Privacy Policy
Last updated 2026-07-23.
RAM-only by design
Real values found in your requests (names, phones, IDs, cards, and so on) and your AI provider key exist only in per-request memory. They are never written to any database, log, cache, file, or backup. When your response is sent, they are gone.
The only two encrypted-at-rest exceptions
(1) Your secret-words list, stored encrypted so we can mask those terms. (2) Deep Read results, encrypted and kept at most 24 hours, delivered once then deleted. Your provider key is never stored at all, not even encrypted.
Logs
Our logs record counts and timings — how many items were masked, how long a request took — never the values themselves. Backups therefore contain zero personal data and zero provider keys by design.
No cloud model sees your raw text
Detection runs entirely on our own machines. We never send your unmasked text to any outside service for masking or OCR.