← Back to Trust CenterConstitution §3.1.1
Your data. Your purposes. Your call.
Not one checkbox for everything. Seven discrete purposes, each with its own consent, each revocable in one click.
| Purpose | Plain-English meaning | Required? | Notes |
|---|---|---|---|
account_creation | Create your ProveIQ account | Required | Cannot use ProveIQ without this. Contains only what login needs. |
profile_processing | Store and display your profile fields (name, education, skills) | Required | Needed to match you to projects. Visible only to you until portfolio_publicity is enabled. |
ai_evaluation | Submit your work to Claude for scoring against employer rubric | Optional | Opt-in per submission. Revoking blocks further evaluations but does not delete past scores. |
portfolio_publicity | Publish your profile at proveiq.in/p/<username> | Optional | Opt-in. Revoking removes public profile within 24 hours and blocks OG previews. |
employer_sharing | Allow employers who posted projects you attempted to see your score | Optional | Scope-limited to employers whose briefs you submitted work for. |
marketing_comms | Receive our weekly "This Week in Verified Skills" newsletter | Optional | Unsubscribe inside every email. Revoke also via Settings. |
leaderboard_inclusion | Appear on public domain leaderboards (by score) | Optional | Opt-in. Off by default for under-18 without parental consent. |
How we prove each consent was genuine
Every consent record in our ConsentLog table stores:
- • userId + purpose (which checkbox)
- • grantedAt with IP address + user-agent
- • consentTextHash — SHA256 of the exact wording you saw when you clicked
- • revokedAt (nullable) + IP when revoked
If our consent wording changes, you see the new text and re-consent. The old hash proves what you originally agreed to. Audit-compliant.