Privacy
Your uploaded document is not stored
This is the important one. A document you upload or paste is held in memory only for as long as it takes to generate questions from it, is sent to our language-model provider for that purpose, and is then discarded. It is not written to any database, object store, log or backup, and it is not used to train anything.
What is stored
- Your order — the Stripe checkout reference, the email address Stripe collected for your receipt, the amount, and which campaign link you arrived through.
- The generated questions — so your export link still works when you come back to it. Deleted when the link expires after 30 days.
- Completed checks — if you have workers sit the check online, we store the name they type, the answers they give, their score and the time they submitted, so you can print the record. Deleted when the export link expires after 30 days. The worker is told, on the page, that this is recorded and shared with you. Tell them not to enter anything beyond their name; the service does not need it.
Payments
Card details are handled entirely by Stripe and never reach us. See Stripe’s own privacy notice for how they process them.
Language model
Question generation runs through OpenRouter to Anthropic’s Claude. Your document text is transmitted to that provider to produce the questions.
Analytics and session recording
We use self-hosted Umami to count page views and measure whether the site works. It sets no cookies and does not track you across other sites. Pages other than this one also record an anonymised replay of the session — mouse movement, clicks and scrolling — so we can see where the product is confusing. Input fields are masked, and the area where you upload or paste your document is excluded from recording entirely. Recordings are deleted after 30 days. If your browser sends Do Not Track, nothing is collected at all.
Error reporting
Every page loads Sentry, a third-party error-reporting service, so that when something breaks in your browser we find out rather than waiting for you to tell us. If nothing goes wrong, nothing is sent.
When a page does throw an error, the report contains the error message and stack trace, the address of the page you were on, and your browser and operating system version. It does not contain your uploaded document or its text, and it does not contain anything you typed into a form. Sentry is configured not to attach personal data to reports. Sentry is based in the United States and keeps what it receives under its own retention policy; see their privacy notice for the detail.
One thing worth knowing, because we would rather say it than not: your
export link and worker check link carry their access token in the page address
(?t= / ?q=). If a page happens to throw an error while you are on
one of those links, that address — and therefore that token — is part of the
report. Treat a link you have shared as shared. If you would like an export link
invalidated, email hello@shovelware.ai.
Contact
Email hello@shovelware.ai. If you have already bought an export, replying to your Stripe receipt reaches us too.