What we store

What you paste is used to build your read, and it is kept with the read—it powers refinements and lets us re-validate our own engine against real inputs. It travels to our model provider (Anthropic) to be processed. How long it lives is exactly how long the read lives—spelled out in “The reads themselves” below—and if a read is about you, you can remove it yourself.

Two honest details. We also keep a one-way fingerprint of the input for thirty days, purely so we don’t charge twice for identical work; it cannot be turned back into your text. And the read itself quotes short fragments of what you pasted as the evidence behind a claim—that is the product working as designed, every claim carrying its footing—and those quotes live wherever the read lives.

Attachments are read to build the read, the same way pasted text is, and go when their read goes.

A read made without signing in lives at its unguessable link for seven days, then expires. A read made signed in is kept in your Library until you delete it—deleting removes it from your Library and its links. What you pasted stays with the read (it powers refinements and lets us re-validate our own engine) and goes when the read goes. The underlying material may be retained for research and calibration of our frameworks after you delete your copy—with one exception that outranks it: if a read is about you, Remove a read ends it—an anonymous read is deleted on the spot; a read tied to an account files a removal request to that account, and when it’s honored the research copy goes with it. No account needed from you.

There are no passwords—a one-time emailed link or Google, nothing to remember or lose. The only cookies we set are the ones that keep you signed in. Sign-in runs on Supabase; the sign-in email is delivered by Resend.

Card details go to Stripe and never touch our servers. We store what Stripe tells us: that a purchase happened, and what it unlocked.

We collect no demographic information about candidates, ever. Every assessment states the footing of its evidence, and a measured result exists only because the candidate completed and shared it.

We use Vercel’s cookieless analytics to count visits—no ad cookies, no cross-site tracking, no individual profiles. Abuse prevention rate-limits by network address with short-lived counters.

Write to hello@theapexos.com and a person answers. Ask us to delete something of yours and we delete it.