Privacy

Your data never becomes our business.

Throughscan is built export-first on purpose. You upload a file you control, sensitive fields are redacted before any text is sent to a model, and your data is never sold or used to train anything. The honest details, including the limits of the redaction, are below.

What you give us

A CSV or JSON export that you choose to upload. Never a login, an API token, or access to your live support system. There is nothing for your security team to provision.

What we redact, and what we cannot

Before any text is sent to a model, an automated pass redacts common structured identifiers: email addresses, phone numbers, card and SSN-style numbers, URL authentication tokens, and recipient names that appear in greeting lines (for example "Hi Jane,"). This pass is pattern-based, not exhaustive. It will not catch every identifier: names in the body of a message, agent names, mailing addresses, account or order numbers, and company names can remain in the text. Treat it as a meaningful reduction of obvious PII, not a guarantee. Please upload only data you are permitted to share, and remove anything especially sensitive before uploading.

What the analysis uses

To produce your assessment, the redacted text is sent to our model provider, Anthropic, which returns the analysis. Anthropic does not use API data to train its models. Separately, some numeric metrics (response times, reopen rate, and similar) are computed in our own edge service directly from your file, and only the resulting aggregate numbers are produced; those raw records are not stored and are not sent to any model.

Subprocessors

Anthropic (the analysis model), Cloudflare (hosting and edge compute), and, when you purchase, Stripe (payments). Payments are handled entirely by Stripe; we never see or store your full card number.

Your email

If you give us an email, it is used only to send your receipt and to contact you about your assessment. It is not sold, shared, or added to a marketing list.

Retention

Your upload is processed to produce your assessment and is not kept as a record. A paid result may be stored briefly so you can re-open it from your link; if so it is removed after a short window. You can ask us to delete anything tied to you at any time.

What we never do

We do not sell your data, share it with advertisers, or use it to train models.

Contact

Questions, or a deletion request: get in touch. This statement describes how the product handles data and is kept current as the product changes.