What happens to what you paste.

What we store

• A counter per hashed IP address, to enforce the five runs per day. It holds a number and a timestamp, in Cloudflare KV, and expires after 24 hours. The IP is stored as a hash computed with a secret key, never in clear, and the counter contains none of your text.
• A pseudonymous identifier derived from the same hash is passed to the model provider’s abuse tooling with each request. It is not the IP address.
• An email address, only if you give us one. The forms described below (newsletter, Pro Kit opening, training) are the only places on this site that ask for an email. None of them is required to run Riftveil.
• Anonymous monthly decision totals, only if you tick the box. Decision, triage level and number of findings, added up per month; no text, name, ID or fingerprint. See the next section.
• Nothing else from the tool itself. No accounts, no cookies set by us, no third-party analytics or tracking scripts of any kind.

What we do not do

• We do not store, read or review the texts you paste or the reports you receive.
• We do not use your text to train anything, and the provider’s commercial terms exclude training on API inputs and outputs.
• We do not sell or share data with anyone. There is no data to sell.

What happens

• Record ID and seal. Each run receives an ID (date, time and random characters) and, at the end of the report, a seal computed by our server on a fingerprint of the ID, the protocol version, the model, the project, the context and the report. The text is used to compute the fingerprint during the run, then discarded like the rest.
• PDF and record file. They are built in your browser. The record file contains the project, the context and the report: it stays with you, and you decide who receives it.
• Verification (the Verify a report page, or the widget on another site). The fingerprint is recomputed in the browser of the person who checks. Only the ID, the fingerprint and the seal are sent to riftveil.ai. Nothing is stored.
• Follow-up, decision and signature. On the export page, you can fill in who checked, what was checked, who the open questions go to, your decision, the place and a signature (drawn or typed). All of this stays in your browser: it goes into your PDF and your record file, never to riftveil.ai. If you tick “Remember” (unticked by default), your last name, first name and role are kept in this browser only (local storage), to prefill the next report; untick it to erase them. If you enter the names of colleagues or other people, you or your organisation are responsible for that towards them. Riftveil has no access to it.
• Decision seal. When you click “Seal my decision”, your browser sends the report ID, the report fingerprint and seal, and a fingerprint of your follow-up, treated as pseudonymous data. Our server checks the report seal and returns a decision seal with the time. Your name, your decision and your signature are not sent. Nothing is stored except a counter per hashed IP address (60 seals per day, deleted after 24 hours).
• Decision statistics (optional). Only if you tick the box, after your decision is sealed: your browser sends the decision (proceed, proceed with conditions, do not proceed), the triage level and the number of findings, without text, name, ID or fingerprint. We add them straight away to monthly totals that hold nothing else: nothing links them to a report or a person. To stop a robot from skewing these totals, your IP address, hashed with a secret key and never kept in clear, feeds a counter of 50 sends per day, deleted after 24 hours. Legal basis: our legitimate interest in improving Riftveil and keeping accurate totals (General Data Protection Regulation, Article 6(1)(f)). The box is unticked by default.
• Registration of a report made elsewhere (the Register a report page). Only the fingerprint is sent, never the project or the report. We keep a counter per hashed IP address (30 registrations per day, deleted after 24 hours), nothing else.

What the fingerprint and the seal prove

• A fingerprint lets you confirm a text you already have, without containing it.
• A valid seal proves that riftveil.ai assigned this ID at the time shown by its clock (Riftveil time stamp), and that the text has not changed by a single character since. The seal is checked on riftveil.ai. The signature, however, is checked with riftveil.ai's public key: anyone can do it, without going through us. The seal covers the date and the integrity; the substance of the project and the decision remain those of the person who signs.
• A valid decision seal proves that this follow-up, bound to this report, existed at the time given by our server and has not changed since. The time shown is that of the riftveil.ai clock at the moment of sealing. A qualified electronic time stamp within the meaning of the EU Regulation on electronic identification and trust services (eIDAS) is issued by a qualified trust service provider. The signature made on screen is a simple electronic signature: the name is the one the person declared.
• riftveil.ai keeps no list of IDs or fingerprints: keep the record file with the PDF, on your computer or in a shared folder of your organisation.

Bot protection

Before a run, a registration or a decision seal, a Cloudflare Turnstile check makes sure the request comes from a person. It is usually invisible and asks for an action only when Cloudflare has a doubt. To do so, Cloudflare processes technical signals such as your IP address and the characteristics of your browser. It uses them to protect this site and, as a controller in its own right, to improve its bot detection; it states that it does not use them to identify, profile or target you, or for advertising. See the Turnstile privacy terms published by Cloudflare. On top of the per-IP limits, each action has a daily ceiling for the whole site (a plain counter, with no data about you): beyond it, the tool asks you to come back the next day.

