Privacy Policy

• Uploaded Documents: PDF files you submit for compliance review. Processed in-session and not retained after report generation.
• Payment Information: Handled entirely by Stripe. We never see or store full card numbers.
• Email Address: Collected at purchase for order confirmation and account management.
• Usage Data: Request logs including IP address, timestamp, and API endpoint accessed. Retained for up to 90 days for security and abuse prevention.

• To process and return your compliance report
• To fulfill and manage your purchase
• To detect and prevent abuse, fraud, and security threats
• To communicate service updates (opt-out available)

We do not sell your data. We do not use uploaded documents to train AI models.

Uploaded PDF documents are not stored after your compliance report is generated. Payment records are retained as required by law. Usage logs are retained for 90 days.

• Anthropic: AI processing provider. Documents are transmitted to Anthropic’s API for analysis under their enterprise data use policy.
• Stripe: Payment processing. Governed by Stripe’s Privacy Policy.
• Vercel: Hosting infrastructure. Governed by Vercel’s Privacy Policy.

We implement industry-standard security measures including HTTPS/TLS encryption, rate limiting, input validation, and access controls. No system is completely secure; we encourage you to avoid uploading sensitive personal data beyond what is necessary for compliance review.

You may request deletion of your account data by contacting us at privacy@em385safety.com. California residents have additional rights under CCPA.

Privacy questions: privacy@em385safety.com