Privacy

How information moves through your Sourceframe workspace.

Effective October 15, 2026

Sourceframe is operated by Owen Cruise. For privacy questions or requests, contact owencruise1@gmail.com.

Your account

Google or configured Microsoft work-account sign-in creates or recognizes your Sourceframe account. Google shares its account identifier, email, name and optional Workspace domain. Microsoft shares an organization tenant and account identifier, optional name and email or login label. Microsoft email and login labels are not treated as verified ownership keys. Sourceframe gives your account a separate internal identifier. Profile emails and login labels are display information; they do not decide who owns a document. Accounts are not automatically merged across sign-in providers.

Sign-in requests only basic identity. Cloud document connections require separate optional authorization. Neither basic sign-in grants Gmail, Outlook, Calendar, Contacts or organization-directory access.

Optional Google Drive import

When you choose Google Drive, Google's picker lets you share selected files with Sourceframe using its per-file drive.file permission. That Google permission permits viewing and editing files shared with the app; Sourceframe uses it only to read and import supported documents. It does not request access to read your entire Drive. Files you previously shared with this app can remain authorized in Google until you remove access.

Connecting Drive is a separate authorization step linked to your signed-in Sourceframe account. With your permission, the website service stores an encrypted Google refresh token so it can obtain short-lived access tokens when you choose documents later. The encryption key is held separately from the account database. A short-lived access token is supplied to Google's picker in browser memory; the refresh token is never sent to your browser, the document-processing service or the AI provider. Google libraries and the picker load when you choose this optional action. Remembering a connection does not enable background file synchronization.

Imports contain a copy of a selected file's bytes, its name, file type and version information. Native Google Docs are exported as Word documents. The copied file goes through the same upload, parsing, OCR, retention and optional AI steps as a local upload. Import alone does not send its text to the AI provider. Editing or deleting the Drive original, or revoking Google access, does not update or delete a copy already imported into Sourceframe.

You can disconnect Drive in account settings or remove Sourceframe's Google permissions in your Google account connections. Disconnect stops new token issuance immediately and queues Google revocation and encrypted credential cleanup; revocation retries continue for up to 24 hours if Google is unavailable. Stored revocation credentials are then removed even if Google has not confirmed revocation; you can remove any remaining grant directly in Google account connections. Google revocation may remove both Drive and sign-in consent for the app. It does not delete your Sourceframe account or copied documents. Google may expire or revoke a connection, requiring you to connect again.

Optional Microsoft OneDrive import

When Microsoft app setup is enabled, you can separately connect an organizational Microsoft 365 account. The read-only Files.Read permission covers your own OneDrive files; it is broader than permission to individual selected files. Sourceframe lists supported documents and folders and imports only the documents you choose. This release does not request write, Outlook, Calendar, Teams, directory or tenant-wide application permissions. SharePoint libraries, shared folders, personal Microsoft accounts and national-cloud tenants are outside this first release.

With your consent to offline access, refresh and access tokens are encrypted in the account database using the server-held connection key. Microsoft tokens stay server-side and are not sent to browser application code, the document-processing service or the AI provider. Token renewal happens when you browse or import. Your organization may require administrator approval or later reconnection. The chooser shows supported items from the first 100 entries in each folder; a folder can contain additional items not shown.

Disconnecting Microsoft OneDrive immediately disables this connection and removes Sourceframe’s local credentials. It does not automatically revoke the Microsoft consent grant or affect your other Microsoft sessions. Remove remaining permission in Microsoft My Apps or ask your organization administrator. Recovery or account deletion also disables this connection. Copies already imported retain the same document retention rules; editing, deleting or revoking the original does not update or erase a copy.

Documents, questions and AI processing

Sourceframe receives files you upload, their filenames, your questions and instructions, and any corrections or review notes you add. The processing service parses supported documents and uses OCR on scanned PDFs. Temporary jobs contain the source files, extracted text, task context, answers and progress records.

