DATA HANDLING
What happens to your financial documents?
Revenue Recovery AI: founder-approved 2026-10-01. Two items remain TO BE CONFIRMED (35-day backup deletion, 72-hour breach notification) pending operational + counsel sign-off.
Revenue Recovery AI reviews invoices, contracts, statements, and accounting exports to identify possible revenue leaks. Findings are drafts for your review, not proof that money is legally owed or a guarantee of recovery. Upload only records you are authorised to share. Do not include payment-card numbers, government identity numbers, health information, or other sensitive personal information the service is not designed to handle.
Your uploaded files are temporary. We use temporary storage while analysing them, then delete those temporary files after processing, including when analysis fails. We keep the resulting analysis records so you can review them: extracted information, financial values, findings, explanations, filenames, and a digital fingerprint of each document. Deleting the original upload does not delete this saved analysis.
Some extracted information goes to OpenAI. We send information taken from your records rather than attaching the original uploaded file. This can include invoice and contract details, accounting records, amounts, findings, and personal information appearing in those fields.
OpenAI states that its standard API inputs and outputs may be retained for up to 30 days by default, and longer where the law requires it or where it is reasonably necessary to protect the service or others from harm. We disable storage of reusable AI request state, but that does not remove OpenAI's separate retention for abuse monitoring. We do not claim Zero Data Retention. Deleting your workspace here does not delete information already retained by OpenAI.
Your data is not used to train AI models. We do not use your personal data to train or improve our own or providers' AI models. OpenAI states that API business data is not used for training by default; we have not opted in. We do not sell personal data or share it for advertising.
Your workspace is separate from other customers' workspaces. Access to analyses and recovery records is restricted to your business and each user's role. We do not combine your records with another customer's to produce their findings. Authorised infrastructure operators may need limited access for maintenance, support, recovery, or security. Passwords, password-reset tokens, and team-invitation tokens are stored as one-way fingerprints, rather than readable originals.
You control customer-facing actions. Recovery actions start as drafts. Before a recovery email, invoice, or other communication can leave the system, a person at your business must approve the action and separately trigger it. Nothing auto-sends. You remain responsible for checking the recipient, amount, currency, and supporting evidence.
You can export and delete your data. Your workspace Owner can delete an individual analysis or the whole workspace. Workspace deletion requires confirmation and the Owner's current password. The DPA draft provides for removal of active business data within 30 days of a confirmed deletion. Cancelling a subscription changes billing; it does not delete your workspace.
Backup copies follow a separate schedule. Application-created backups have a default 14-day age limit and 14-copy limit. Render manages its own snapshots; its stated availability period is not a maximum retention guarantee. A 35-day deletion guarantee covering every backup remains TO BE CONFIRMED. Records required by law may be retained for the required period.
We do not claim SOC 2 or ISO 27001 certification. A fixed 72-hour breach-notification promise remains TO BE CONFIRMED. This summary reflects the current DPA draft; final contractual wording and outstanding commitments must be settled before use.