Where your data goes
This page lists every outside company that receives a client's data when you use Landwaiter: what it receives, why, and what it keeps.
Before you upload a client's documents, the law asks you to have the client's written consent (19 CFR 111.24). The desk records that consent on each dossier.
What we keep, and where
- The desk and its database: Google Cloud, in South Carolina (us-east1). A copy of the server's disk is made each day and kept for 7 days, in the United States.
- Your documents (invoices, specification sheets, your client's answers): Cloudflare R2, in its United States jurisdiction. Cloudflare guarantees that this data is stored and processed in the United States.
- The service's own keys: Google Secret Manager, in South Carolina. They are never written in a file.
Who reads what
| Company | What it receives, and why | What it keeps |
|---|---|---|
| Our AI provider | During the reading of a file, it receives the file's documents and facts, to read them and draft the answers. | Deletes them within 30 days, unless they are flagged for a breach of its usage policy. It does not train its models on them. |
| Our search provider | The search words that the reading writes to search the law library. They can name your product. They are used to search by meaning. | Does not use them to improve its products. It logs them for a limited time, only to detect abuse. |
| Our second AI provider | When a law changes, the answers of the files that the change may reach, to sort the changes by how much they matter. | Keeps them up to 30 days for abuse monitoring. It does not train its models on them. |
| Clerk | Your name, your e-mail address and your sign-ins, for sign-in by invitation and e-mail code. | Keeps them for your account, on United States infrastructure. |
| Resend | The e-mails that we send you: invitations and notices. | Stores them in the United States. |
| Cloudflare | The encrypted traffic between your browser and app.landwaiter.com, and the storage of your documents (above). | Documents as above. It does not store the content of the traffic. |
| Public sources | Searches on government sites (for example the FDA's and the Federal Register's) and on the public web, with words that describe the product, to find the law that applies. | Only short searches go out; your documents themselves are never sent. |
What we never do
- Train an AI model on your documents. Our AI providers do not train on what our service sends them, and we train no model on it.
- Sell your data, or share it with anyone not described on this page.
- Put advertising, analytics trackers or session recording on the desk.
Who can see your files
The people of your firm whom you invite. Each firm's files are kept apart from every other firm's. Landwaiter's team can reach the server to run and repair the service. The server is reached only through Cloudflare's tunnel and Google's identity-aware proxy.
Deletion
Write to [email protected]. We delete your firm's documents and files and confirm it in writing. The daily copies of the disk end within 7 days. Our providers delete their own copies on the schedules above.
Changes
We add a company to this page before it receives any client data.
Landwaiter · [email protected] · Sources, checked on 5 November 2026: the published data terms of our AI and search providers, Clerk (security), Resend (data regions) and Cloudflare (R2 data location).