When you approve site AI processing, reviewed source text, task instructions and your question are sent through OpenRouter to the configured Google Gemini model. Follow-up questions include relevant earlier questions and draft answers. The model request does not include OCR page images. The literal comparison workflow does not make this model request.

The current model adapter requests Google Vertex routing, no provider fallback, no data collection and zero-data-retention routing. These request settings are not a guarantee about every provider’s handling of information. Avoid uploading material whose sharing or processing you have not authorized.

Where information is handled

Cloudflare hosts the website and account database. A Vultr-hosted processing service handles document parsing, OCR, temporary jobs and saved runs. OpenRouter and the configured Google model provider handle approved AI requests. The processing service receives the internal Sourceframe account identifier; the sign-in adapter does not send it your Google or Microsoft tokens, external account identifiers or profile. Personal information within your uploaded content remains part of that content.

Infrastructure providers may process operational request metadata and errors. Cloudflare request logging and sampled tracing are enabled, with query-string redaction configured. The processing application suppresses its standard HTTP request log and does not deliberately put document text or credentials in that log. This is not a claim that the service creates no logs or metadata.

Retention and deletion

Temporary jobs become inaccessible one hour after creation. Saving a run is a separate action with a one-day or seven-day retention choice. Saved runs include source files, extracted or corrected text, task context, results, source references and related review information. Expired jobs and runs are removed from active storage by cleanup. Deleting one saved run does not delete another saved copy or its original temporary job.

Account and usage records have separate retention from documents. They include profile information, session metadata, credits, inference usage and test-plan history. Deleting a document does not erase those records. Account deletion closes sign-in, revokes sessions and recovery codes, and disables provider connections before their revocation and credential cleanup. When deletion processing completes, active document content and the profile fields in the account record are removed. Pseudonymous usage and billing records are retained. A hash of the retired sign-in identity prevents new signup with that identity for 30 days; after that wait, it may create a new, empty workspace. The deleted workspace cannot be restored. An AI request already sent before deletion may already have been processed. Operational logs and backup copies may remain after active data is removed; this notice does not promise immediate erasure of every copy.

Exports that you download are separate copies under your control. Sourceframe cannot remove copies that you or other recipients have saved elsewhere.

Cookies and browser storage

A private, secure session cookie keeps you signed in for up to seven days. The server stores a hash of its token. A separate sign-in cookie lasts up to ten minutes. Restricted recovery cookies last ten minutes; a deletion-receipt cookie can retain access to the deletion status for 30 days. Signing out revokes the current Sourceframe session; it does not sign you out of Google or Microsoft or delete your account. Optional cloud connections store encrypted provider credentials on the server as described above; credentials are not stored in browser storage. Signing out does not disconnect a remembered Drive connection, but a valid Sourceframe session is required to use it. Account recovery to another identity through the same sign-in provider disables the old connections and requires a new authorization.

To limit automated sign-in, recovery and Drive-import requests, Sourceframe stores counters under a keyed hash of a network address, action and day. These counters expire and are removed by cleanup. The counter table does not store the raw network address. Infrastructure request metadata is handled separately as described above.

The browser stores an account-scoped active-job identifier so a reload can return to that job. It is a reference, not the document contents, and the interface clears that reference on sign-out or account change.

Account security and your choices

You can sign out, manage recovery and request account deletion in account settings. Keep any recovery codes private: someone with an unused code and the required fresh sign-in proof may use the recovery process. Google and Microsoft account access is managed by those providers; Sourceframe cannot reset those passwords.

The subscription interface is a test simulator. It does not collect payment cards or charge you. A verified business domain does not automatically share your documents with coworkers or give an administrator access through Sourceframe.

Contact

For privacy questions, access requests or deletion help, contact owencruise1@gmail.com. Describe the request without emailing document contents, passwords, session cookies or recovery codes. We may need to verify account control before changing or disclosing account data.