Privacy

Where it is kept and who can see it

Pages are served by Cloudflare. Saved readings and accounts are held in Supabase in Sydney (AWS ap-southeast-2), encrypted at rest and in transit. Payments are handled by Stripe. Sign-in links and receipts are sent through SendGrid. Those four are the only processors. Saved readings are kept until you delete them or close your account. Support opens a saved reading only when you ask us to.

What the reading does with your text

The reading runs in your browser. The text you paste is not sent anywhere while it is read, and no request is made to another origin. It leaves your browser only if you save the reading to your account, and then only the record the reading made.

What is stored when you save

The name you give the reading, the reading itself (each requirement's clause code, its reading and the sentence that decided it) and the text you pasted, shortened. Email addresses are removed from anything saved, and any cell over 300 characters is dropped before it is stored. Save policies and procedures, not participant records.

What we ask for and why

• An email address, to sign you in without a password and to send a receipt. Nothing else.
• A payment card, to Stripe. Card details never reach us or this site.
• The text you paste, only if you save a reading.

Your data

You can delete a saved reading, and you can close the account, from the account page. Deleting leaves no copy of the reading content. Questions: support@theartofservice.com.

The requirement data

The requirement pages are public and need no account. Nothing about reading them is stored against you beyond ordinary server logs, which Cloudflare keeps for security.