Compliance
How we handle data, in plain words.
A one-page summary for security reviewers and for agents that need to check policy before they act. Replace every section with your own policies.
Placeholder copy — not legal advice
Data retention
Fetched page content is cached for 24 hours to de-duplicate calls, then deleted. Request logs keep URLs and status codes for 30 days.
Training
Customer requests and responses are not used to train models. Describe your own position here in one sentence.
Sub-processors
List the hosting, logging and payment providers you rely on, with the region each one processes data in.
Data residency
State where requests are processed and stored, and whether customers can pin traffic to a region.
robots.txt and site terms
Tools honour robots.txt by default, identify themselves with a clear user agent and never log in or submit forms.
Security reviews
Explain how customers can request a security questionnaire, a pen-test summary or a DPA — and how fast you reply.
Report a vulnerability
Send details to the address below. We acknowledge reports within two business days. Replace this address with your own before publishing.