Privacy Policy

Last updated: April 3, 2026

1. Data We Collect

  • Account information: Email address and profile data from your OAuth provider (Google, GitHub, Microsoft, or Discord). We do not collect passwords.
  • Uploaded files: Binary files you submit for analysis. These are stored temporarily in private cloud storage.
  • API keys: LLM provider API keys you supply are encrypted at rest using AES/PGP encryption and used only for the duration of the analysis. They are purged along with job data.
  • Analysis results: Structured reports, classifications, and artifacts generated by AI analysis of your files.
  • Usage data: Basic request logs, job metadata, and performance telemetry for service operation and debugging.

2. How We Use Your Data

  • To perform the file analysis you request.
  • To operate, maintain, and improve the Service.
  • To enforce usage limits and prevent abuse.
  • To send job completion notifications (email, if configured).

3. Storage & Retention

  • Uploaded files and analysis reports are retained for up to 30 days after job completion, then automatically purged (files deleted, report data nullified, status set to "purged").
  • Failed job binaries are purged after 3 days.
  • You can delete any job and its associated data at any time from the dashboard.
  • Account deletion removes all your data, including jobs, files, reports, and profile information.

4. Third-Party Services

We use the following third-party services to operate FormatSense:

  • Supabase — Authentication, database, and file storage (hosted on AWS).
  • Google Cloud Platform — Worker compute (Cloud Run), task queue (Cloud Tasks), and scheduled jobs (Cloud Scheduler).
  • Cloudflare — DDoS protection, WAF, and Turnstile CAPTCHA.
  • Vercel — Frontend hosting and serverless API routes.
  • Sentry — Error monitoring and performance tracing.
  • LLM Providers (Anthropic, OpenAI, Google) — AI analysis is performed using your own API key; data sent to these providers is subject to their respective privacy policies.

5. Your Rights

  • Access & deletion: You can view and delete your jobs at any time. You can delete your entire account from the Settings page.
  • Data portability: Analysis reports and artifacts are available for download while the job is active.
  • Opt out: You can stop using the Service at any time by deleting your account.

6. Cookies

We use essential cookies for authentication (Supabase session) and analytics (Vercel Analytics). We do not use advertising or tracking cookies.

7. Changes to This Policy

We may update this policy from time to time. Continued use of the Service after a change constitutes acceptance of the revised policy.

8. Contact

Questions about privacy? Contact us at [email protected].