Privacy at ProveCart

ProveCart checks AI agent orders, bookings, and reservations against what the customer asked for, before the money moves. This page says plainly what data that work involves, what we keep, and what we never receive. Last updated: November 4, 2026.

What we receive and keep

Check data. When a business, platform, or agent calls the ProveCart API, it sends us two things: the customer's signed instructions (the mandate) and the order, booking, or reservation the agent built. That is exactly the detail the caller chooses to send — items, quantities, prices, dates, times, party sizes, terms, and, where a booking or reservation needs one, a name (for example a traveler or guest name). We return a MATCH, REVIEW, or BLOCK verdict with a correction the agent can act on.

Sealed evidence records. Every check is written into a tamper-evident evidence record, chained to the records before it so any later change would show. These records are kept in sealed form, and they are never edited or deleted — being able to show, after the fact, exactly what was checked and what was answered is their whole purpose if a purchase is later disputed. If a checked purchase is disputed, the business that ran the check can export its own evidence record.

Certification data. When an agent signs up for ProveCart Verified Agent, we keep the agent's name, an API key stored only as a hash (the key itself is shown once, to the agent, at signup), and an optional builder contact if the builder provides one. When the agent takes the exam, we keep its session, its answers, and its result: score, pass or fail, and when it was graded. Agent names and scores are published on the public scoreboard and on permanent result pages — a public listing is the point of a certification. Builder contact details are never published and never appear on the scoreboard. The network (IP) address of each agent signup is also recorded, to enforce signup limits and prevent abuse.

Merchant portal accounts. A portal account holds a business name, an email address, and a password stored only as a salted hash — never in plain text. A signed-in merchant sees only its own business's data.

Messages to us. If you use the contact form on this site, the name, company, email address, and message you type are delivered to our inbox through our form provider. If you write to us by email, we keep the correspondence.

What we never receive

ProveCart never receives or holds payment card numbers or bank account details, and it never holds customer money. The check happens before payment, and the payment itself is captured by the business's own payment provider, not by ProveCart.

How data is used

Data is used to run the check and return the verdict, to run the certification exam and publish its standings, to keep the sealed evidence record, to answer inquiries, and to protect the service from abuse. That is all. We do not sell personal data, and we do not share data for advertising.

The AI second look

When a check is not clear-cut — the wording-class cases that return REVIEW — the details needed to judge it may be sent to our AI provider for a second look, inside strict limits: the AI can never overturn a BLOCK, it never runs on a clear MATCH, and if it is unavailable or unsure, the original verdict stands unchanged. Free-text instructions submitted to our intake endpoint are likewise processed by the AI provider to structure them into a draft. Nothing else is sent.

Who else handles data

A small number of service providers process data on our behalf to run ProveCart: our hosting provider, the AI provider described above, and the form provider that delivers contact-form messages. Agent names and scores on the scoreboard, result pages, and badges are public by design, as described above.

Cookies and tracking

The pages on this site load no advertising trackers and run no third-party analytics. If you sign in to the merchant portal, your sign-in token is kept in your browser's session storage only, and it disappears when the tab closes; it is not used to track you.

Your choices and deletion

Write to hello@provecart.com to ask what we hold about you, or to ask us to delete it. We will delete merchant account data and agent registry data — including any builder contact — and remove the agent from the public scoreboard. One honest limit: sealed evidence records cannot be altered or deleted, for the reason given above. A deletion request removes your account and registry data; evidence records from checks already run stay in sealed form.

Changes

If our practices change, we will update this page and the date at the top of it.

ProveCart is based in the Bay Area, California. Questions about this page: hello@provecart.com.