Consistent with our Privacy Policy, with technical detail. Privacy Policy
Uploaded plans are stored in PostgreSQL on your analysis row (inputData, originalImage, annotated payloads in result fields). We do not publish a public CDN URL for your plan. Admin RAG PDFs live under public/uploads/rag — separate from user uploads.
Records remain while your account exists so you can open History. Delete a row below or from History; account erasure follows the Privacy Policy (except where law requires logs).
We do not use your plans or reports to train our own models. Each run sends necessary content through OpenRouter to configured downstream providers (e.g. Qwen, DeepSeek). Third-party retention is governed by their terms.
Stripe processes payments; we do not store full card numbers. We keep paymentId and related metadata on the analysis row.
HTTPS in transit; app-layer auth on APIs; unpaid clients never receive resultData in JSON responses.
When logged in, delete completed or failed rows below; in-progress rows must finish first. Deletion cascades linked feedback and removes embedded plan/report JSON.