Operating entity (pending approval)
- Operator
- Not yet published
- Address
- Not yet published
- Privacy contact
- Not yet published
- Retention policy
- Under review
Operator and contact
The actual FDEDO operating entity, address and privacy contact are not yet verified or approved. This is an unpublished draft and cannot be represented as effective policy.
Categories and purposes
Identifiers and company membership support authentication and tenant isolation. Project inputs, business text, provenance, revisions and logs support authorized business discovery, security, troubleshooting and lawful duties. Payment records would only be processed after billing is enabled.
Lawful basis and minimization
Personal data is processed only where necessary for a contract, with valid consent, or another applicable legal basis. Unnecessary personal data is not required for basic access. Do not share unauthorized information, credentials or secrets.
Retention, backups and erasure
Project data is retained in the company workspace; creating a report does not delete it. Verified schedules for sources, backups and legally retained audit/payment records must be published by the real operator. Eligible requests for erasure and correction will be handled subject to legal obligations.
Infrastructure and external recipients
The website uses Cloudflare Workers/D1. Optional Google login, email or payment providers are relevant only when enabled. Live DeepSeek transfers of customer sources are disabled; API-specific contractual terms and applicable transfer requirements need separate verification.
Your rights and contact
Depending on local law, individuals may request access, copies, correction, erasure, withdrawal, explanations and account closure. An operator-controlled privacy contact and verification path must be published before commercial launch.
Security and responsibility
Uploaders must have authority and sanitize appropriately. The operator remains responsible for applicable access control, security measures, audit, incident response and statutory duties. No blanket waiver applies.
Sensitive information and international transfers
Sensitive data, minors, important data and cross-border transfers may require separate assessments and stronger safeguards. Pseudonymization alone does not necessarily remove personal-data obligations.
Updates
Material changes will be versioned and disclosed with renewed choices as required.
Regulatory and provider references
Source submission and external AI processing require separate permissions.
Listed sources are not a compliance certificate; relevance depends on jurisdiction, operator and actual processing.