For the text you send us, you are the controller and we are your processor. These terms are part of the terms of service for every customer and need no signature.
You, the customer, decide what text is sent and why; you are the controller (or a processor acting for one). Tomer N. Marketing and Sales Ltd processes that text on your instructions and is your processor. For your own account data, your email address, keys, settings and usage, we are the controller, as the privacy page says.
The text of each request, which may contain personal data of your users: names, messages, anything a person typed. The processing is one operation: reading the text to answer whether it should be allowed. No request text is stored: not in a database, a cache, a log or a trace. The duration of processing is the duration of the request. Where text is attached to a correction on purpose, it is stored with your account until you delete it or the account.
Your instructions are the request itself and the settings on your project: the context, the policy, the mode, the lists, the engine version, and whether the project is Edge-only. An Edge-only project is an instruction that no text leaves Cloudflare for a model, and the API keeps it by never constructing the model client for that project. We process for no other purpose, and we do not use the text to train anything.
We use the following subprocessors, each listed with what it receives on the subprocessors page:
A new subprocessor is added to that page thirty days before it receives anything, and paying customers are emailed. If you object, you can end the service and be refunded for the unused period.
Keys are stored as hashes. Sessions are signed cookies. Requests are refused at the edge when they cannot be right. Logs carry ids and fingerprints, never text, keys or addresses. Invocation logging and tracing are switched off on both services, and the deploy step refuses to run while they are on. The full list of promises, each with the test that keeps it, is published in the source as TRUST.md and summarised on the privacy page.
Because no text is retained, a request from one of your users to access, correct or erase their text has nothing to act on at our end; you can say so. For a correction that stored text, delete it from the dashboard or ask us at hello@unprofane.com. We will help you answer a supervisory authority within a reasonable time.
If we learn of a breach affecting your data we email the account within seventy-two hours with what happened, what was affected and what we did.
On request we provide the evidence behind this document: the tests named in TRUST.md and their latest run. When the service ends, or you delete the account, everything under it is deleted within 24 hours and leaves the backups within 30 days.
Processing takes place on Cloudflare's network; the subprocessors page lists where each one holds data. Where data leaves the EEA or the UK, the standard contractual clauses published by the European Commission apply, with the UK addendum where relevant.
Governed by the law of the State of Israel, as the terms are. Last changed September 24, 2026.