Privacy Policy
Last updated: 21 July 2026
This Privacy Policy explains what personal data Prody collects when you use our marketplace, how we use and protect it, who we share it with, and the rights you have over it. We are committed to data minimization and to processing your data lawfully.
1. Who we are (data controller)
Prody operates an online marketplace that connects people with independent experts for one-to-one video sessions and group events. For the purposes of this policy, Prody is the party responsible for processing the personal data described below.
Prody operates from Colombia and relies on service providers located in the United States and other countries to run the platform (see “Service providers and international transfers”). For any privacy request you can reach us at privacy@prody.net.
2. Information we collect
Account data: your email address, an optional phone number, your password (stored only as a cryptographic hash — never in plain text), your role (client or expert), and account status.
Profile data: your name, professional headline, biography, city and country, profile photo, banner and presentation video, languages, skills, and, for experts, professional background such as experience, education and certifications.
Identity verification (experts): to be listed, experts complete an identity check through our provider Didit (government ID plus a selfie). Prody does not store your identity documents or selfie; it only receives the verified name and the result of the check.
Payments and payouts: booking amounts, currency, commission, transaction identifiers, and — for experts — the payout method and payout details you provide. Card data is handled solely by our payment processor; Prody never receives or stores full card numbers.
Content and communications: posts and media you publish, direct messages, intake answers, and support tickets. Video and audio streams of your sessions are transmitted through our video provider and are not stored by Prody unless a group event host explicitly enables recording.
Technical and usage data: device push tokens (if you enable notifications), and product-usage analytics (page views, clicks, funnels) collected only after you accept analytics cookies.
3. How we use your data
To provide and operate the service: create and manage your account, publish profiles, run search and matching, schedule and hold sessions, and deliver messages and notifications.
To process payments and payouts, calculate commissions, and keep transaction records.
To verify expert identity, keep the marketplace safe, prevent fraud and abuse, and enforce our Terms.
To provide customer support (including an AI assistant) and to measure and improve the product through analytics.
To comply with legal, accounting and tax obligations.
4. Legal basis and your authorization
When you create an account you provide your prior, express and informed authorization to process your personal data for the purposes described here, in line with Colombian Law 1581 of 2012 (habeas data) and its regulations.
We also rely, as applicable, on the performance of our contract with you, our legitimate interest in operating and securing the platform, your separate consent for analytics cookies, and compliance with legal obligations.
5. Cookies and analytics
Essential cookies: we use strictly necessary cookies to keep you signed in (secure, http-only session tokens). These are required for the service to work.
Analytics: we use PostHog to understand product usage. Analytics run only after you accept in the cookie banner, and you can reject or withdraw at any time. We never place personal data in analytics events: you are identified only by an internal account ID, never by your name, email, phone or message content. Where session replay is enabled, input fields are masked.
6. Service providers and international transfers
We share the minimum necessary data with trusted providers that help us run the platform: Stripe (payment processing), Amazon Web Services (email delivery via SES, file storage via S3), Google Firebase (push notifications), LiveKit (in-platform video), Meilisearch (marketplace search), Cloudflare Turnstile (bot protection at sign-up/login), Didit (identity verification), PostHog (analytics), Sentry (error monitoring), and Google or Anthropic (the AI assistant that answers support questions).
Several of these providers process data in the United States and other countries. By using Prody you acknowledge that your data may be transferred internationally to these providers, which are bound to process it only on our instructions and to apply adequate security safeguards.
Payment card data is processed exclusively by Stripe under PCI-DSS standards; identity documents are held by Didit, not by Prody.
7. Data security
We protect your data with industry-standard measures: passwords hashed with Argon2id, encryption in transit (TLS) and at rest, encryption of sensitive secrets such as payout and integration credentials, revocable sessions, and role-based access controls.
No system is completely secure, but we work continuously to protect your information and to respond to incidents responsibly.
8. Data retention and deletion
We keep your personal data while your account is active. When you delete your account, we anonymize your personal data and revoke your sessions so the account can no longer be accessed.
Some records — such as transactions, invoices and security audit logs — are retained for the periods required by accounting, tax and legal obligations, even after account deletion.
You can delete your account at any time from your Account settings.
9. Your rights (habeas data)
You may access, update and rectify your data, request its deletion, and revoke the authorization you gave for its processing, subject to legal limits.
You can exercise these rights from within the app (edit your profile, manage notification preferences, reject analytics, delete your account) or by writing to privacy@prody.net. In Colombia you may also lodge a complaint with the Superintendence of Industry and Commerce (SIC).
10. Children
Prody is intended for people aged 18 or older. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact privacy@prody.net so we can remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version here and update the “Last updated” date; for material changes we will provide additional notice. Continued use of Prody after the changes take effect means you accept the updated policy.
12. Contact
For any question or request about your personal data, write to privacy@prody.net.
