# Privacy

Draft. To be reviewed by counsel before launch.

Tideproof is operated by Aunova Technologies Ltd., Dubai International Financial Centre, UAE.

## What we process

- **Exposure scan:** Your text is sent over an encrypted connection to hai, our scoring model, and scored on five independent dimensions. The same answer also says how fully to show you the result, in plain wording or in full, which you can change yourself at any time with the "Simpler" and "More detail" buttons. We do not store it, and it is never attached to a waitlist signup: only the resulting score, band, sector and suggested blocks are. Running hai means sending your text to our AI model provider, which processes it for us under its data processing terms, may be located outside the UAE, and does not use it to train models. If you import a LinkedIn PDF, it is read in your browser and never uploaded; only the text you choose to scan is sent.
- **Adaptive layout:** Anonymous, in-page behaviour (sections viewed, buttons pressed, time on page, referrer domain, language, approximate country) is used to order the page for your visit. It goes to hai too, so it reaches the same AI model provider on the same terms as the exposure scan. It is not linked to an identity, and the personalisation uses no cookies and no local storage. We keep none of these signals: the only thing we keep is the anonymous counts described below. You can switch the ordering off in the "Tuned for you" panel, which also names the wording your scan result is shown in. Switching it off puts the wording back to standard unless you have already chosen a wording yourself, in which case your choice stands.
- **Anonymous counts:** We keep anonymous counts of a handful of moments: that a scan finished (with its exposure band, its sector, and the wording our model chose for it, which is plain, standard or detailed; if you then change the wording yourself, that press is counted separately and the two are never joined up), that a link to one of the tools we recommend was followed (which tool), and that a next step was followed, that "Next" was pressed, that a share button was pressed, that the full picture was asked for, or that you asked for the result to be simpler or more detailed. Each one is a count and nothing else: it carries no identifier, no IP address and no free text, it sets no cookie of its own, and it holds nothing from what you typed. Each count does carry the time it happened, so at low traffic a handful of counts a second apart could be guessed to belong to one visit; nothing in them identifies whose. They are stored in Cloudflare Analytics Engine, which holds them for three months. They are counted for every visitor, wherever you are, because a count that skipped a continent would tell us nothing. Our basis for keeping them is our legitimate interest in knowing, in aggregate, which parts of this page help and which do not.
- **Leads:** If you give us your email (waitlist, report request, team demo, AI-visibility check), it is collected through Formspree, a form processor acting for us, together with the plan you chose and any optional context from your scan. We use it only to contact you about the launch, or to send you the check you asked for. The website address you give us for an AI-visibility check is collected the same way, and used only to run that check and send you the result.
- **Hosting and security:** Your IP address is used to rate-limit the exposure scan and the page's layout calls per IP, and to prevent abuse. Our hosting provider, Cloudflare, keeps request logs for a short period as part of running and protecting the site, and sets one strictly necessary security cookie, named cf_clearance, which lasts up to a year and lets it tell a person from automated abuse. In our own account we keep one short technical line for each scan and each layout call, for three days: which engine answered, which model version, how long it took, how many tokens it used, and any error it returned. Each line also records which address on this site was called, and the reference numbers Cloudflare puts on a request so that one can be traced through its network; on their own those numbers identify no one. Those lines hold no IP address, no details of your browser, no location and nothing you typed, and the per-request record that would have held your IP address and browser is switched off. Page traffic is measured with Cloudflare Web Analytics, for every visitor, including in the EU: it is cookieless, sets no identifier, stores nothing on your device and does not follow you to other sites.
- **Links to tools:** A link marked "Referral" goes through a short address on this site, https://tideproof.org/go/..., which counts the click and sends you straight on to the provider; that provider may record that you came from us so it can attribute the referral, and what we can see is limited to that count and to what its referral dashboard shows us. A tool we have no referral arrangement with is linked directly, takes no detour through us, and is not counted.

## Your rights

Ask for access, correction or deletion at [info@tideproof.org](mailto:info@tideproof.org).