Privacy

We Do Not Store Your Text

SubletShield does not save your full pasted listing or conversation text. That content is sent to our server only for the duration of the analysis request and is not written to a database or log file.

Repeat Signal Hashing

To help surface listings that appear across multiple analyses, we may extract non-reversible cryptographic hashes (SHA-256) of limited signals found in pasted text — such as a phone number, email address, building-and-price combination, or contact name pattern. We store only the hash and a timestamp in Redis (if configured), with a 30-day retention window. Raw phone numbers, emails, names, and listing text are never stored.

When a hashed signal has been seen in multiple completed analyses within a week, we may show a previously-analyzed notice on your results. This is pattern frequency only — not proof of fraud.

Third-Party Processing

Analysis is performed via a third-party language model API (OpenAI). That provider processes your submitted text according to their own privacy policy and data handling practices. Do not paste sensitive personal information unless necessary.

Rate Limiting

We may temporarily store your IP address in memory (or Redis, if configured) solely to enforce rate limits (10 analyses per hour). This data is not linked to your pasted content.

Analytics

We use Vercel Analytics to collect aggregate page views (pages visited, referrers, countries, devices). This does not include pasted listing content or analysis results.