DRAFT — PENDING LEGAL REVIEW. Placeholder scaffolding so the consent infrastructure can be built and tested. Replace with the lawyer-reviewed Privacy Policy before launch. The data-flow section below must be kept accurate to the real implementation (see the launch plan for the honest data-flow description). Regenerate with npm run generate:legal after editing.

Privacy Policy

Effective date: 15 July 2026

1. Who we are

Untraceable AI ("we", "us") provides confidential AI tooling for regulated fields. This policy explains what we process and how.

2. What we process, and where it goes

This section describes the actual data flow and must match the implementation:

• Document content. When you screen a document, its text is transmitted to our backend to perform detection and cloaking. Raw content is not persisted at rest in our database, and is never sent to an AI model — only token labels (e.g. [SLC_1]) are.
• Tokens and audit metadata. Token labels, run identifiers, and audit records are stored in our database, which is located in Canada. These records contain token labels, never the underlying sensitive values.
• AI processing location. Where an AI model is used, it processes only tokenised text in the jurisdiction (residency) selected for your project.
• Account data. Your sign-in identity (from Microsoft Entra External ID) and the consent records described below.

(Placeholder — counsel to confirm controller/processor roles, lawful basis, retention periods, and any regional disclosures.)

3. Consent records

When you accept these documents we record which version you accepted and when, for compliance and audit purposes. You can review your acceptances at any time on your Account → Legal & Agreements page.

4. Data retention and deletion

We retain your data for as long as your account is active. You may request deletion of a project's data; on request we remove the associated stored records. (Placeholder — final retention schedule and self-service deletion path to be confirmed.)

5. Sharing

We do not sell your data. We use sub-processors (e.g. cloud infrastructure and AI model providers) solely to provide the Service. (Placeholder — sub-processor list to be published.)

6. Your rights

Depending on your jurisdiction you may have rights to access, correct, or delete your personal data. Contact us to exercise them.

7. Contact

Privacy questions: info@theuntraceable.ai.