Data Retention Policy
Last updated: May 14, 2026
We aim to retain as little data as we need to operate the Service. This page documents exactly what we keep and for how long.
Photos you upload
Retention
Processed in memory during the analysis request only. Not persisted to disk or any database after the response is returned.
Transit
Sent over TLS-encrypted HTTPS to our API server, then forwarded over TLS to Anthropic's vision API.
Anthropic side
Per Anthropic's API policy, prompts and completions are not used to train their models. Their retention is governed by their own published policy.
Your device
Photos remain on your device unless you upload or share them. The browser holds a preview via a blob URL that is revoked when you remove the photo or refresh the page.
Once we introduce saved reports (Phase 2), photos for accounts that opt in to saving will be encrypted-at-rest in object storage (Cloudflare R2 or AWS S3) with retention of up to 5 years or until the account is deleted, whichever comes first.
Property information you enter
Retention
Stored only in your browser's sessionStorage. Cleared when you close the tab.
Sent to server?
No. The form values never leave your device unless you explicitly opt in to a future server-side feature.
Server logs
What we log
Timestamp, IP address, user agent, response status code, request duration, error messages. We do not log photo bytes.
Retention
Up to 30 days for security, abuse detection, and debugging.
Where
Vercel platform logs (US-based).
Analytics
Provider
Vercel Analytics (privacy-friendly; no third-party cookies).
What's collected
Aggregated, anonymized: page views, performance metrics, country.
Retention
Up to 12 months in aggregate form. No individual user profiles.
Deletion requests
Because we do not retain photos or property info on our servers (today), there is typically nothing to delete. If you have specific concerns or want to request log deletion tied to your IP, email hello@riptideai.co and we will respond within 30 days.