Temporary by design.
Visible by policy.

Depending on the flow, CoaSift may handle the uploaded COA, rendered pages, extracted and reviewed values, an exported Excel file, safe file metadata, retention deadlines, privacy-safe operational events, and a keyed rate-limit identifier. Account use also involves user identity and organization membership.

If payments are later activated, CoaSift may handle payer email, internal order ID, amount, currency, provider status, and timestamps. CoaSift does not handle or store raw card details. Support messages contain whatever the sender chooses to include, so do not attach document content or access secrets.

CoaSift uses the data to validate and process an authorized upload, show a bounded preview, support human review, produce an authorized export, verify an entitlement, prevent abuse, troubleshoot content-free operational failures, and meet applicable accounting or dispute obligations.

Customer content is not sold or used by CoaSift to train models.

CoaSift-controlled anonymous source files, rendered pages, extraction content, review content, and exports are retained for no more than 60 minutes from upload, whether paid or unpaid. Availability ends at 55 minutes from validated upload, leaving five minutes for cleanup and retries. Early deletion can be requested from the result workspace. Payment never extends the original deadline.

The browser receives only the first two result rows before verified payment (or all available rows when fewer than two exist). Full review and Excel remain locked. Hidden result values remain server-side and are not shipped as readable blurred page content. Content-free payment or purge evidence may be retained separately under an approved accounting, dispute, or security policy.

Workspace source and content-bearing extraction/review data expires 30 days after the fixed access period ends, unless continuation is legitimately confirmed. Authenticated early deletion is available. Workspace Excel is generated on demand rather than retained as a cached server file. Payment, review, retries and export never extend content deadlines.

OpenAI, Supabase, Vercel, and Paysera are the relevant intended providers/processors for extraction, database and private object storage, application hosting, and hosted payment processing. Only the providers needed for an enabled flow receive the associated data.

OpenAI API requests use stateless Responses with store: false. OpenAI states that API data is not used for training unless the API customer opts in, but default abuse-monitoring logs may retain content for up to 30 days. CoaSift therefore does not promise zero retention.

CoaSift is designed to use private storage, server-side authorization, row-level security, short-lived access, server-only privileged credentials, and explicit retention deadlines. No internet service can guarantee absolute security. Anonymous access depends on a high-entropy capability kept out of URLs and persistent browser storage; treat the open result page as sensitive.

Founder-supplied controller details: PROMNESTRIA LLC, Bedri Shala, Prishtina 10000, Kosovo. Final legal review remains pending. Use the founder-approved temporary contact below; the intended coasift.com domain and puka@coasift.com inbox remain deferred.

Use the result workspace for early deletion while it is available. For a privacy question or authenticated workspace deletion request, email kushtrim@promnestria.biz without attaching a COA, capability token, signed URL, or extracted values. Applicable legal rights and the final seller/controller identity must be confirmed before public activation.