Audit · Privacy
What happens to the prompts you paste
You are being asked to paste work content into a stranger’s form. That deserves a straight answer rather than a wall of policy language, so here is exactly what happens to the text, in order.
| Question | Answer |
|---|---|
| Who reads it? | One person — Justin Davis. Nobody else, no contractors. |
| Where is it stored? | Encrypted at rest with the payment and delivery provider, in a single audit record. |
| How long is it kept? | 30 days, then deleted automatically. Ask sooner and it goes sooner. |
| Is it used to train models? | No. Never sent to any model provider for training, fine-tuning or evaluation. |
| Is it shared or sold? | No. Not with partners, not in aggregate, not as marketing material. |
| Could it appear in an example? | Only with your written permission, fully redacted. The default is no. |
The sequence, step by step
- You paste. The text travels over TLS and is written to a single record tied to your order. It is not logged in plain text anywhere else.
- It is read once, by a person, to write your report. Nothing is auto-processed by a third-party analysis service.
- Your report is written and emailed. The report quotes your prompts back to you — that is the deliverable — and lives behind an unguessable link.
- After 30 days the transcript record is deleted. The report link expires at the same time unless you ask to keep it.
Redact freely — it doesn’t hurt the analysis
The audit is about structure: how long your prompts are, how much history rides along with them, how often you restate things. Replace client names, credentials, customer data, proprietary identifiers and anything under NDA with placeholders. A transcript where every function is called doThing() still tells the full story about token spend.
Never paste secrets — API keys, tokens, passwords, personal data about third parties. If one slips through, email and it is removed immediately.
Deleting early
Reply to your order email with “delete” at any time. The transcript is removed within one business day and you get confirmation. If the report has not been written yet, that cancels the order and refunds it.
What is kept longer than 30 days
Only what is legally or operationally necessary: the payment record held by the payment processor, your email address, and the fact that an audit was delivered on a given date. None of that includes your transcript or the contents of your report.
If your employer needs to approve this
That is reasonable, and the honest answer is that a redacted transcript usually clears internal review much faster than a raw one. Send whatever your policy allows — a partially redacted session is still a useful audit.