Privacy

What actually happens with data. Version 2026-10-15, preview.

This preview. Payments are closed and our event counter is disabled; it does not save visits or form answers. A source code may be kept in your browser's session storage until you close the tab. No analytics cookies are set. Cloudflare hosts the site and may process IP addresses in its standard server logs. Before enabling the counter, we will update this notice and verify storage, access controls and deletion. Page loads would not establish unique visitors or qualified agencies.
Payment. Checkout is not open. Stripe is the planned processor; once enabled, we would receive name, email and payment status, not card numbers.
Email. Forward Email forwards contact messages to Nicolas's Google mailbox. Do not email passwords, tokens, client screenshots or access inventories. Those materials need an agreed delivery method before a session. AI assistance with a message requires a separately disclosed provider, reviewed data terms and your permission; it is not part of the default audit.
Access Audit. During the session a person notes only what the report needs: email addresses, access levels, settings and who made changes, as shown on screen. Notes are processed by local rules to generate the report, and a person reviews every finding. Client screenshots and capture sheets are not sent to an AI provider under this default workflow. Screenshots, if separately permitted, are deleted when we deliver that session's report and no later than 30 days after the session. Reports and capture sheets are retained for up to 12 months for follow-up, then deleted; you may request earlier deletion. Sessions are never recorded. The meeting and file-delivery providers must be agreed before the session; they are not selected by this preview. We never contact your clients.
No watcher or Google API connection. The current audit does not request tokens or account invitations. How the guided review works.
We don't sell your data or use it for advertising. This preview uses Cloudflare (hosting), Forward Email (mail forwarding) and Google (email). Stripe is planned for payments but checkout is not open. HumanLS doesn't use your data to train AI models. There is no general promise of zero retention by third parties.
Deletion requests: write to the contact address. We verify the requester, identify the audit files and agreed providers, and confirm the action and any lawful retention exceptions. Provider trash, versions and backups must be considered; deleting one local file is not proof that every copy is gone.
If we detect unauthorised access to data we hold, we assess it and notify affected parties as required.