Privacy policy
Your evidence belongs to you.
Effective July 16, 2026
Information we process
We may process your email address, procurement requests, selected media metadata, provider account connection metadata, transaction references, license terms, receipts, invoices and evidence files you choose to store.
Why we process it
We use this information to authenticate you, search providers, screen license conditions, record purchases, generate evidence packs, prevent fraud and maintain an audit trail.
AI processing
Request text may be sent to configured language-model providers for structured intent extraction. Payment credentials, raw OAuth tokens and private evidence files are not intentionally included in model prompts.
Storage and security
Account and evidence data is stored in a private database and private object bucket with row-level access controls. Provider secrets remain server-side. Evidence files are not public by default.
Third parties
When you choose a provider, that provider processes information under its own terms. Infrastructure may include Vercel, Railway, Supabase and OpenRouter. We disclose only what is necessary for the requested operation.
Retention and deletion
We retain records while your account is active or as necessary to document a license transaction. You may request deletion using the data-deletion page, subject to legal, dispute and accounting retention requirements.
Contact
Privacy requests can be submitted through the contact page.