Privacy

Last updated: 27 June 2026

1. Local files and extraction

Raw PDF and image files remain on your device. PDF text extraction and English/Bahasa Malaysia OCR run in browser memory. Files, canvases, OCR workers, and extracted text are released after completion or cancellation and are not placed in browser storage.

2. Transient inference

Extracted text passes transiently over HTTPS through Siap's server to Chutes inference. Siap verifies that the selected model reports confidential_compute=true before sending content. This implementation is protected by confidential compute, but it does not claim browser-to-enclave end-to-end encryption.

3. Data retained in Convex

Convex stores your profile, structured conclusions, citation excerpts capped at 240 characters, action state, inventory metadata, and content-free model-run metadata until you delete them. Siap does not retain prompts, complete extracted text, raw model responses, raw files, or Chutes tokens.

4. Authentication and billing

Chutes access and refresh tokens are held only in Secure, HttpOnly cookies. Inference is billed to the signed-in user's Chutes account. You can delete one report or all Siap data and revoke the local session by signing out.