Contradiction check Sarsa Formation

Your document, gone in a day.

What we keep when you check a document or pay for one, who else sees it, and for how long.

Draft, not yet reviewed

Who we are

Sarsa Formation OÜ, a private limited company registered in Estonia under registry code 17290516, Lõõtsa tn 1a, 11415 Tallinn, Estonia. We decide how the personal data in this notice is used: we are its controller. Write to sana@muoto.xyz about anything here. We have not appointed a data protection officer; the same address reaches the people responsible.

What we keep, and why

  • Your document. The text you paste, or the file you upload with its name, and the results of the check. We use them only to run the check, show you the results, make the repaired copy you ask for and check that copy again (Article 6(1)(b) GDPR). The check does not need anyone's personal data, so leave it out where you can, and upload other people's personal data only if you are allowed to share it.
  • To keep the free check fair. When you run a check, we make a one-way code from your IP address and the date, and count how many checks that code has run in the hour and in the day. We keep the code and the count, never the address itself. Our basis is our legitimate interest in keeping the free check open to everyone and its cost in bounds (Article 6(1)(f)).
  • When you pay. Stripe collects your email address and card details. We receive your email address, the amount, the date, and the card's brand and last four digits, never the full card number. We use them to carry out our agreement with you (Article 6(1)(b)) and to keep the accounting records Estonian law requires (Article 6(1)(c)).
  • What a check cost. For each check we keep its word count, how long it took, which AI model and model provider read it, how many contradictions it found and left out, and what the model's work cost us. This record holds no text, no file name, and nothing that links it to you or to your document.
  • When you visit. Our hosting provider processes your IP address and the details of your request to deliver the page and protect it from abuse (Article 6(1)(f)).
  • When you write to us. Your name, email address and what you write, to answer you (Article 6(1)(f), or 6(1)(b) where it is about a payment).

Who else sees it

  • OpenRouter, which passes your document to an AI model and returns the model's answer to us.
  • The model provider OpenRouter routes it to, excluding providers that store or train on prompts. We ask OpenRouter to use only providers that, by its account of their policies, neither keep what they receive nor train on it. Which provider reads a given document can change from one check to the next.
  • Cloudflare, which hosts this website and the database that holds your document for its 24 hours.
  • Stripe, our payment provider. For some purposes, such as preventing fraud and meeting its own legal duties, Stripe acts as a separate controller under its own privacy notice.
  • Our accountant, for payment records, and public authorities where the law requires it.

We do not sell personal data, and we do not use it for advertising.

Outside the EEA

OpenRouter, Cloudflare and Stripe are companies based in the United States, and the model provider may be based there or elsewhere outside the EEA, so your data may be processed outside the EEA. Where it is, the transfer relies on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for companies certified under it, or on the standard contractual clauses in that company's data-processing terms. Write to us for details or a copy.

How long we keep it

  • Your document, its name and its results: deleted 24 hours after upload. Our database provider keeps backups for recovering from a failure for up to 30 days; we do not read them, and they expire on their own.
  • The code and count for the fair-use limit: deleted at the end of the day they were made.
  • What a check cost: 90 days.
  • Payment records: seven years from the end of the financial year they belong to, as Estonian accounting law requires.
  • Correspondence: twelve months after the last message, or with the payment records where it is about a payment.
  • OpenRouter's and the model provider's copies: as their own privacy terms say. We choose providers that do not keep what they receive.

To have a document deleted before its 24 hours are up, send us the link to its results.

Cookies

This website sets no cookies of its own and stores nothing in your browser. Stripe's payment page, if you pay, may use cookies or similar storage it needs to work and to prevent fraud. The fonts are served from this website itself.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, to object to how we use it, and to receive the data you gave us in a form you can take elsewhere. We have no account for you, so for a document, send us the link to its results. Write to sana@muoto.xyz; we answer within one month.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or to the data protection authority where you live or work. We make no decision about you by automated means alone.

Notice version 2026-09-23 (draft)