Privacy Policy

Last Updated: October 18, 2026

1. Introduction

Provena AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you partner with us for B2B growth and lead generation services.

2. Information We Collect

Information You Provide

  • Contact information (name, email, phone number, company name)
  • Business information (industry, target market, company size)
  • Communication preferences
  • Payment information (processed securely through third-party providers)

Automatically Collected Information

  • Website usage data (pages visited, time spent, referring URLs)
  • Device information (IP address, browser type, operating system)
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

  • Provide and improve our growth partnership and lead generation services
  • Communicate with you about our services, updates, and offers
  • Process payments and manage your account
  • Analyze service performance and user behavior
  • Comply with legal obligations and protect our rights
  • Personalize your experience and optimize our partnership strategy

4. Information Sharing and Disclosure

We may share your information with:

  • Service providers who assist in our operations (email platforms, analytics, payment processors)
  • Professional advisors (lawyers, accountants, auditors)
  • Law enforcement or regulatory authorities when required by law
  • Third parties in connection with a business transaction (merger, acquisition, or sale)

We do not sell your personal information to third parties.

5. Text Messages

When you book a call with us and give your mobile number, we use it only to send you text messages about that call, such as booking confirmations and reminders. Message frequency varies, up to four messages per booking. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt in data and consent are excluded from any information sharing with third parties, except the service providers who deliver our messages on our behalf.

6. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we will securely delete or anonymize your data.

Records of which organisation visited our marketing pages are kept for 13 months. The lookup cache that links a hashed network address to an organisation is kept for 30 days.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access your personal information
  • Correct inaccurate or incomplete data
  • Request deletion of your information
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

9. Cookies and Tracking

Google Tag loads on eligible public marketing pages with advertising storage denied everywhere. For visitors in the European Economic Area, the United Kingdom and Switzerland, and for any browser that sends Global Privacy Control or Do Not Track, analytics storage is also denied until you allow it. In that state it may send cookieless consent, page and completed action signals for privacy safe modelling, and it does not read or write Google Analytics cookies. For other visitors analytics storage is on by default, and you can decline it at any time. With analytics storage on, Google Analytics can use cookies to help us understand referral sources, devices, engagement, completed tools, resource access and discovery call bookings. We do not send form contents, booking details, email addresses or phone numbers to Google Analytics. Advertising storage, advertising personalisation and Google advertising signals remain disabled.

Private Provena application routes, onboarding pages, client domains, white label domains, and tokenised client pages are excluded from this marketing measurement. Declining analytics prevents Google Analytics storage and limits measurement to cookieless signals. It does not affect website functionality.

Allowing analytics also covers identifying the organisation a visit comes from by its network address, through MoltSets. When you allow analytics, each marketing page you view is recorded with the page, the referring site and any campaign tags, and the network address is sent once to MoltSets to find the company it belongs to and that company's public business details. We store the organisation, never the person, and never the raw network address: only a salted one way hash of it, used to avoid repeat lookups and to group page views. We do not fingerprint devices, read other cookies or use cross site identifiers. Nothing is recorded or looked up without your permission, or when your browser sends Do Not Track or Global Privacy Control.

You can grant or withdraw permission at any time through Analytics preferences in the website footer. Withdrawing permission stops future measurement and removes accessible Google Analytics cookies from this site.

The booking page embeds Calendly so visitors can view availability and book a call. When the scheduler loads, Calendly receives the technical and booking information needed to provide that service and applies its own privacy notice.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: