Approval-durability census — Privacy (TextForAgents LLC)
Support: support@textforagents.com

The service processes the trace-backend exports or read access an operator submits, and the verdicts, findings metadata, and receipts derived from them. For this census, the submitted material is the signed census records an operator's producers emit (producer id, approval id, approval type, owner-after-approver, cause class, attempt number, deadline, timestamps) and the producer Ed25519 public keys registered with the service — producer private keys are never held by the census; the registry holds public keys only. The census reads live secrets by design in its sibling trace-store product line; in this product no secret values are submitted or stored: records carry the approval metadata above and nothing more, and a record's signature is verified at ingest. Census results about a backend are the submitting operator's confidential material: scoped per operator, never leaked across operators, and published to anyone other than the operator only where the operator itself publishes its verdict. The service does not sell operator data. Records are retained only as long as dispute resolution and verification require, and are deletable on operator request except where a signed verdict's integrity must be preserved, in which case the record is tombstoned, not silently edited. Daily backups of the census store and registry are retained 30 days.