Privacy & Retention

Effective: 2026-03-07  ·  Version: 2026-03-07

1. Overview

Pactori is designed to be anonymous by default. Frostwhisker LLC does not create personal profiles, does not require an account, and processes your documents within an isolated session that expires automatically.

This notice explains what data Pactori collects, why, and how long it is kept.

2. No account required

Pactori assigns each app installation an anonymous session identifier. This identifier is used solely to associate your uploaded document and generated outputs with your active session. It does not identify you personally and is not linked to any email address, phone number, or other personal identifier.

3. What we collect

Pactori collects only the data needed to provide the service:

  • Document content — the PDF, DOCX, or photo you upload. Used solely to generate your summary, issue breakdown, redlines, and draft. Not used to train models. Not shared with third parties except the AI inference provider, which processes content under a data processing agreement with no-training obligations.
  • Session identifier — a randomly generated, anonymous token assigned at first launch. Used to gate access to your session's documents and outputs. Not linked to personal identity.
  • Consent record — a log of which policy version you accepted and when. Contains: action gate name, accepted policy version, and timestamp. Contains no document content or personal identifiers beyond the session token.
  • Payment receipt — if you purchase a paid feature via Google Play, Pactori receives a purchase token from Google to verify entitlement. No payment card details are stored by Pactori.
  • Operational logs — anonymous error and performance logs used to detect failures and improve reliability. These logs do not contain document content.

4. What we do not collect

  • Name, email address, or phone number.
  • IP address retained beyond request processing.
  • Device advertising identifiers.
  • Location data.
  • Analytics or tracking across sessions.
  • Document content after session expiry.

5. Retention and deletion

Pactori is deletion-first:

  • Active session — your document and all generated outputs are available for the duration of your session.
  • Session expiry — by default, sessions expire after about 2 hours of inactivity, with an absolute maximum lifetime of about 8 hours from session creation. On expiry, document content is purged from the active workspace.
  • Completed artifacts — generated export artifacts may remain available for up to 24 hours or until the session expires, whichever happens first.
  • Explicit delete — you may delete your session and all associated data at any time from within the app. Deletion is irreversible. Pactori starts a purge immediately and retries backend cleanup until the deletion workflow is confirmed.
  • Operational, payment, and compliance records — Pactori may retain minimal consent records, payment transaction data, security events, and deletion audit outcomes separately from document content under internal retention policy. These records are minimised and do not include document bodies.

6. AI inference providers

Pactori routes document content to third-party AI inference providers to generate outputs. These providers are contracted to process data on Pactori's behalf and are prohibited from using your content to train their models. Providers are located in the European Economic Area or operate under standard contractual clauses ensuring equivalent protection.

For users in the EU or EEA, Pactori processes data on the basis of contract performance (to deliver the service you request) and legitimate interest (anonymous operational logs). No processing is based on profiling or automated decision-making that produces legal effects.

8. Your rights

Because Pactori does not link sessions to personal identities, we cannot verify or fulfil rights requests tied to named individuals. If you believe Pactori holds data about you, contact Frostwhisker LLC at hello@frostwhisker.com and we will assist to the extent reasonably possible.

You can exercise your right to erasure immediately and completely by using the Delete Session feature in the app. This permanently removes all stored document content, derived artifacts, and session state.

9. Cookies and tracking

Pactori's public web app uses a necessary anonymous pactori_session cookie to create and maintain your same-origin session for workflow requests, payment-session creation, document delivery, and event updates. This cookie is required for the web app to work and is not used to identify you personally.

Pactori's web app also uses browser-local storage for a small amount of functional state, including your theme preference and temporary recovery state so an in-progress workflow or awaiting-payment screen can resume after a reload. This browser-local storage is used only for product functionality on your device.

Pactori does not use analytics, advertising, or other non-essential tracking cookies on its current public routes, and no third-party analytics scripts are loaded on this website today.

10. Changes to this notice

Pactori may update this notice at any time. The version date at the top of this page identifies the active version. The app will prompt you to confirm acceptance before protected actions when the active policy version changes. Continued use after re-acceptance constitutes agreement to the updated notice.

11. Contact

Questions about this privacy notice can be directed to Frostwhisker LLC at hello@frostwhisker.com.

← Back to Pactori