Last updated: July 25, 2026
The short version
- We collect the email you start with, and, if you buy the Finishing Pass, the project details and report you upload for the analysis. That’s the product working, not surveillance.
- The Readiness Report is free, with no payment involved. If you buy the Finishing Pass, Stripe processes it; card numbers never reach us.
- We don’t sell your data. We don’t run ad trackers.
- Email us and we’ll delete your submission. That’s the whole procedure.
What we collect
- Your start details. Your email address, and an optional first name. That is all it takes to start; we ask nothing about your project to hand you the audit skills.
- Your report and project details, only if you buy the Finishing Pass. The markdown report you upload for analysis, plus the platform you built with and a project name, so we can tailor the fixes. You choose what the report contains. We ask for your agent’s findings, never for your code, and we suggest you skim it before sending.
- Payment records, only if you buy the Finishing Pass. Payments are processed by Stripe. We receive confirmation that you paid and basic receipt details; your card number never touches our servers. The free report involves no payment data at all.
- Ordinary server logs. Requests to the site (address requested, time, IP) for keeping the service running and diagnosing problems.
Why we collect it
One reason: to run the service. Your email is how we send your Readiness Report link and answer you. If you buy the Finishing Pass, the report and details you upload are the inputs to our analysis, which produces your fixes, and your receipt goes to that same email. Your results are stored so your private link keeps working. We may also read submissions when something fails, to fix the failure and improve the method.
Analysis runs on OpenAI’s API, and only after you buy the Finishing Pass: the report and details you upload are processed there to produce your fixes. The free report involves no such processing at all. OpenAI states that data sent to its API is not used to train its models. Our infrastructure runs on AWS in the United States.
What we don’t do
- We don’t sell or rent your data. To anyone.
- We don’t share it for advertising, and we don’t run ad trackers.
- We don’t train public models on your submissions.
- We never ask for your source code, repository access, or credentials.
Cookies
The marketing site sets no cookies of its own. The application and results flow uses only what’s strictly needed to function. If you buy the Finishing Pass, Stripe sets its own cookies during checkout, under its own policy.
How long we keep it
We keep your submission for as long as it’s useful to you. Your results link is designed to keep working. If we ever adopt a fixed retention window, this page will say so before it applies to you.
Deletion
Email hello@finishingpass.comfrom the address you applied with and ask us to delete your submission. We’ll remove the application, the report, the assessment, and the results. If you bought the pass, Stripe retains the payment records it’s legally required to keep; we can’t delete those on their systems.
Your rights
Depending on where you live (GDPR in Europe, CCPA in California, and similar laws elsewhere), you may have rights to access, correct, export, or erase your personal data. We honor the spirit of these regardless of geography: write to us and we’ll sort it out like people.
Changes
If this policy changes in a way that matters, we’ll note it here with a new date. We won’t quietly expand what we collect.
Contact
Tekton: hello@finishingpass.com