Privacy

What this demo actually stores. Not a law-firm privacy opinion.

Briefing, book-demo, start-free, and contact forms store the fields you submit: name, email, and any job title, phone, facility, state, or message on that form.

The demo session is an httpOnly cookie. Unlocking a briefing sets a separate httpOnly cookie listing which papers this browser unlocked. Logging out clears the session cookie.

Those records are not sold. Email leaves the server only when RESEND_API_KEY, RESEND_FROM, and ASK_TO_EMAIL (or CONTACT_TO_EMAIL) are set. Otherwise the row stays queued and the page says so. This repository does not include those keys.

If LEAD_WEBHOOK_URL is set, the same lead JSON is posted there. A failed webhook does not fail the form.

On the hosted demo, the database file lives on the instance temporary disk unless DATABASE_URL points at a remote database you configure. The shared demo workspace is not a private tenant file.