Privacy

What we collect, and what we refuse to collect.

Last updated 13 November 2026.

The short version

• Your documents are not stored. A document is held in memory on the audit server while it is being read, hashed with SHA-256 for the evidence trail, and discarded when the job ends. No bucket, no database row, no backup.
• The report is temporary. Reports live in server memory for 30 minutes and then are deleted. Print or export what you need while it is open.
• We do not sell data. Not to portals, not to brokers, not to data vendors. There is no advertising pixel on this app.
• The waitlist is one email address and a few optional answers. That is the only thing we keep, and you can delete it by asking.

Who we are

DealShield is operated by Aegis Crest Technologies LLC, a Wyoming limited liability company registered at 30 N Gould St Ste N, Sheridan, WY 82801, United States. Contact: hello@aegiscresttech.com.

Documents you upload

When you run an audit, the file is sent over HTTPS to our API, converted to text in memory (or read as images for photographed pages), and passed to a language model provider for analysis. The extracted text is not written to disk. The original file is not retained.

We keep one derived artefact in the response: a SHA-256 hash of the extracted text, shown on the report so two runs can be compared and so you can prove what was read. A hash is not the document and cannot be turned back into one, but treat it as identifying if the document itself is sensitive.

What the model provider receives

The text of your document (or page images) is sent to Google's Gemini API for analysis. Under the paid API terms used here, prompts and responses are not used to train Google's models. If a fallback provider is configured, the same text may be sent to it, and the report shows which model produced the result.

Do not upload documents you are contractually forbidden from sending to a subprocessor. If your client or employer requires that, use the concierge option instead — email us and we will run the audit under a written confidentiality arrangement.

Waitlist and email

Joining the list stores your email address, and optionally your role, which desk you care about, your monthly document volume, and your company name. We use it to tell you when paid plans open and to ask for beta feedback. Legal basis: your consent, which you withdraw by replying “remove” or by emailing us.

No newsletter cadence, no list resale, no third-party marketing. Unsubscribe requests are honoured the same day.

Technical data

• Server logs record the request time, status code, document size and page count — not the document text.
• Free-audit limits use a random identifier stored in your browser and your IP address, kept in memory for the day.
• The app stores three small preferences in your browser: your anonymous id, your last desk, and whether you unlocked a report. No tracking cookies.

Subprocessors

• Cloudflare — hosting and edge network for the app (US/EU).
• Hugging Face — container hosting for the audit API (US).
• Google (Gemini API) — language model inference (US).
• Email provider — sending launch and beta mail.

Retention

Documents: seconds to minutes, in memory only. Reports: up to 30 minutes. Waitlist: until you ask us to delete it. Logs: 30 days.

Your rights

Ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it — email hello@aegiscresttech.com and we answer within 30 days. If you are in the EEA or UK you also have the right to complain to your local supervisory authority.

Children

DealShield is a business tool. It is not intended for anyone under 18.

Changes

If this policy changes in a way that affects what happens to your documents, we will say so at the top of this page and email the waitlist before the change takes effect.