Your document. Your decision.
Local document handling
The browser parses supported files and performs supported OCR locally using assets served by this app. Original files, filenames, and reversible mappings are excluded from the review payload. Automatic entity and pattern detection is incomplete; inspect the extracted text and outbound redactions yourself.
Optional local restoration
Mappings are kept in memory by default. Optional per-task persistence encrypts the mapping and source anchors in browser storage using a separate passphrase. The passphrase stays in memory and a refresh locks restoration. A lost passphrase or deleted local data cannot be recovered by the service. This is not a guarantee against a compromised device.
Your review choices
Automatic pattern detection is incomplete. Review the extracted text and add names, commercial details, and other sensitive phrases yourself. Amounts, dates, and contextual clues are not automatically removed. Confirm the exact outbound text before submitting.
Local demonstration
Demo reviews use deterministic example rules, not an AI model. Sanitized reports and demonstration balances may be stored in your browser. Clear them in Settings. Do not use real sensitive contracts in the demo.
Live service design
Live sanitized text and reports have a 30-day payload window. Production stores payloads in private R2 objects read through the authenticated Worker; local development may use D1 fallback. Scheduled deletion and account deletion remove payloads, sessions, and credentials, while pseudonymous billing and audit records are retained separately. Remote deletion and recovery acceptance remain pending. Provider retention and locations must be confirmed before launch.
Before public launch
This is a development disclosure. Operator identity, a working contact route, subprocessors, legal policy review, and verified remote retention/deletion terms must be completed before public account launch. See Contact and AI Disclosure for the current status.