Privacy Policy

CheckThenSend is designed around short-lived document processing. Uploaded files are stored in a private temporary server directory only long enough to scan the file and, where supported, create a redacted copy. The default retention window is 30 minutes and is configurable by the operator.

What we retain

For signed-in users, CheckThenSend stores account details, plan and role information, verification status, scan metadata, risk scores and findings. It does not intentionally retain the original document after the temporary retention window expires.

AI processing

When AI scanning is enabled by the operator, document text or images may be sent to the configured AI provider to perform contextual or image analysis. The operator must configure and disclose the provider, regional processing, subprocessors and retention terms that apply to the production deployment.

Redaction

For text-based PDFs, the redaction workflow uses coordinate-aware PDF redactions that remove matched content and then writes a cleaned output file. Image-only or scanned PDFs may require additional image redaction because text can be embedded as pixels.

Account security

Passwords are stored as salted hashes. Email verification and password-reset links use one-time expiring tokens whose hashes are stored in PostgreSQL.

Before commercial launch

This policy is a product template and should be adapted to the legal entity operating the service, its hosting region, subprocessors, contact details and applicable law.