The short version: your uploaded files are deleted as soon as processing starts, your summaries stay in your archive until you delete them, and we collect nothing we do not need to run the service.
01What we process, and for how long
Uploaded documents are stored just long enough to be read and queued for summarization, then deleted from storage; this deletion is implemented in code, not policy. Summaries and cited claims are stored in your archive until you delete them or your account. Account data is your email address, plan, and usage counters. We never see or store a password because there is none.
02Subprocessors
Anthropic (the summarization model; under its commercial API terms, inputs and outputs are not used for model training), Vercel (hosting and temporary file storage), Supabase (database, hosted in the EU, Stockholm), Stripe (payments; we never see card numbers), Resend (transactional email), Google Analytics (aggregate site usage, IP anonymized). Where a subprocessor processes data outside the EU, transfers rely on the mechanisms in that subprocessor’s data processing terms, such as the EU-US Data Privacy Framework or standard contractual clauses.
03Your rights
Access, correction, deletion, portability, and objection, per the GDPR. Deleting a summary removes it immediately; asking us to delete your account removes the account row, sessions, archive, and usage counters. Write to us via the contact form and we answer from the operating inbox.
04What we do not do
No advertising trackers, no selling or sharing of data, no training on your documents, no human reading of your content except when you explicitly ask for support on a specific job.
05Cookies and local storage
One session cookie when you sign in (httpOnly, needed to operate the account) and a theme preference in local storage. Google Analytics is configured with IP anonymization.
Processor terms are in the data processing addendum; acceptable use is in the terms.