Privacy

What ParcelProof stores

• Account: your Google name, email address and profile image, plus session records, via Auth.js.
• Cases: the details you enter (order reference, dates, your description and any customer reference you choose to add).
• Evidence: the original files you upload and the text extracted from them, in MongoDB Atlas (GridFS).
• Analyses, reviews, briefings and audio you create, and daily usage counters.
• Audit events: minimal records of actions (for example “case deleted”), without file contents.

Who else receives data

• Google (Gemini API, Gemma model): when you choose “Analyse evidence”, the extracted text of that case’s evidence and the case details are sent to Google’s hosted API. Processing is not local or offline.
• ElevenLabs: voice notes you upload and recordings you dictate are sent to ElevenLabs Scribe for transcription; when you generate a briefing, its script is sent for speech synthesis. Other files are not sent to ElevenLabs.
• Hosting: the app runs on Render; data is stored on MongoDB Atlas.
• Text recognition (OCR) and PDF reading run on the ParcelProof server. OCR language data is downloaded from a public CDN.

These providers process data under their own terms. Avoid uploading information you are not permitted to share with them.

Customer information

Evidence often contains a customer’s details. Upload only what the dispute needs, prefer order IDs or pseudonyms over names, and redact addresses or phone numbers where they aren’t relevant.

Access

Files and case data are served only to the signed-in account that owns them, through authenticated routes. There are no public links to your files.

Deletion

Deleting a case removes its files, extracted text, analyses, briefings and audio. Settings → Delete account data removes everything you own, including your sign-in record. Provider-side retention is governed by Google’s and ElevenLabs’ policies.