← Back to Gold Standard Analysis
Gold Standard Analysis · Gold Standard Appliance LLC

Privacy Notice

Effective October 2, 2026

Gold Standard Analysis is a product of Gold Standard Appliance LLC. This notice explains what the Gold Standard Analysis application processes when you compare solicitation PDFs or purchase access.

Source PDFs stay in your browser

The prior and revised PDFs you select are processed locally in your browser. Gold Standard Analysis does not upload the PDF files or their extracted full text to the entitlement service.

Before a paid comparison is authorized, the browser computes SHA-256 hashes of the two files. Those hashes are sent to the entitlement service so the purchase can be bound to that exact file pair. A SHA-256 hash is a technical fingerprint; it is not the PDF contents.

Payment information

Payments are processed by Stripe. Stripe may collect information such as your email address, billing details, payment method information, IP address, and device/browser information under Stripe's own privacy terms. Gold Standard Appliance LLC does not receive or store your full card number or card security code through Gold Standard Analysis.

The Gold Standard Analysis entitlement service receives payment-related identifiers and status information needed to verify access, such as a Stripe Checkout Session ID, PaymentIntent ID, amount, currency, product identifier, and payment/refund/dispute status. The entitlement service does not need to persist your checkout email address for authorization and is configured not to store it for new transactions.

Entitlement and technical data

The service may store an entitlement record, the hashes of the authorized file pair, authorization-attempt metadata, timestamps, and transaction status. The browser stores the entitlement bearer token only in session storage for the current tab/session. To let a paid customer recover access after closing and reopening the browser, the browser may persist only the Stripe Checkout Session ID in environment-scoped local storage and re-redeem that identifier with the entitlement service. This recovery storage does not contain the entitlement bearer token, PDF bytes, extracted PDF text, report contents, or document metadata.

The service also uses one-way keyed hashes derived from network addresses for short-window rate limiting; raw IP addresses are not intentionally stored in the Gold Standard Analysis application database for that purpose.

Cloudflare provides hosting, network delivery, and security infrastructure and may process ordinary network data needed to deliver and protect the service.

How we use information

Sharing

We do not sell your personal information. We may share or allow processing by service providers that operate Gold Standard Analysis, including Stripe for payments and Cloudflare for hosting/security, or where disclosure is required by law or needed to protect the service and its users.

Retention

Paid entitlements are designed to expire after 24 hours. Transaction and entitlement records may be retained for accounting, tax, fraud, dispute, security, and legal purposes. Short-window rate-limit records are automatically pruned on a rolling basis. Source PDFs are not retained by the Gold Standard Analysis entitlement service because they are not uploaded to it.

Security

We use measures including HTTPS, signed Stripe webhooks, exact-origin controls, one-way hashes, bounded entitlement attempts, kill switches, and restricted payment/authorization logic. No system can guarantee absolute security.

Your choices

You can avoid submitting document contents to us by using Gold Standard Analysis as designed: the comparison runs locally in your browser. For questions about transaction records, privacy, or deletion requests where applicable, contact us at goldstandardappliancellc@gmail.com. We may need to retain records required for tax, accounting, fraud, dispute, or legal obligations.

Children

Gold Standard Analysis is intended for business and procurement use and is not directed to children under 18.

Changes

We may update this notice when the product or our data practices change. The effective date above identifies the current version.