Privacy policy

Your evidence belongs to you.

Effective July 16, 2026

Information we process

We may process your email address, procurement requests, selected media metadata, provider account connection metadata, transaction references, license terms, receipts, invoices and evidence files you choose to store.

Why we process it

We use this information to authenticate you, search providers, screen license conditions, record purchases, generate evidence packs, prevent fraud and maintain an audit trail.

AI processing

Request text may be sent to configured language-model providers for structured intent extraction. Payment credentials, raw OAuth tokens and private evidence files are not intentionally included in model prompts.

Storage and security

Account and evidence data is stored in a private database and private object bucket with row-level access controls. Provider secrets remain server-side. Evidence files are not public by default.

Third parties

When you choose a provider, that provider processes information under its own terms. Infrastructure may include Vercel, Railway, Supabase and OpenRouter. We disclose only what is necessary for the requested operation.

Retention and deletion

We retain records while your account is active or as necessary to document a license transaction. You may request deletion using the data-deletion page, subject to legal, dispute and accounting retention requirements.

Contact

Privacy requests can be submitted through the contact page.