Privacy notice

Last updated September 30, 2026

This notice says what information we collect through provengroup.org and the RelationLens sign-in, and what we do with it. "We" means ProvenGroup LLC, a Colorado limited liability company.

If your organization is a client, your signed agreement and the RelationLens Terms of Service that come with it say how we handle the information you give us for your research. If this notice and your agreement differ, your agreement controls.

If you visit the site

Page views. We have switched page-view counting off for the home page, the approach page, this notice and the terms page. On the sign-in page and the signed-in pages, Vercel, the company that hosts our site, counts page views for us. For each view it records the page address, the page that sent you there, your approximate location, and the type of device, operating system and browser you use. Vercel states that it does this without third-party cookies and does not tie a page view to a person or an internet address.

Errors and speed. We use a service called Sentry to tell us when a page fails and how long pages take to load. This covers those four public pages, the sign-in page and the signed-in pages. Our server can also send Sentry a record of other requests it handles. Sentry receives the address of the page and technical details about the request and your browser. A report sent from your browser also reaches Sentry from your internet address, as any internet request does.

Server records. Vercel and Supabase, which host our site and database, keep their own technical records of requests. These can include internet addresses.

Cookies. We do not use advertising cookies. Our software sets only the cookies needed to sign you in and keep you signed in.

Email. If you write to us, your message is held in our Google Workspace mailbox. We may use an artificial intelligence assistant from Anthropic to help read and answer it.

Questionnaires. If we send you a questionnaire link, that page saves your answers only in your own browser until you email them to us.

If you ask for a sign-in link or sign in to RelationLens

Your sign-in. You sign in with a link sent to your email address. The sign-in page does not ask for a password. When a sign-in link is requested for an email address, Supabase, our database and sign-in provider, receives that address. For each sign-in account, Supabase holds the email address, the times sign-in emails were sent, the time of the last sign-in, and the internet address and browser type used for each sign-in. Supabase's sign-in service sends the link, and it may use a mail delivery company to do so.

Sign-in cookies. When you ask for a sign-in link, and again when you sign in, cookies are saved in your browser. They can stay for up to 400 days after your last visit, and you may be asked to sign in again sooner. Signing out removes the cookies that keep you signed in.

What you do in RelationLens. We store the marks, notes and comments you add, the review steps you take and when, and any message you send through the Help page, along with your email address and the page you were on.

Guided interviews. If you take part in a guided interview, we store your name, your role and your answers. An artificial intelligence model from Anthropic processes them to ask the next question and to prepare a summary. The interview page saves your place in your browser's own storage.

Request limits. To prevent misuse, our software reads your internet address to count your requests each minute. It holds that count in working memory only and does not save it to our database.

People named in research

Our research for clients draws on public records. Those records can include the names and roles of people at organizations. If you believe information about you is wrong, write to us.

Who receives information

We do not sell personal information, and we do not use it for advertising.

We share information with the companies that run our systems: Supabase (database and sign-in), Vercel (hosting and page-view counts), Sentry (errors and speed), Anthropic (artificial intelligence processing), and Google (email). Our working files and backups, which can include information a client gives us, are kept with GitHub, Microsoft OneDrive and Google Drive. Public records we research, which can name people, are also processed with Google's NotebookLM and xAI's Grok. We also have an internal tool that compares the quality of research runs. It can send public-records research to models from Google, xAI, OpenAI and Perplexity, and we run it only on public records or sample data. Contractors who work for us are bound to keep information confidential.

The RelationLens database is stored in the United States. Some of these companies may process information in other countries.

How long we keep it

Client research is kept and deleted as the client's agreement says.

We keep a sign-in account until we close it. We close an account when its organization's access ends or when its holder asks us to.

We have not set a fixed period for email and Help messages. We keep them until we delete them by hand, and you may ask us to delete yours.

Page-view counts, error reports and server records are kept by the companies named above for periods set by their services, not by us.

Your choices

You may ask us what personal information we hold about you, and ask us to correct or delete it. If the information belongs to a client's research, we may need to pass your request to that client. Deleting information from our live systems does not by itself remove it from older backup copies.

This site is for organizations. It is not meant for children, and we do not knowingly collect information from children under 13.

Changes and contact

If we change this notice, we post the new version here with a new date.

Questions or requests: ProvenGroup LLC, Trinidad, Colorado. Email mlewis@provengroup.org.