Privacy & retention
Private pilot privacy notice — provisional, not counsel approved.
Product facts, uploaded files, decisions and audit events are stored on this server. Only minimum product facts and retrieved tariff evidence are sent to Google Gemini when you start classification. Raw model responses are not retained. Original uploads are deleted after the workspace retention interval (default 30 days). Parsed records remain until a deletion request. Authentication metadata is minimized; IP addresses are hashed for rate limits and not written to application logs. Google provider processing and retention terms need owner review before customer use. When paid billing is enabled, payments are processed by Stripe; card details never touch this server. No analytics provider is enabled.