Privacy policy

1. What we collect: your name and email; your password and keys as irreversible hashes; usage counters; and the cases you send after masking ID numbers, phone numbers, emails, IBANs, cards and secrets.
2. Why: to make the decision, show it in your dashboard, let you confirm or correct it, and calibrate and train your account's own model.
3. Shared learning: on ready-made templates, with learning on, your corrections may improve the template for everyone through model weights only. Your text is never shared, and you can switch this off in settings.
4. Where: on our servers, encrypted in transit and at rest. A masked case may pass briefly through a language-model provider, which does not keep it for training.
5. Retention: for as long as your account exists. Deleting it removes decisions and corrections within 30 days; the audit log keeps fingerprints, not text.
6. Your rights: access, export, correction, deletion, and opting out of learning. We follow Saudi Arabia's Personal Data Protection Law where it applies.
7. What we never do: sell your data, or show it to anyone except to fulfil your request.

Last updated October 2026. This is an operating draft and will be reviewed by counsel before general availability.