Privacy Policy

1. Information We Collect

Scan input: the document URL or raw text you submit for analysis, together with the analysis result produced for it.

Usage records: each scan is logged with a timestamp and outcome for abuse prevention and service monitoring. We do not collect names, email addresses, or account profiles — the Service operates without user accounts.

Subscription linkage: if you purchase a paid plan, your subscription is associated with an anonymous identifier generated in your browser and stored under the localStorage key "tos-tldr:anon-id".

2. How We Use Your Information

Submitted documents are processed to produce the summary, privacy risk, and hidden trap analysis. Analysis of documents you submit is delegated to a third-party large language model provider under a commercial data processing arrangement.

We use usage records to operate, secure, and improve the Service. We do not sell your personal information.

3. Payments

Checkout and payment processing are handled by Creem. Your card details and billing information are entered on Creem's hosted checkout and never pass through or are stored on our servers. We receive only the payment outcome and an opaque customer identifier needed to link your subscription.

4. Local Browser Storage

We store two items in your browser: an anonymous identifier (localStorage) used to link your subscription, and your most recent scan report (sessionStorage) so the report page can render it. Both remain on your device and can be removed at any time by clearing your browser storage — note that clearing the anonymous identifier may disconnect a paid subscription.

5. Data Retention

Analysis results and their derived cache entries are retained for up to 60 days, after which they are automatically eligible for replacement. Usage records are retained for operational purposes and deleted when no longer needed.

6. Your Rights

Depending on your jurisdiction (including the EU/EEA under GDPR and California under CCPA), you may have the right to access, correct, delete, or export personal information we hold about you, and to object to or restrict certain processing.

Because we do not maintain user accounts, the most direct way to exercise these rights is to contact us with the anonymous identifier from your browser settings (localStorage key "tos-tldr:anon-id") so we can locate the relevant records.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acknowledgment of the revised policy.

8. Contact

Privacy questions and rights requests can be directed to privacy@tosanalyzer.com.