Clear about the data we do—and do not—handle.

01

Website & call booking

This website does not include analytics, advertising, or social-media tracking tools. It does not set first-party analytics or advertising cookies.

Our hosting provider processes the technical connection data needed to deliver and secure the site, such as IP address, request time, browser information, and requested page. This information is used for operating and securing the website, not for advertising.

If you book a call, the booking link takes you to Google Calendar. Google collects the information you provide in its scheduling form under Google’s Privacy Policy. We receive the details needed to arrange the call, such as your name, email address, selected time, and any message you choose to provide. Please do not submit confidential documents or sensitive personal data in a booking request.

We use booking information only to arrange the call and follow up on your request.

02

Product data stays in your environment

Redactum is a local application, not a document-processing cloud service. In the ordinary redaction workflow, document reading, OCR where needed, detection, PDF redaction, and output generation happen on your machine. Redactum does not receive or store the original documents you process in that workflow.

The redacted PDF, sanitised text, and local audit artefacts remain in the environment where you run the application. You decide whether to share a sanitised output with another service.

03

Optional contract verification

Contract verification is separate from redaction and is off unless your organisation configures it. When you use it, Redactum sends sanitised contract text and an approved reference template to the OpenAI-compatible LLM provider your organisation has selected. That provider processes the submitted content under the agreement and privacy terms you have with it.

The verification report is saved locally. Your organisation is responsible for choosing a provider that is appropriate for its data, contracts, and applicable obligations.

04

Sharing & retention

We do not sell personal data. We share booking details with Google Calendar only as part of the scheduling service. We do not receive your ordinary redaction documents. An optional verification provider receives only the content your organisation sends through the configured verification step.

We retain booking and enquiry details for up to 12 months after our last meaningful contact, unless a customer relationship or a legal obligation requires a longer period. Product documents and local output artefacts are retained under your organisation’s control.

05

Changes to this policy

We may update this policy when the website, product, or the way we handle personal data changes. The latest version will always be published on this page with its update date.