Privacy policy
What the website and lab process, which providers are involved, and what we agree before project work starts.
The assessment form is configured for Netlify Forms. It collects your name, work email, company, optional website or profile, and the system, outcome and boundary details you submit. Hifzara uses these details to respond and discuss the requested work. If you email us, we receive the message and contact details you choose to share. Keep initial briefs free of passwords, credentials and sensitive customer records.
Google Firebase Authentication handles email and password sign-in, verification and the browser sign-in session. Firebase Firestore stores an account record with your email, company, optional contact permission, check count, creation time, latest check type and update time. These records support account access and the two-check allowance. Permission to contact you about findings is optional.
Selected PDF, DOCX and TXT files are read and screened inside your browser. The lab does not upload their contents or save findings in its account database. Screening covers up to 250,000 extracted characters; PDFs are limited to 40 pages and image-only text is not read. The lab looks for five text patterns and shows illustrative review guidance. It does not run an AI model, execute tools, scan for malware or establish that a document or system is safe.
For URL screening, the submitted URL and human-verification token are sent to a Cloudflare Worker. Cloudflare Turnstile also processes the verification request, including your IP address. The Worker retrieves up to 300,000 bytes from the target page and returns text for browser screening. The lab does not save the URL or retrieved content in its account database. Cloudflare and the target website process the request and may keep operational logs. Use public links without private data, credentials or access tokens.
The website and lab integrations use Netlify, Google Firebase and Cloudflare for the purposes described above. These providers may also process technical request and service records under their own terms. This page does not promise a fixed retention period or automatic deletion of enquiries, accounts or provider logs. Ask us about a specific record or retention requirement before sharing sensitive information.
Project data requirements are agreed in writing before work starts: what data is needed, who may access it, which providers and deployment locations are involved, and how retention, handover and deletion will be handled. If an engagement needs a data processing agreement, we discuss and agree it for that engagement. The public lab is not a substitute for those project terms.
Email info@hifzara.com to request access, correction or deletion, withdraw optional contact permission, or ask about data handling. For a lab account, include the account email but never your password. Account deletion is handled by request; there is no self-service deletion control in the lab. We may need to verify your identity and will explain any applicable limits when responding. This page may be updated as the service changes.
info@hifzara.com