Privacy Policy
SpecRisk AI is owned and operated by Eph Labs LLC.
SpecRisk AI collects the information you submit for an AI-assisted construction document review, including contact details, company details, project information, notes, uploaded PDFs, and generated reports.
We use submitted information to provide the review, operate the service, respond to support requests, improve product quality, and send transactional notifications.
We use the email address entered and confirmed on your submission form to deliver preview links, payment updates, and purchased-report verification codes. Preview links are reusable for seven days and authorize only the free preview. We store cryptographic hashes of preview tokens, not their original values. Purchased reports require a verified customer session or authorized owner access. Changing the submission email requires support verification of ownership and payment; a different checkout payer email does not change report ownership.
Payment metadata may be stored for fraud prevention, customer support, accounting, refund review, and dispute resolution. SpecRisk AI does not store full card numbers.
Uploaded project documents may contain sensitive information. We use private storage and access controls to restrict access to documents and full reports.
SpecRisk AI provides AI-assisted document review and decision support only. It is not legal, engineering, insurance, construction, or professional estimating advice. Users are responsible for reviewing all project documents and making final bidding decisions.
Use of SpecRisk AI does not create an attorney-client, engineer-client, insurance adviser, construction consultant, professional estimator, fiduciary, or other professional relationship with Eph Labs LLC.
SpecRisk AI does not guarantee completeness or accuracy of AI-generated output, and users remain responsible for final review and bid decisions.
Do not upload documents you are not authorized to share. Users are responsible for confirming they have the right to upload and process all submitted project documents.
We do not sell submitted project documents. Third-party providers such as Supabase, OpenAI, Stripe, Vercel, and email providers may process information as needed to operate the service.
Documents, submission data, generated reports, payments, and related communications may be processed using third-party services including OpenAI, Supabase, Vercel, Stripe, and an email provider if configured. Those providers may process information according to their own terms, privacy policies, security controls, and legal obligations.
Cookies and tracking
SpecRisk AI does not currently use retargeting pixels or session replay. The site and its service providers may use cookies, logs, security checks, and similar tools to operate the website, process payments, prevent abuse, and maintain your session. When you open a valid affiliate referral link, a signed first-party cookie remembers the first qualifying referral for 30 days in that browser. Repeated clicks do not extend that window. The referral is saved on documents submitted during the window to apply an eligible discount and account for affiliate commissions, even if the browser cookie later expires. We do not fingerprint visitors or share their documents or report contents with affiliates. When enabled, Google Analytics may use cookies and collect website usage information to help us understand traffic and improve the service.
Optional affiliate click analytics run only after you allow them and are skipped when your browser sends a Do Not Track or Global Privacy Control signal. We use a random referral-window identifier to count visits and approximate unique visitors, not raw email addresses or IP addresses. Declining analytics does not affect referral discounts. Individual visit records are retained for up to 90 days; anonymous aggregate counts remain. Affiliate dashboards show aggregate performance and anonymous commission references, not customer identities, documents, or report contents.
Approved affiliates verify mailbox ownership before accessing a private dashboard. We retain their approved login identity and send essential transactional commission notifications. Changing a login email requires owner approval and fresh verification. Sign-in challenges expire after 15 minutes and are removed after an additional day. Notification recipient payloads are removed after 90 days; financial and delivery audit records are retained for accounting and dispute handling.
Unpaid source PDFs and abandoned uploads are eligible for cleanup after 24 hours, except while an authorized review or a verified checkout/payment is pending. Completed free previews remain accessible for the seven-day lifetime of their issued preview links without extending source-PDF retention. A fresh preview link may be requested only while the preview is still available; expired or deleted uploads cannot be restored by reissuing a link. Unpaid previews and their stored reports are eligible for deletion after their access period ends. Purchased reports require email verification. SpecRisk AI retains paid-service data, payment and audit records, support communications, and protected processing caches as reasonably needed to provide the service, handle follow-up, maintain business records, comply with legal obligations, resolve disputes, and improve product quality. Deletion requests may be sent to contact@ephlabs.ai, subject to legal, security, backup, and business record requirements.
These Terms and any dispute related to SpecRisk AI are governed by the laws of Missouri, United States, without regard to conflict-of-law rules.
Privacy or support questions may be sent to contact@ephlabs.ai.