Privacy Policy

Gold Standard Web LLC runs OptProof. This explains what it stores about your contacts and why. Your business controls that data; we process it for you.

What we store

• Contact phone numbers, encrypted (AES-256-GCM), plus a keyed hash used to match them. Contact names and emails are not stored; an evidence export reads them live from your CRM.
• Consent proof: the consent text shown, the page address, a saved copy of the page, the time, and the IP address and browser when the form provides them (IP encrypted).
• The words of opt-out replies and the text of messages sent, encrypted, only for the evidence trail.
• Do-not-call results from your scrubber, do-not-disturb changes, Rule Check decisions and a log of each send (time, channel, local time, which rules applied).
• Your team members' names, work emails and roles in the app.

Why

To enforce the settings you choose, and to give you evidence of consent, opt-outs and send times if a demand letter or lawsuit arrives.

How long

Evidence is kept for 5 years from the later of when it was captured or the last send to that contact (pending confirmation by our attorney). Export files are deleted after 30 days and can be made again. If you remove the app, enforcement stops and evidence stays read-only and exportable for the same period.

Who processes it

• Netlify (hosting and file storage), Neon (database), Resend (email), Sentry (error reports, with personal data removed).
• Anthropic, only if you turn on the optional opt-out classifier: it receives the text of unclear inbound replies with phone numbers, emails and links masked, never names or contact ids.
• No do-not-call data partner in this version: OptProof reads your own scrubber's results inside your CRM.

Deletion

Ask in writing at hello@goldstandardweb.com. We send you a full export first, then delete everything for that account within 30 days and record that we did.

Never

We never sell contact data, never message your contacts, and never log tokens, phone numbers or message text.