> Draft, 19 October 2026. A plain-words draft for review before launch.

## What we hold

- **Account identity.** Your GitHub owner name when the Action signs in with your workflow's identity, or the email address you gave us for a key. We keep the hash of a key, never the key.
- **Billing.** Stripe holds your payment details; we hold the Stripe customer and subscription identifiers and the usage records we send to Stripe once a month.
- **Check records.** The verdict of each check, the repository name and commit it names, and the requirements text you chose to send, kept for 30 days. The collected facts are deleted when the check ends; on Premium a sealed copy is kept for the formal shadow. [Your data](/docs/data) lists every item.
- **Feedback.** The notes you send through the feedback route, within the permission you gave.
- **Service logs.** Request logs with IP addresses and timing, kept for operating the service.

## What we do with it

We use this information to run checks for you, to bill you, to answer your questions and to keep the service working. We use check records to improve the product only when your account has `product_data` turned on. We do not sell personal information and we do not use it for advertising.

## Who else sees it

Stripe, for payment. The model provider that writes the readable report and reads requirement lines, only for the text the docs say is sent, under zero data retention where the docs say so. Our hosting providers in Sydney. No one else without your consent or a legal requirement.

## This website

The website sets no cookies and uses no third-party analytics. If we add analytics, they will be privacy-respecting and need no consent banner, and this page will say so.

## Your rights

Ask us at billy@symbolia.ai to see, correct or delete the information we hold about you. We answer within 30 days. If you are in Australia, you may complain to the Office of the Australian Information Commissioner; elsewhere, to your local authority.