Privacy notice · effective September 4, 2026

Private by construction.

TrialVeil is designed so a prospect can evaluate local files without uploading those files to TrialVeil. This notice explains the narrow information that may still be processed when you visit, purchase, or recover an export entitlement.

1. What stays on your device

Evaluator drafts, imported CSV or NDJSON files, filenames, source keys, field mappings, row-level values, exact counts and rates, unselected result fields, and exported packs stay in the browser unless you choose to move or share them. The private Runner blocks network connections and does not load external assets.

2. Anonymous product measurement

TrialVeil may store allowlisted, coarse journey events such as a visit, free rehearsal, result display, paid-plan click, download, or error. These events contain a short-lived anonymous session identifier, coarse source and plan labels, event time, and a closed action category. We do not intentionally collect raw inputs, filenames, draft text, URLs, referrers, receipt contents, names, email addresses, or other direct identifiers in product telemetry.

3. Purchase and delivery data

Stripe processes Checkout and payment information under its own terms. TrialVeil receives a Checkout Session reference and uses Arelvia Studio's payment verifier to confirm the exact mode, Price, quantity, and paid state. The product stores hashed Checkout, Session, and recovery references plus the plan, pack-family identifier, mode, fulfillment hash, and timestamps in its own database. The raw authoring-recovery capability is stored in your browser, not in that database, and is checked by the server before export. A separate signed Runner capability carries the exact pack hash only in the private link created for that pack.

4. Retention and control

Anonymous funnel events are retained for up to 400 days for product operations. Expired unfulfilled Checkout claims and short-lived rate-limit records are deleted during normal use; fulfilled entitlement records remain available for recovery. Removing this site's local storage removes the locally saved recovery capability; it does not reverse a payment or delete provider records required for accounting, fraud prevention, or legal compliance.

5. Sharing and service providers

We use a managed site host, Stripe for payment processing, and Arelvia Studio's payment-verification service for automatic delivery. We do not sell prospect datasets or the local evaluator inputs that TrialVeil never receives.

6. Security and limits

TrialVeil uses strict input contracts, content hashes, a purchase-gated network-locked Runner, bounded processing, same-origin delivery, and opaque references. At the hosting edge, a one-way hash of the connection address is used only to partition short-lived Checkout and delivery abuse limits; the raw address is not written to TrialVeil's product database. A content hash establishes consistency, not the identity of a person, the truth of source data, or proof that a particular execution occurred.

7. Questions

Use the Arelvia Studio Support channel shown in your purchase record. Do not send confidential prospect data, payment-card details, passwords, or secret keys with a support request.