact

For privacy questions, to exercise your rights, or to contact our data protection contact, email us at privacy@provewecant.com (or the contact address published on the site). We will respond within a reasonable time.