Privacy Notice

A document you upload is processed to produce your read. Names, addresses, and policy numbers are scrubbed before the text is sent to our AI providers. If you are not signed in, the document is not stored — it leaves with you when your session ends. If you sign in and choose to save a read, we store the read (and the text needed to quote it back to you) against your account until you delete it.

Premium comparison records, if you opt in, are stored as anonymous bands only (state, ZIP prefix, coverage bands, premium) with no name, address, or policy number, and with a delete code you control.

• Account data (name, email, avatar from Google sign-in) — to create and secure your account and attach saved reads to you. Legal basis: performance of our contract with you.
• Documents and saved reads — to produce and re-open your explanation. Legal basis: contract performance.
• Usage and technical data (masked IP, approximate country/region, timestamps, page and feature events, model usage counts) — to enforce free-tier limits, prevent abuse, keep the service reliable, and improve accuracy. Legal basis: legitimate interests.
• Support messages — to answer you. Legal basis: legitimate interests.
• Subscription records (plan, status, renewal dates, provider identifiers) — to give you the access you paid for. Legal basis: contract performance. Card details never reach us; Paddle handles them.

• Hosting, database, and authentication providers that run the service on our behalf.
• AI model providers, which receive redacted document text to generate explanations. They do not receive your identity.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing, and tax compliance.
• Professional advisers (legal, accounting) and authorities where required by law.

Unsaved documents are discarded when your reading session ends. Saved reads are kept until you delete them or your account is closed, plus a short 30-day export window. Usage and abuse-prevention logs are kept in aggregated or pseudonymised form and deleted or anonymised when no longer needed. Billing records are kept as long as tax and accounting law requires.

Subject to the law where you live, you can ask us to access, correct, delete, export, or restrict the personal data we hold about you, object to processing based on legitimate interests, or withdraw consent. Email privacy@polisays.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority. Data may be processed in the United States; where required we rely on Standard Contractual Clauses or an adequacy decision.

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls, and redaction of identifying details before documents reach any model provider. No system is perfectly secure, but we treat your paperwork as sensitive by default.

We use essential cookies and local storage to keep you signed in, remember your session, and enforce free-tier limits. We do not use advertising cookies. You can clear cookies in your browser, though signing in will not work without the essential ones.

AlienSquad, LLC — privacy@polisays.com