Privacy

Local file selection

The browser reads bounded samples to resume the same local file and uploads PST parts directly to private Cloudflare storage. Filenames and local paths are not sent, and exact sizes are not sent to analytics.

Controlled product analytics

We measure a small set of funnel actions, such as landing-page visits, calls to action, file-picker use, valid or unsupported selection, broad file-size range, and contact intent.

Analytics must not contain filenames, paths, email addresses, message content, subjects, senders or recipients, folder names, attachment names, PST-derived text, raw parser output, or exact file sizes. The event endpoint rejects properties outside its controlled allowlist.

Contact form and email

The contact form sends the name, email address, and message you choose to provide to our form-delivery provider and support inbox. If the form is unavailable, you can contact us by email. Do not attach a PST or include mailbox contents, email bodies, or other sensitive mailbox data.

Private storage and deletion

Source PSTs, independently verified repaired outputs, and controlled result manifests are stored in private R2. They are automatically deleted 24 hours after the job reaches a completed, declined, or failed state. Delete now immediately blocks downloads and fences active compute from publishing a result; known artifacts are then removed with retry-safe cleanup.

Each download requires a short-lived authorization valid for 30 minutes. That authorization lifetime is separate from the 24-hour artifact-retention period, and previously issued authorizations stop working as soon as deletion or expiration is accepted.

PST files are not used for AI training. Routine human access to PST contents is not part of this service. Storage access is limited to the automated repair, verification, download, and deletion lifecycle.

Contact

Privacy questions can be sent through the contact form or to support@correctformats.com. Please do not include a PST or mailbox contents.