1. What We Collect
We collect the minimum data necessary to provide our service:
- Account information: Email address and password (hashed) when you create an account.
- Uploaded documents: Regulatory dossiers you upload for analysis (PDFs). These are stored encrypted and deleted automatically 60 minutes after your report is generated.
- Payment information: Processed entirely by Stripe. We never see or store your card details.
- Usage data: Analysis history and report metadata (device names, target markets selected, timestamps).
2. Zero Data Retention Policy
Uploaded dossier files are permanently deleted from our storage systems exactly 60 minutes after your gap analysis report is generated. This is an automated, non-reversible deletion. We do not retain copies of your regulatory documents.
Report output (the gap analysis findings) is retained in your account dashboard for your reference until you delete your account.
3. How We Use Your Data
- To generate your regulatory gap analysis report.
- To send you email notifications when your report is ready (via Resend).
- To maintain your analysis history in your account dashboard.
- To process payments via Stripe.
- We do not use your documents to train AI models.
- We do not sell your data to third parties.
4. AI Processing
Your documents are processed by Anthropic's Claude API under Anthropic's enterprise data privacy terms, which guarantee that inputs are not used for model training. The extracted text of your dossier is sent to the Claude API solely for the purpose of generating your regulatory gap analysis.
5. Data Storage and Security
- Documents are stored encrypted at rest in Supabase (AWS infrastructure).
- All data is transmitted over HTTPS/TLS.
- Access to your data is restricted to you via authenticated account sessions.
- Row-level security policies ensure users can only access their own data.
6. Third-Party Services
- Supabase: Database and file storage (AWS)
- Anthropic: AI document analysis
- Stripe: Payment processing
- Resend: Transactional email
- Vercel: Application hosting
7. Your Rights
You may request deletion of your account and all associated data by emailing us. Given our 60-minute file deletion policy, documents are typically already deleted before you make such a request.