Policy

What happens to a document you send us.

You are emailing a business document to a company you have not met. Here is who that company is and what its computers do with your file, in plain words.

Who you are dealing with

Patch is a product of Caboo, and Caboo is the company responsible for your documents, not a brand name in front of someone else. The address you send to, patch@getcaboo.com, is Caboo's, and so is everything that happens after it arrives.

Registered company details and the named data controller belong in the legal document rather than in a summary, and they will be there before anyone is asked to pay.

Where your file goes

Your attachment is opened inside a sandbox with no credentials and no network, and is treated as hostile until it has been inspected. Nothing in that sandbox can send an email, charge an account, or reach the rest of the system.

The part of Patch that reads your sentence and the part that changes your file are separate programs with separate permissions. The one that writes to your document cannot approve its own work; a third, built without any ability to write at all, is what checks the result.

Who can read it

Automated completion is machine-only from end to end. A person only sees your document if automated work cannot finish it and you have accepted assisted completion. You are told before that happens, not after.

Your document is not used to train anything.

How long it is kept

Your original, the finished file and the record of what changed are kept long enough for you to come back and continue the same job, and are then deleted on a fixed deadline. If something failed and is being held for you to retry, that hold has its own expiry, and when it passes the files are purged before the case is closed.

What we keep afterwards

A record that the work happened: which fields changed, what was checked, and when. It names the changes; it is not a copy of your document.