Privacy Policy

Proa is operated by Rafael Cabrera, a natural person in Spain, under the public product name Proa. Privacy questions can be sent to privacy@getproa.app.

A professional postal address and any tax registration details are under legal review. Proa does not publish a residential address.

We process account profile data such as email, name, locale, authentication identifiers, and subscription state.

We process personal finance data you add to the app, including budget accounts, categories, transactions, notes, wallets, assets, allocations, regimes, and portfolio history.

For AI reports, Proa uses portfolio holdings, allocations, and market context. Proa does not need your name, email, password, or login details in report prompts.

If you enable Proa AI, Proa may process Assistant chat messages, assistant responses, selected data-source permissions, chat history settings, context sources, proposals, feedback, usage, and operational telemetry.

We use data to provide the app, secure your account, operate billing, generate reports, answer Assistant chats, prepare reviewable proposals, deliver transactional emails, handle support, prevent abuse, and comply with legal obligations.

We do not use Google Analytics, Google Tag Manager, advertising pixels, or advertising cookies at launch.

Proa AI is optional. In Settings, you can turn it on or off, choose whether it may read Budget, Investments, and Reports data, and decide whether recent chat history may be used for follow-up questions.

When Proa AI is enabled, Proa sends Assistant messages and relevant allowed financial context to OpenAI to generate responses or prepare proposals. API requests are sent with storage disabled where supported by OpenAI. This does not mean the data never leaves Proa.

AI Assistant messages and AI Reports are separate product features. Assistant messages support chat answers and reviewable proposals. AI Reports use a separate report-generation pipeline and quota.

Proa uses AWS for hosting, storage, authentication, databases, and logs; Stripe for payments and billing; OpenAI for AI report generation and optional AI Assistant responses; Tavily for market research used in reports; Resend or AWS SES for transactional email; and Cloudflare for DNS, security, and email routing.

Google Gemini may be used later only if OCR features launch. MailerLite and Anthropic/Claude are not active processors for the MVP.

Reports are kept for 90 days unless you delete them earlier. Assistant chat messages and runs are kept for the conversation retention period configured by Proa, currently 90 days by default, unless you delete the chat earlier.

Some related records, such as preferences, usage, feedback, security logs, billing metadata, backups, fraud prevention, tax, dispute, suppression, and legal records, may be retained when legally or operationally required.

You can download account profile data in Settings. Profile export includes Assistant records such as conversations, messages, preferences, runs, proposals, usage, and feedback. Full product exports for Budget, Investments, Reports, and billing records may still require a manual privacy request while Proa continues automating cross-module exports.

Deleting a chat removes that Assistant chat and related Assistant records from the active Assistant store. Account deletion is processed through an authenticated deletion request and may retain limited records where required.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of personal data.

To make a request, email privacy@getproa.app from the email associated with your Proa account.