Privacy Policy

Last updated: June 18, 2026

Incognitify Cloud is operated by Udooku LLC ("Udooku", "we", "us"). This policy explains what we collect and how we handle it.

What we collect

Account & organization data — your name, email, and the organizations and memberships you create.
Provider API keys — stored encrypted (see below). We display only the last four characters and a label.
Usage metadata — per request we record counts and metadata (provider, model, token counts, number of values masked, timestamps, success/error).

What we do NOT store

We do not store the content of your prompts or the LLM responses, and we do not store the original sensitive values that were masked. The masking "vault" that maps a value to a token exists only in memory for the duration of a single request and is never written to disk.

Document analysis

When you analyze a document, the file is read and masked entirely in your browser. We never receive the original file, and the map from detected values to tokens (the "vault") stays on your device — so for this feature we only ever receive the masked version, and cannot reconstruct the values we detected. Custom filters you define (personal or shared with your organization) are stored on our servers encrypted at rest with your organization's key — the same protection we use for provider API keys — and are only decrypted to send to your own browser for masking. This is not "zero-knowledge": the masked text still reaches our server and your chosen LLM provider, automated detection is imperfect, and any value we do not recognize is sent as-is.

How your keys are handled

Provider keys are encrypted at rest using AES-256-GCM with per-organization data keys, themselves wrapped by a master key held in our deployment secrets. Keys are decrypted only in memory at the moment a request is proxied, and are never logged.

Third parties

LLM providers (Anthropic, OpenAI, etc.) — your masked prompts are sent to the provider you choose, using your own key, subject to that provider's privacy terms.
Stripe — payment processing (we do not store card details).
Mailtrap — transactional email (e.g. invitations).
Hosting infrastructure — used to run the Service and database.

Retention & deletion

We retain account, key, and usage records while your account is active. You may delete your keys at any time and may request deletion of your account by contacting us.

Security & honesty

We use encryption and access controls, but no system is perfectly secure, and automated masking can miss sensitive values. Incognitify Cloud reduces risk; it does not guarantee privacy or regulatory compliance.

Contact

Udooku LLC, support@incognitify.com.