Not in force
What this preview stores
Application answers, file names, enquiries, complaints and a local event log stay in your browser. They are not sent to RevRouters, to an analytics vendor, or to an AI service. Clearing the site data, or using “Delete preview data” in settings, removes them from this browser only.
What you should not send
Do not send full payment card numbers, card security codes, account passwords, recovery codes or API secrets. The form checks for card-like numbers and asks you to remove them. That check is not a compliance certification.
Intended production shape
A production service would need a named controller, a reason for each category of data, access limited by organisation, private document storage, retention limits and a way to request deletion that does not depend on one browser. Those controls are specified and not connected. Their presence, once built, would still need a qualified privacy review before any compliance claim.