Legal

Privacy Policy

How the Resubmittal Beta handles uploaded PDFs, generated reports, anonymous identifiers, and service data.

Files and AI processing

When you start an analysis, the uploaded PDF is temporarily stored on the application server and sent through APIMart to a Gemini model for document analysis. The source PDF is included only in the analysis request and is deleted from local temporary storage after the analysis succeeds or fails. Resubmittal does not intentionally retain a copy of the PDF or its full text.

Reports and retention

The structured report is stored for 7 days so the same anonymous browser can open and export it. Expired reports are deleted. You can delete a report earlier from My Reports.

Anonymous access and limits

Resubmittal uses a signed HttpOnly cookie containing a random visitor identifier. A salted hash of the requesting IP address is used for abuse and rate limiting; the raw IP is not stored in the analysis record. The Beta allows three successful analyses per anonymous visitor.

Optional analytics

Resubmittal may ask whether you want to allow anonymous usage analytics. If you allow it, Google Analytics 4 receives page views and limited product events such as choosing a file, starting an analysis, completing or failing an analysis, and exporting or deleting a report. We do not send PDF contents, file names, report contents, report identifiers, IP addresses, API keys, or model responses in these events. UTM campaign parameters may be retained in temporary browser storage for attribution and are sent only after analytics consent. Analytics remains disabled if you decline.

What not to upload

Only upload documents you are authorized to process. Remove unnecessary personal, export-controlled, classified, privileged, or highly sensitive information before uploading.

Service providers and security

APIMart provides the API gateway and a Gemini model processes the PDF to produce the requested analysis. Reasonable technical controls are used, but no internet service can guarantee absolute security. API keys and internal prompts are not included in stored reports.

Contact

Privacy requests can be sent to [email protected].

Last updated: August 10, 2026.