We use a minimal set of third-party services — only those strictly necessary to operate, secure, and improve the platform. We do not use advertising trackers, social media pixels, or retargeting technologies.
What We Use and Why
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Stripe | Payment processing | Payment card data, billing address | stripe.com/privacy |
| AWS (Amazon Web Services) | Cloud hosting and encrypted data storage | All encrypted app data | aws.amazon.com/privacy |
| SendGrid (Twilio) | Transactional email (receipts, security alerts) | Email address, name | sendgrid.com/policies/privacy |
| Sentry | Error monitoring and crash reporting | Device info, error stack traces (no user content) | sentry.io/privacy |
| Mixpanel | Anonymous feature usage analytics | Anonymized event data (no incident content) | mixpanel.com/legal/privacy-policy |
What We Do NOT Use
- Facebook Pixel or any Meta tracking technology
- Google Analytics (beyond what may be embedded in our payment processor)
- Advertising or retargeting pixels of any kind
- Third-party social login trackers
- Hotjar, FullStory, or any session recording tools
- Any tool that accesses the content of your incident records
Cookies
Website (myhrproof.com)
We use a minimal set of cookies on our website:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| session_id | Strictly Necessary | Maintains your logged-in session | Session (deleted on logout) |
| csrf_token | Strictly Necessary | Prevents cross-site request forgery attacks | Session |
| stripe_mid | Functional | Fraud detection by Stripe during checkout | 1 year |
| mp_analytics | Analytics | Anonymous usage analytics (Mixpanel) | 1 year |
We do not use advertising cookies. The analytics cookie collects only anonymized feature usage events — no personal data, no incident content.
Mobile App
Our mobile app does not use browser cookies. We use the device's secure storage to maintain your session token. We collect anonymous analytics events using a device-level identifier that cannot be linked back to you by third parties.
Your Choices
- Opt out of analytics: Email privacy@myhrproof.com with subject "Opt Out of Analytics" and we will flag your account to exclude it from all analytics processing.
- Browser cookie controls: You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in.
- Do Not Track: We honor browser-level Do Not Track signals by disabling all non-essential cookies for those sessions.
California Residents — CCPA Opt-Out
We do not sell personal data as defined under the CCPA. Our analytics data is anonymized and not personal data. Nevertheless, you may submit an opt-out request at privacy@myhrproof.com and we will remove your device from all analytics tracking.
Changes to This Policy
We will notify you of any material changes to the third-party services we use by updating this page and sending an email notification at least 30 days before the change takes effect.
Questions
Contact us at privacy@myhrproof.com with any questions about our tracking and cookie practices.