PRIVACY
Privacy Notice
The site currently provides public content, read-only knowledge retrieval, Google Identity sign-in, and fixed-scope materials-service requests. Public forms do not accept passwords, payment credentials, or private attachments; payment evidence and final delivery status are verified separately.
Public content and internal data
The public site contains self-owned service information and knowledge approved for publication. Internal secrets, OAuth credentials, leases, order-access tokens, server paths, internal IP addresses, raw operations logs, and other private project data are excluded from the public content store.
Google Identity
When Google sign-in is used, the site receives a signed identity token from Google, verifies it server-side, stores the necessary user identifier, display name, email and email-verification state, and creates an HttpOnly, Secure, SameSite=Lax session cookie. The site does not receive or store your Google password.
Free profiles and claim verification
Free profiles store submitted public source URLs, source fingerprints, extracted basic fields, unknowns, user corrections, confirmation state, and publication state. Draft edits are controlled by a random claim token while the server stores only its hash. Before public publication, an administrator also records a domain, email, or manual-document claim-evidence reference. If email verification is requested, the verification contact email is stored with the claim request. Claim verification only shows that publication-authority evidence was reviewed; it is not independent certification of performance, qualifications, or customer outcomes. Withdrawn profiles are no longer publicly readable.
Service brief and retention
The fixed-scope materials-service form stores the company or project name, contact details, selected offer, public material URLs, product count, delivery language, intended use, acceptance owner, desired delivery date, source-rights confirmation, scope acknowledgement, requirement description, and a request-metadata hash. When the request comes from CASE-SELF-001, first-party attribution may also store the case ID, click ID, referring domain, source hint, and on-site landing path; the full external referrer URL is not stored. The public form does not collect payment information or attachments. The default retention period is 30 days.