Privacy Policy

Every PDF you open is read, stamped and written inside your browser using local code. There is no upload endpoint on this site for a document, so there is no path by which a file could be sent to us. We do not receive your file, its page count or its contents, and we therefore cannot retain, sell, disclose or delete it. The single exception to that is the written summary described next, and it is opt-in.

The one thing computed from a file is a SHA-256 fingerprint, and that happens on your device as part of producing the certificate. A fingerprint is printed into the PDF you export; it is not transmitted to us.

Written summary. On the contract scan, a pass holder may ask for a written summary. Ticking the box sends the first 30,000 characters of the text extracted from the document, the file name and the clause titles the scan found to our summarising route, and on to Anthropic, the model provider that writes the summary. No PDF is sent at any point. The text is held in memory for the length of that one request, is not written to a database or a log, and is not used by us for anything else. If you never tick the box, nothing about the document leaves your device.

Two entries in your browser's local storage, and nothing else:

• signswift.pass.v1 — a signed token recording which pass you bought and when it expires.
• signswift.allowance.v1 — the number of free exports used this month and the month they belong to.

Both are readable by you, and clearing site data removes them. Neither is a tracking identifier and neither is sent anywhere on its own.

Payments are handled by Stripe, which acts as the payment processor and collects the card details, name, email address and billing country you enter on its checkout page. We never see or store your card number.

From Stripe we receive the payment record: the amount, the currency, whether the payment succeeded, and the email address you supplied. We use it to issue the pass, to answer you if you write to us, and to keep the accounting records a company is required to keep. We do not use it for marketing and we do not sell it.

To count summaries, two integers are kept in a managed Redis database: how many summaries a pass has used, and how many the service has served this month. They are keyed by the Stripe session id, which is an opaque reference rather than a name, and they expire with the pass or with the month. No document text, file name or summary is written there.

The site is served by Vercel, which keeps standard server logs — IP address, timestamp, requested path, user agent — for security and reliability. We do not run analytics, advertising pixels, session recording, fingerprinting scripts or third-party trackers of any kind. There is no cookie banner on this site because there is no non-essential cookie to consent to.

Following a link to Stripe's checkout leaves this site, and Stripe's own privacy policy applies from that point.

Where the GDPR applies, the payment record is processed to perform the contract with you and to meet legal accounting obligations, and server logs are processed for our legitimate interest in keeping the service secure. We do not rely on consent for any of it, so withdrawing consent is not a step you need to take.

Payment records are kept for as long as tax and company law requires. Support email is kept while the query is open and for a reasonable period afterwards. Server logs are kept by our host for a short retention window. Local storage stays on your device until you clear it or the pass expires.

Stripe (payments), Vercel (hosting), Upstash (the two counters described in section 3) and Anthropic (writing a summary, only when you ask for one) process data on our behalf as described above. We do not share data with anyone else, and we do not sell it. If we are required by law to disclose something, we will disclose only what is required.

You can ask us what personal data we hold about you, ask for a copy, ask for it to be corrected or erased, or object to how it is used. Write to support@xvilan.com. Because no documents are held, most requests will concern only a payment record or an email thread.

If you are in the EEA or the UK you also have the right to complain to your local data protection authority. If you are in California, you have the rights set out in the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information as those terms are defined there.

The service is intended for people who can enter a contract. It is not directed at children, and we do not knowingly hold data about them.

If this policy changes, the date at the top changes with it. The controller is XVILAN LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, reachable at support@xvilan.com. Refund requests are handled under the refund policy, within 14 days of payment.