How we handle your files

You are dropping unpublished promotional material onto a website. Here is what happens to it, and who else receives it.

If your client contract restricts outside tools, don't upload client material. The sample deck needs no upload, and published pieces carry no such limit.

Your files are used only to produce your review

We do not train models on your content. Two other companies receive your file to produce the review, and nobody else does.

Who receives your file, and what each keeps

• MLRagent (us). Hosted in the US. What we keep is set out below.
• Anthropic. Its Claude model reads your documents and generates the flags, through Anthropic's API. By default Anthropic does not use API inputs or outputs to train models, and deletes them within 30 days. Training · Retention
• LlamaIndex. Its LlamaParse service receives the whole file to read its layout. It keeps the uploaded file for 48 hours, then deletes it. Retention

Those periods are theirs, not ours, and they apply even when our own copy is already gone.

Encrypted in transit and at rest

TLS on the way in; server-side encryption in storage.

Without an account, we keep nothing

If you don't sign in, we delete your files and flags from our storage when your session ends, with a sweep after 24 hours as a backstop. Database backups that include them expire within 14 days.

Signed-in users own their data

Kept until you delete it. Delete removes the files from storage immediately and from backups within 14 days. The deletion itself is logged.

No human at Mantir opens your documents

Except with your permission, to debug a problem you've asked us to look at.

What we don't have yet

We are not SOC 2 audited or HIPAA certified, and we don't yet offer a standard DPA. If your organisation needs contractual data terms or a security questionnaire answered, write to us and we will work through it with you.

Last updated 2026-10-11. Questions: hello@mlragent.com.