Sensible caution

The email forms

Three forms on this site ask for your email address, all optional: “Get the newsletter”, under the tool; “Be told when it opens”, on the Pro Kit page; and the interest form on the training pages. Leave them blank and the tool works exactly the same. What you enter (your email address and, depending on the form, your choices, your organisation and your country if you fill them in) goes to this site’s sign-up service, which passes it to EmailOctopus, our email service, established in the United Kingdom, which stores contact data in the European Union (Ireland). Transfers to the United Kingdom are covered by the European Commission’s adequacy decision. To send some of the emails and run its service, EmailOctopus also uses sub-processors, some of them in the United States; it publishes their list and the transfer safeguards.

Nothing is added to a list until you confirm: EmailOctopus first sends you one email with a confirmation link. We record your choices, the form used and the version of the consent text you accepted. To limit abuse, the sign-up service keeps your IP address, hashed with a secret key, for 24 hours, never the address itself. We use your details only for what you asked for: the Human Frontier and Riftveil newsletter, which also announces new protocol versions; a single email on the day Pro Kit sales open; or an email when the training programmes you ticked open, which also invites you to apply if you ticked “Riftveil Certified Trainer”. They are never sold or shared. Every email carries an unsubscribe link; deletion on request at hello@riftveil.ai.

How long. Until you unsubscribe or ask for deletion; for the “Be told when it opens” forms, your address is deleted once the opening email has been sent. Sign-ups that are not confirmed are deleted after 30 days.

Analytics

This site does not measure its audience today. Before putting any measurement in place, we will describe it on this page.

Legal basis

• A run of the tool. Processing the text you paste, the hashed-IP counter and the pseudonymous abuse identifier rests on our legitimate interest (GDPR Art. 6(1)(f)): providing the tool you asked for and keeping it available by limiting abuse. The processing lasts one request; no profile is built.
• Decision seal, registration and statistics. The hashed-IP counter and the follow-up fingerprint, treated as pseudonymous data, rely on our legitimate interest (Art. 6(1)(f)): providing the seal you request and limiting abuse. The Turnstile check relies on the same legitimate interest: protecting the service against robots. Monthly decision totals are anonymous.
• Email. If you fill in one of the email forms, your address and your choices are processed on the basis of your consent (General Data Protection Regulation, Article 6(1)(a)). You can withdraw it at any time, using the link in every email or by writing to hello@riftveil.ai. If you write to us, your address and your message are processed on the basis of our legitimate interest in answering you (same article, point (f)): see “Writing to us”.
• Personal data in the text you paste. You are responsible for what you paste. Do not paste personal data, or material that is confidential under your organisation’s rules; see “Sensible caution” above.

Transfers outside the EU

The AI model provider is Anthropic Ireland, Limited (Ireland), which processes your text on our behalf under its data processing addendum. Requests are processed in the United States by Anthropic, PBC, its sub-processor. This transfer relies on the European Commission’s standard contractual clauses, included in that addendum, which Anthropic publishes. A copy is available on request at hello@riftveil.ai. Cloudflare, Inc. (United States), which serves the pages and runs, on our behalf, the tool’s endpoint, the counters and the bot check, may process this data in the United States; this transfer relies on the European Commission’s standard contractual clauses, included in Cloudflare’s data processing addendum. Transfers linked to EmailOctopus and to our mailbox are described above.

Your rights

Under the GDPR you may ask for access to, rectification or erasure of your personal data, restriction of or objection to its processing, and portability of the data you provided (Art. 15–21). Because the tool stores no text and no account, the only personal data we can act on is the hashed-IP counter (which expires within 24 hours) and any email you gave us. Write to hello@riftveil.ai; we answer within one month.

Supervisory authority

You have the right to lodge a complaint with a data protection authority. The controller is established in Belgium, where the authority is the Data Protection Authority (autoriteprotectiondonnees.be). You may also contact the authority of the EU country where you live or work.

Writing to us

If you write to hello@riftveil.ai, your address and your message are received and kept in Microsoft Exchange Online, provided by Microsoft, acting on our behalf. We keep your address and your message for as long as it takes to answer you, then for at most 12 months after our last exchange. Legal basis: our legitimate interest in answering you (General Data Protection Regulation, Article 6(1)(f)); when you exercise your rights, our legal obligation to answer you (same article, point (c)).