Privacy Policy

Owner: Iggy Mwangi

Do not paste confidential or customer data.

What is processed

The free local rubric can run in your browser without sending the text to our server. If you request a server report, the page masks email, phone and SSN-like patterns before sending; the server masks again. Masking is imperfect, so use anonymized text. The service stores the redacted input, preview, output, a random result id, model/rubric versions and token counts.

Configured third-party AI providers may receive the redacted text. The default order is Google Gemini, Groq, then Cloudflare Workers AI. Free AI tiers may allow a provider to use submitted content to improve its services. Verify current provider terms before launch. The page's "What we send and to whom" panel gives the available disclosure.

Stripe processes payments. The service stores the Checkout Session id, amount, product and payment status; it does not receive your card number. Cloudflare processes the human-verification challenge and may receive your IP address for that purpose.

Usage and your device

The service uses a salted, truncated IP hash in Cloudflare KV for rate limits and in D1 for inference-capacity reservations, rather than storing raw IP addresses in job, event or budget tables. Budget entries contain the UTC day, hashed IP and token/job counts; daily cleanup retains the current and previous two UTC days. Retry records contain hashed request identifiers and input fingerprints, plus the unpaid preview response after a successful run. Retry keys are usable for 24 hours; daily cleanup removes expired records. Deleting a report clears its D1 retry preview and result link immediately, leaving only a short-lived hashed tombstone to prevent an accidental retry from recreating it. Legacy KV retry previews expire after 24 hours and cannot restore a deleted report. Public event submissions store an allowlisted product and event kind, not the supplied input or link. Some server-side operational events may include a random result id until the result is deleted.

A draft may be saved in your browser's local storage. In optional bring-your-own-key mode, your browser calls the chosen provider directly; the key stays in memory unless you choose to save it locally.

Retention and deletion

A daily scheduled task is intended to remove stored input text after 30 days. Output remains available at the result link. Anyone holding that link can read, export or delete the result. Use "Delete my result" or DELETE /api/r/:id to remove the input and output. The order is unlinked from the deleted result; its session id and amount remain for accounting. Iggy Mwangi must decide and disclose the accounting-record retention period before launch.

Contact

Questions or deletion requests: contact us.

Informational only — not legal, financial, or career advice. No guarantee of outcomes.