Operational transparency

How diagnostic data moves through PaperPMF.

Product concepts may be commercially sensitive. PaperPMF keeps storage credentials server-side, limits public identifiers to unguessable slugs, and sends only the data required for each processing step.

Product inputs

You can submit factual product details with an optional image or import a public Shopify product page. Selected uploads and the primary Shopify image are decoded, resized to a maximum of 2048 pixels, converted to WebP, and stripped of embedded metadata before storage. Secondary Shopify images are not sent to the model.

The browser sends uploads only to the PaperPMF web application. Supabase database and storage credentials are never sent to browser code.

Private image delivery

Normalized product images are stored in a private Supabase Storage bucket. When a queued engine job starts, the backend creates a short-lived signed image URL for the model request. That signed URL is removed before engine requests or responses are persisted.

Image identity in the research record is based on a SHA-256 content hash rather than an expiring delivery URL.

Model processing

The product snapshot, target-audience text, neutral concept, demographic attributes, and primary product image are sent to OpenRouter for concept preparation and synthetic elicitation. OpenRouter may route the request to the selected model provider.

Semantic scoring runs in the separate PaperPMF engine using the PyMC Labs semantic-similarity-rating package and a locally loaded sentence-transformer model.

Retention and access

  • Unclaimed image uploads expire after 24 hours and are eligible for cleanup.
  • Unpaid preview links are intended to expire after seven days.
  • Paid report links are permanent and use unguessable report slugs.
  • Attached product inputs and report evidence remain stored until a deletion request is completed or a later purge policy applies.
  • No login, user account, workspace, or public report directory exists.
  • My Reports is a browser-local index of visited run and report links; it is not synchronized to a PaperPMF account.

Deletion and questions

Contact [email protected] with the run or report link to request deletion or ask how a specific diagnostic was processed. PaperPMF may request additional evidence before acting on a permanent paid report.