Privacy

What Octoscura processes

Octoscura processes account identifiers and authentication state; case questions, notes, URLs, uploads, extracted text, claims, source passages, contradictions, scenarios, verdicts, usage records, audit events, and exports; and operational records needed to secure and run the service.

Where data is handled

• Firebase Authentication handles sign-in identity and account authentication.
• Cloudflare hosts the application, relational case records in D1, and private files and exports in R2.
• OpenAI processes case content through the Responses API and stores uploaded files/vector stores used for case-scoped retrieval.

Octoscura does not claim Zero Data Retention. The OpenAI account and request path use the data controls actually available to the connected API project.

Purpose and visibility

Case data is used to perform verification, preserve an audit trail, enforce budgets and security controls, and provide exports and deletion. Cases are private to the owning workspace unless a future sharing feature is explicitly enabled by the user. Octoscura does not currently provide public case sharing.

Retention and deletion

Archive preserves a case. Permanent deletion removes its relational records and stored objects and attempts deletion of associated OpenAI files and vector stores. Provider-side retention may still follow the applicable provider terms, legal obligations, and account configuration. Users can export case data before deletion.

Security

Protected routes require verified Firebase bearer tokens and workspace-scoped authorization. Credentials remain server-side. State-changing routes enforce origin checks, endpoints are rate-limited, file and URL inputs are size-limited, and retrieved content is treated as untrusted data.

Your choices

You may export, archive, restore, or permanently delete a case in the workspace. Account deletion controls are available from Settings. For access, correction, or privacy questions, contact privacy@intentmesh.dev.

Operator

Octoscura is operated by IntentMesh LLC, Lehigh Acres, Florida.