Privacy Policy

Effective Date: June 18, 2025

Information We Collect

Information You Provide

• Vendor Messages: The text you paste into our form to generate decline responses
• Signature Information: Your name or signature block if you choose those options

Information We Collect Automatically

• IP Address: Used for rate limiting (20 requests per day by default) and abuse prevention
• Usage Analytics: Basic website usage through Google Analytics (you can opt-out)
• Technical Information: Browser type, device type, and access times for system monitoring

How We Use Your Information

Primary Service

• AI Processing: Your vendor messages are sent to Amazon Bedrock (Claude 3 Haiku) or OpenAI to generate polite decline responses
• Immediate Deletion: Messages are processed and immediately discarded - we don't store them
• Response Generation: The AI analyzes your message to create contextually appropriate responses

System Operations

• Rate Limiting: IP addresses are tracked to prevent abuse and manage costs
• System Monitoring: Technical logs help us maintain service reliability
• Usage Analytics: Anonymous statistics help us improve the service

Information Sharing

AI Service Providers

Your messages are sent to our AI providers for processing:

• Amazon Bedrock: Primary AI service (AWS data processing agreement applies)
• OpenAI: Fallback service when Bedrock is unavailable (OpenAI privacy policy applies)

No Other Sharing

We do not sell, rent, or share your information with any other third parties. Your vendor messages are never stored, archived, or used for any purpose other than generating your immediate response.

Data Retention

• Vendor Messages: Immediately deleted after processing (not stored in our database)
• Rate Limiting Data: IP addresses and request counts stored for 24 hours, then automatically deleted
• System Logs: AWS CloudWatch logs may contain technical information and error messages for troubleshooting, retained for 7 days
• Analytics Data: Anonymous usage statistics retained by Google Analytics per their retention policy

Your Privacy Rights

Google Analytics

You can opt-out of Google Analytics tracking at any time using the link at the bottom of our homepage. This will:

• Stop tracking your visits and usage
• Clear existing tracking cookies
• Prevent future data collection

Data Requests

Since we don't store your messages or personal information, there's typically no personal data to access, modify, or delete. For rate limiting data or other questions, contact us using the information below.

Advertising and Cookies

Current Advertising

We do not currently display advertisements. If we add advertising in the future, this policy will be updated to reflect those changes.

Cookies

We use minimal cookies:

• Google Analytics: If you haven't opted out, standard GA cookies track usage
• Opt-out Preference: A local storage item remembers if you've opted out of analytics

Security

We implement industry-standard security measures:

• HTTPS Encryption: All data transmitted to our site is encrypted
• AWS Security: Our infrastructure uses AWS security best practices
• API Protection: Rate limiting and CORS protection prevent abuse
• No Persistent Storage: Your messages aren't stored, eliminating data breach risks

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. When we do:

• We'll update the "Effective Date" at the top of this policy
• For significant changes, we'll prominently display a notice on our homepage
• Your continued use of the service constitutes acceptance of the updated policy

International Users

Our service is hosted in the United States using AWS infrastructure. If you're accessing our service from outside the US, your information may be transferred to and processed in the United States. By using our service, you consent to this transfer.