Privacy
Private submissions are temporary.
Emails, screenshots, attachments, and the text of a check are processed to produce a report. They are not kept as HeyBantai content by default, and they are not used to train a model here.
Small files are handled in memory. Larger screenshots can be written to temporary storage under a unique request folder and deleted after the check. A storage expiry rule is a backup if deletion fails. One person's files are not stored in a shared folder that another check can read.
Logs record operational details such as a request ID, stage, provider, status, and timing. They are not meant to contain email bodies, screenshots, phone numbers, or payment details. Analytics records page and feature events only, not the text of a check.
If search or an AI provider is configured, the public query or the text needed to reason about the check is sent to that provider for the request. HeyBantai does not control that provider's own retention. Public source results may be cached briefly so the same public lookup is not repeated. That cache is separate from private submissions.
The report in your browser stays in this tab's session storage. It is not an account history.