How we handle your data

What happens when you upload a file

When you upload a remittance to the free analyzer, the file is sent over an encrypted (HTTPS) connection to our servers, where we parse it and run our classification engine to produce your estimate. We store the results — the file name, detected distributor, totals, and the flagged line items — along with the uploaded file itself, against an anonymous session, so the tool can show your results again, let you verify individual lines, and let us diagnose a file we read incorrectly. No account is required.

We delete anonymous uploads after 30 days

If you use the free tool without an account, your analysis, the remittance file you uploaded, and any documents you attach to it are automatically deleted after 30 days. We keep as little as we need, for as short a time as we can. If you create an account, we keep your analyses so you can come back to them — and delete them whenever you ask.

If we can't read your columns, we send a shape — not your data

When a file's layout defeats our automatic detection, we ask an AI provider which column holds the deducted amount. It receives only a statistical profile of each column — how often it holds a number, how often negative, its rough magnitude, and text samples with the digits masked. Your amounts and invoice numbers stay on our servers. We then re-run the analysis with the suggested columns and keep the result only if it actually produces deductions; otherwise we ask you to pick the column yourself.

Verifying a line uses an AI provider

Verifying a specific flagged line is optional. If you upload a supporting document to check a charge, we store that document with your analysis and send its contents to a third-party AI provider solely to read it and return a verdict. We don't use your documents to train models, and anonymous documents are deleted on the same 30-day schedule. If you don't verify a line, no document is ever uploaded.

Every action is logged — and you can see it

We keep an append-only activity log of everything that happens in your account: file uploads, every time an AI model reads one of your documents (including what it was asked and what it returned), verdicts, drafted letters, and status changes. If you have an account, you can read your own log any time under Activity, and export the complete record as JSON or CSV.

Each entry is chained to the one before it with a cryptographic hash, so any after-the-fact edit or deletion is detectable. That's a deliberate, honest limitation to be clear about: this defends against silent tampering and accidental change — it is not a claim that a determined attacker with full server access could never rewrite history. We'd rather tell you exactly what the safeguard does than oversell it.

When you choose to share more

If you ask us to recover deductions for you, you'll deliberately share the specific documents needed to build your cases. That's a decision you make — not a default. We only ever use your data to do the work you've asked us to do.

No dark patterns

• No account required to use the free tool.
• No selling of your data, ever.
• Anonymous uploads — files included — auto-deleted after 30 days.
• Column matching sends a statistical profile, never your line items.
• No mandatory sales call to see value.