Sovereign Data Architecture

1. Our Fundamental Commitment: Zero Data Monetization

At Unfoggable, we operate under a simple principle: You are not our product. We do not sell, rent, monetize, or broker your personal information, document metadata, or uploaded records, and we do not share them with advertisers, third-party analytics firms, session-recording tools, or data brokers — or with anyone for their own marketing or profit. The only companies that handle your data are the service providers listed below, and only to run Unfoggable for you. We utilize zero ad-tech or invasive analytics scripts. Our business model relies entirely on direct user subscriptions.

2. Database Isolation & Row-Level Security (RLS)

Each vault is sealed off from every other user at the database level. Unfoggable isn’t end-to-end encrypted: our systems and our AI provider (Anthropic) process files to file them and set reminders. Nobody at Unfoggable looks at your documents unless you ask us to help with one. This separation is enforced by the database itself using Row-Level Security (RLS): only you and the people you choose to share a vault with can open it, and your family vault and any business vault are kept apart. Files are encrypted with AES-256 at rest and TLS in transit.

3. AI Processing & Public Model Firewall

When you forward or upload documents to your vault, our processing engines extract metadata (such as expiration dates, policy numbers, and vendor names) strictly to populate your personal dashboard and trigger your proactive reminders.

• Zero AI Model Training: Your files, text, and extracted metadata are NEVER used to train public AI models (e.g., Anthropic, OpenAI, or public LLM pools).
• Zero Data Mining: Your uploaded documents are processed solely for your explicit functional use.

4. Verified Sub-Processors & Service Providers

To deliver a secure vault, Unfoggable relies on an exhaustive, vetted list of infrastructure sub-processors. Each sub-processor is bound by strict data protection agreements:

• Supabase (AWS Hosted): Database, Authentication/MFA, File Storage. Handles encrypted document files, user credentials, and vault records.
• Vercel: Application Hosting & Edge Execution. Handles server-side execution and application routing.
• Anthropic (Claude API): AI Extraction Engine. Handles document extraction, email classification, and photo analysis (under Anthropic's commercial terms, your documents are not used to train AI models).
• Postmark (ActiveCampaign): Email Intake & Transactional Messaging. Handles inbound document intake, alerts, digests, and verification codes.
• Stripe: Billing & Subscription Management. Handles payment processing and invoice records (no credit card data is stored directly by Unfoggable).
• Google & Apple: OAuth Identity Providers. Handles Single Sign-On authentication tokens.

5. Data Retention, Temporary Caching & Purge Protocols

We keep data only as long as it is needed:

• Document Deletion: When you delete a document, image, or thumbnail, it is removed from active, live systems immediately.
• Temporary Export Purging: On-demand export files (such as emergency summaries generated via "The Clearing") are automatically and permanently purged from temporary storage within 48 hours.
• Backups: We don't run automatic database backups yet. That means a deleted document leaves no backup copy behind, but it also means we can't restore something you deleted, so keep the originals of anything irreplaceable. If we add backups, we'll update this policy first and say how long copies are kept.

6. Your Rights & Account Deletion Requests (CCPA / GDPR)

You maintain full data sovereignty under consumer privacy frameworks (including CCPA/CPRA and GDPR). You have the right to request access to, export of, or complete deletion of your personal data and vault contents.

You can delete your account at any time in Settings, or send a deletion request to privacy@unfoggable.com. Either way, your account, associated files, and personal metadata will be deleted from our systems immediately. We don't keep automatic backups yet, so no backup copy remains.

7. Compliance Disclosures

Unfoggable continuously monitors threshold requirements under the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR). Unfoggable gives every user the same access, export and deletion rights regardless of location, and Data Protection Impact Assessments (DPIAs) are maintained internally regarding automated document processing activities for international compliance.