1. What information is collected

When you submit the intake form, we collect your name, email address, company name (optional), project description, answers to the risk questions, and the tier you have selected. When you submit the contact form, we collect your name, email, and project summary.

2. Uploaded code and files

If you upload a code archive or provide a repository link, we access those files solely for the purpose of performing the requested review. You are responsible for ensuring you do not upload production secrets, regulated data, or files you are not authorized to share. Do not upload files containing personal data about your users or customers.

3. Payment data

Payment processing is handled by Stripe. AI App Rescue does not store card numbers, CVV codes, or raw payment data. We store only the Stripe session or payment intent reference for record-keeping.

4. How information is used

We use your submitted information to evaluate your project, prepare the Rescue Report, and communicate with you about your engagement. We do not sell, rent, or share your information with third parties except as required to perform the service (for example, uploading files to the hosting provider used in your deployment tier).

5. How long uploads are retained

Uploaded code archives and submitted files are retained for 90 days after the completion of your engagement. Intake form data is retained for record-keeping purposes unless you request deletion. After 90 days, uploaded files are scheduled for deletion.

6. Deletion requests

To request deletion of your submission and uploaded files before the 90-day window, contact us by email with your submission reference. We will confirm deletion within five business days.

7. Third-party processors

We use Stripe for payment processing. We may use cloud storage (such as AWS S3 or similar) for storing uploaded files. These processors have their own privacy policies and security practices.

8. Security measures

Uploaded files are stored in access-controlled cloud storage. Communication occurs over HTTPS. Admin access requires authentication. We take reasonable technical precautions to protect submitted data, but no online system is completely secure.

9. Contact

For privacy questions or deletion requests, email us at the address listed on the site.