Privacy notice

Supabase Auth processes account identifiers, email address, authentication records and session data so you can access private uploads. Passwords are handled by Supabase Auth and are not stored by this application.

PDFs and images are stored in a private Supabase Storage bucket under your authenticated user ID. They do not have a public object URL and do not become public evidence. Remove unnecessary passport, Emirates ID, phone, home-address, signature and unrelated personal information before uploading.

Raw uploads carry a 30-day retention deadline, and you can delete an upload earlier from your account. A protected automated cleanup job runs daily to remove expired private Storage objects and their associated raw-file references, retrying safely when Storage cannot confirm removal. Permitted anonymised aggregate data may remain only where you gave separate explicit consent.

A private document is sent to the configured model provider only after you explicitly select analysis. Model extraction creates structured suggestions with limited document excerpts; you must review, edit or ignore them before they can fill your audit. Suggestions are not official UAE facts, public evidence or price observations. The configured provider may process the document under its own service terms and retention controls; we do not claim deletion from third-party systems beyond what that provider actually supports. An anonymised contribution requires separate, optional consent and is off by default.

Private extraction suggestions are linked to the original quote submission and follow its lifecycle. Deleting the quote deletes its associated suggestions and temporary extraction metadata through database cascading. The application avoids storing an unnecessary second full copy of extracted raw document text.

The optional in-app feedback form records the selected tool area, feedback type, severity, optional clarity score, decision impact, current page pathname and an optional short comment. It does not ask for your name, email, account ID, session ID, IP address or uploaded-document contents. Do not include contact details, private documents or sensitive personal information in the comment. Feedback is an operator signal only and does not automatically become an official fact, Trust Score input, provider finding or ranking factor.

Product analytics record allow-listed event names and limited technical context. Analytics must not contain document contents, names, emails, full quotes, addresses or other personal information. Before an explicit external-beta cohort start is established, analytics are treated as QA/operator traffic rather than customer traction.

Contact or lead details are shared with a selected provider only after explicit consent. Quote uploads are not shared through the lead flow automatically.

My UAE provides a metadata-only download covering saved checks, quote and extraction-review metadata, Verified Experience status, your own reviews, your own lead/consent metadata and an account-linked commercial-order summary if such an order exists. It excludes raw private files, model suggestions, proof/security hashes, admin moderation, partner economics, payment-provider identifiers and secrets. You may delete individual uploaded quotes earlier or use the high-friction account deletion control. Account deletion runs a retention-blocker preflight before destructive work, removes private Storage objects first, then associated customer metadata, and only reports completion after the Auth account is removed. Official source-of-truth records and separately consented non-identifying aggregate data are not customer workspace records and are not removed by this control. Legal retention obligations, if any apply, will be communicated.