Privacy & data retention

What we store

• Account data: email, name, password hash (never plaintext).
• Operational data: jobs (operation, status, timing, challenge descriptor), usage events, credit ledger.
• Security data: sessions (hashed tokens, IP, user agent), audit log.

Retention

• Job history is retained per your plan's historyRetentionDays.
• Uploaded challenge content is not retained beyond the job lifetime by default.
• Ledger and audit records are retained for accounting integrity.
• Sessions expire automatically; revoking a session logs it out immediately.

Deletion

Deleting your account (Settings → Delete account) anonymizes your identity, revokes all sessions and API keys, and retains only anonymized operational records required for accounting integrity.

Third parties

Challenge content is sent only to providers the operator has enabled. When billing is configured, payment data is handled by the payment provider — card details never touch our servers.