Privacy Policy

What Tellcrest is

Tellcrest is case-building software for whistleblower law firms and government fraud investigators. You upload evidence documents, and Tellcrest reads them, finds important facts, identifies contradictions, and writes a case report.

What we collect

Account information: Your email address and a hashed password. We do not store your password in readable form.

Evidence you upload: The documents, emails, billing records, and other files you upload to build a case. These are encrypted with AES-256 before they are stored.

Case data: The facts, contradictions, theories, and reports that Tellcrest generates from your evidence.

Usage logs: Timestamps of when you log in, upload files, and run analyses. These are used for security auditing, not marketing.

How we protect your data

Encryption: All uploaded evidence files are encrypted with AES-256-GCM before they are written to disk. The encryption key is derived from our application secret using PBKDF2 with 600,000 iterations. Files on our servers are unreadable without the key.

Isolation: Each user can only see their own cases. There is no shared access between users. Even if two people work at the same firm, they cannot see each other's cases unless they log in with the same account.

Audit trail: Every review action, approval, and export is logged with a timestamp and user identifier.

Transport: All data between your browser and our servers is transmitted over HTTPS (TLS 1.2+).

How we use AI

Tellcrest uses Claude (made by Anthropic) to read your documents and generate case reports. When you run an analysis, your document text is sent to Anthropic's API for processing.

Anthropic does not train on your data. Under Anthropic's commercial API terms, data sent through the API is not used to train their models.

We do not use any other AI providers. We do not send your data to OpenAI, Google, or any other third party.

What we never do

• We never sell your data.
• We never share your evidence with other users.
• We never use your case data for marketing or analytics.
• We never access your cases unless you explicitly ask us for support.
• We never export or send anything from your account without your action.

Data retention

Your data stays in your account until you delete it. If you delete a case, the evidence files and all generated analysis are permanently removed.

If you delete your account, all associated data is permanently deleted within 30 days.

Cookies

We use a single authentication token stored in your browser's local storage to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party cookies.

Your rights

You can export your case data at any time. You can delete your cases at any time. You can delete your account at any time.

If you have questions about your data, email privacy@tellcrest.com.

Changes to this policy

If we change this policy, we will update the date at the top and notify you by email if the changes affect how we handle your evidence.

Contact

Tellcrest is operated by Lukata Solutions. For privacy questions: privacy@tellcrest.com