The short version
- Minutes
- Your document is deleted from our servers within minutes of your review finishing, whether it succeeds or fails. If a review crashes, the document is deleted within 24 hours. Backup copies expire within 7 days.
- Never
- It’s never used to train AI, by us or by the AI providers we use.
- 30 days, or up to 2 years if flagged
- Two of our AI providers may keep a copy for up to 30 days to check for misuse, then delete it. Anthropic may keep content flagged for misuse for up to 2 years. The third, Fireworks, doesn’t log or store the data.
- Until you delete it
- Your report stays in your account until you delete it. Choose a private review, and it deletes itself.
- Any time
- You can delete any review, or your whole account, at any time.
What happens to your document
- 01
You upload it.
Your file is stored temporarily so the review can run. If you upload a file but never start a review, it’s deleted after about an hour.
- 02
We extract the text.
The review works on the text of your document, not the file itself.
- 03
Three AI reviewers read it.
The text goes to three AI providers. Each reviewer reads it on its own first, then they critique each other’s findings, and finally the issues are ranked. The next section covers who the providers are.
- 04
Your report is created.
It lists every issue found, and may include short quotes from your document so you can see exactly what each point refers to.
- 05
Your document is deleted.
Within minutes of the review finishing, whether it succeeds or fails, we delete your file and its extracted text from our systems. Only the report remains.
Who sees your document
Your document text goes to three AI providers, one for each reviewer. Only the services needed to run the review handle it.
Claude
by Anthropic
- Used for
- One of the three reviewers, plus the proofreading check
- Based in
- United States
- Keeps your text?
- Up to 30 days, or up to 2 years for content flagged for misuse
- Trains AI on it?
- No
GPT
by OpenAI
- Used for
- One of the three reviewers
- Based in
- United States
- Keeps your text?
- Up to 30 days, to check for misuse, then deleted
- Trains AI on it?
- No
DeepSeek
by Fireworks
- Used for
- One of the three reviewers
- Based in
- United States
- Keeps your text?
- Doesn't log or store it
- Trains AI on it?
- No
About DeepSeek. DeepSeek is an open AI model that anyone can run. Fireworks runs it on its own servers in the United States, so your document never goes to DeepSeek the company.
About MiniMax. MiniMax, like DeepSeek, is an open AI model that Fireworks runs on its own servers in the United States, so MiniMax the company never receives your document.
Backups. If a reviewer is unavailable, or its answer comes back cut off or empty, we use a backup from the same provider: an earlier Claude model at Anthropic, an earlier GPT model at OpenAI, or MiniMax at Fireworks. The backup receives the same document and instructions. A backup never sends your document to a company that isn’t listed above.
One exception, for completeness. If a provider’s automated safety systems flag content as seriously breaking their rules, they can keep it longer to investigate (Anthropic: up to 2 years). Normal business documents don’t trigger this.
Services that never see your document. Supabase (Frankfurt, Germany) handles your login, Stripe handles payments, Resend sends account emails such as sign-up confirmation and password reset, mailbox.org is our support email provider, and Sentry tells us when something breaks on our servers. None of them receives your document text. Sentry gets technical error data only, stored in the EU.
Where it runs. Our servers are run by Hetzner Online GmbH (Germany) and our database by Scaleway SAS (France), both in the EU. Your document is processed and briefly stored on their systems while we review it; they act only on our instructions, under a data processing agreement.
What we keep, and for how long
Deleted quickly
- Your uploaded file and its text
- Deleted within minutes of the review finishing, whether it succeeds or fails. If a review crashes, the document is deleted within 24 hours. About an hour if you never start a review.
- Private review reports
- 1 hour after you first open them, or 24 hours after the review finishes if you never do
Kept until you delete it
- Your report, including any short quotes
- Until you delete it or close your account
- Your email address
- Until you close your account
- Credits and transaction history
- Until you close your account
Kept after you close your account
- Invoices
- 11 years after purchase, as Croatian accounting law requires, even if you close your account
- Anonymous usage records
- Kept after you close your account, with nothing linking them to you or your documents
Never stored
- Card details
- Never. Stripe handles payments, and your card number never reaches us.
Logs. Our system logs record when something goes wrong and where. They never contain text from your document.
Backups. Our database is backed up automatically, and each backup is kept for 7 days. A backup made during the few minutes your document is with us contains its text, so a deleted document or report can remain in a backup for up to 7 days, until that backup expires. Backups are used only to restore the service after a failure.
You upload
Three reviewers read it
Report delivered
Deleted from our servers
Two of our AI providers may keep data for up to 30 days under their own policies (Anthropic up to 2 years for content flagged for misuse). Backups are kept for 7 days. Details in the privacy policy.
Deleting your data
- One review. Open the review and click Delete at the top right. The report is removed straight away. Download the PDF first if you want to keep a copy.
- Private reviews. Nothing to do. They delete themselves on the schedule above.
- Your whole account. Go to your account settings and choose Delete account. This removes all your reviews and reports, your credit history and your login. Unused credits are lost. Only invoices and anonymous usage records stay, as described above. After account deletion, Stripe keeps the name, email and invoices linked to your payments, because the law requires it.
Deleting can’t be undone. Once a review or account is deleted, we can’t bring it back.
Security
- Encrypted in transit. Your document travels over an encrypted connection, from your browser to us and from us to the AI providers.
- Your reviews are yours. Each account can only see its own reviews. Asking for anyone else’s returns nothing.
- Who can access your data. Vettena is run by one person, who has technical access to its systems. We don’t open your documents or review results unless you ask us to, or to fix a problem you’ve reported.
If a security problem ever affects your data, we’ll tell you, as the law requires.
Questions
Email us at support@vettena.com with any question about your data. We’ll reply within a few working days.
If you need a data processing agreement, email support@vettena.com.
The full legal details are in our privacy policy.