Privacy in this prototype

What we store

• An anonymous workspace identifier and random customer reference in an httpOnly cookie. No name, email or phone number is required.
• For each case: the message text you enter, the claimed sender, extracted signals, the risk assessment, analysis results and an audit trail.
• For media: the SHA-256 fingerprint, type and size. The web application does not store the media itself; the media service processes it in a temporary directory and deletes it after analysis.
• Trusted contacts: a name, relationship, a SHA-256 hash of the number and a masked label. The full number is not stored.

What we do not do

• No biometric voiceprints are created or stored. The model scores audio for synthetic-speech artefacts; it does not identify speakers.
• No tracking, advertising or third-party analytics. No sale or sharing of data.
• No messages are actually sent to trusted contacts — delivery is simulated.

Retention and deletion

Use “Reset demo” to delete your cases, reports and contacts immediately (audit records of the reset remain, without content). Demo workspaces may be purged at any time after the hackathon.

Production considerations

A production deployment in the UAE would need a data-protection impact assessment, a lawful basis under Federal Decree-Law No. 45 of 2021 (PDPL) and any sector rules, UAE data residency for personal data, and contracts with participating institutions. See the pilot plan.