Legal
Privacy Policy.
OBEXGATE is designed so you do not need to provide personal data to receive decision support. This policy details what we do and do not collect.
Privacy Policy
1. Core Principle
OBEXGATE is designed so you do not need to provide personal data to receive decision support.
- Inputs are processed in real time
- Submission content is not stored after processing
Removing identifying information before submission is your best protection.
2. What We Collect
Email Address. Used for access, delivery, and communication.
Session Tokens. Stored server-side. Automatically expire based on plan.
Analytics. Anonymous, aggregated usage data.
Scheduling Data. Collected by third-party scheduling providers if used.
3. What We Do Not Collect
- No storage of submission inputs
- No storage of AI-generated outputs
- No payment card data
- No sale or sharing of personal data
- No tracking cookies
4. Third-Party Processors
We use:
- Anthropic (AI processing)
- Vercel (hosting, analytics)
- Upstash Redis (token storage)
- Resend (email delivery)
- PDFShift (document generation)
- Stripe (payments)
- Calendly (scheduling)
Each receives only the minimum necessary data.
5. Data Retention
- Tokens expire automatically
- Associated emails are deleted within 30 days after expiration
- Users may request deletion at any time
6. Your Rights
You may request access to your data, request correction, or request deletion. Contact: hello@obexgate.com.
7. Security
We use encrypted transmission, server-side access control, and token-based authentication. In the event of a confirmed breach affecting personal data, users will be notified within 72 hours. See our Security and Vulnerability Disclosure Policy for details on responsible disclosure.
8. AI Output Limitations
Outputs may be incomplete or inaccurate and require independent verification. OBEXGATE is not liable for decisions made based on outputs.
9. Prohibited Data Submission
You must not submit PHI, sensitive personal data, or third-party confidential information. Violation constitutes breach of Terms.
10. Changes
We may update this policy periodically.