Privacy Policy

1. What we collect

• Evidence you submit: documents, descriptions, and metadata you add to your case (awards, publications, press, patents, judging roles).
• Contact & payment identity: your email address (used for your dossier license and watermark) and Stripe's payment confirmation. We never see or store your card number.
• Operational logs: minimal request logs for security and rate limiting.

2. What we do with it

Your evidence is used for exactly one purpose: generating your dossier. Your documents are never used to train models and are automatically deleted 30 days after processing. We never sell or share your data.

When we query evidence sources (USPTO, Crossref, NewsAPI), only the name being searched leaves our server — no other personal information is transmitted.

3. How we protect it

• AI prompts are loaded from AES-256-CBC encrypted environment variables;
• API access uses JWT tokens scoped to your individual paid case;
• tiered rate limiting guards every endpoint against abuse;
• your PDF dossier is watermarked with your email and transaction ID on every page and carries a single-user license in its metadata.

4. Retention

Evidence documents are automatically deleted 30 days after processing. Payment records are retained as required for tax and accounting purposes. You may request earlier deletion of your case data by emailing naviramdeen@gmail.com.

5. Your rights

You may request a copy of the data we hold about you, correction of inaccurate data, or deletion of your case data at any time via naviramdeen@gmail.com.

6. Changes

Material changes to this policy will be noted with a new “last updated” date above.