Tool results handled by the client-side proxy are the operator's own traffic; spilled artifacts are per-operator isolated, checksummed, and expire under the documented TTL / bounded-store policy (at most 1 hour; eviction can retire them earlier). No sale of operator data, no cross-operator use, no telemetry beyond what the product surface documents. One operator's token can never fetch another operator's spill artifacts or receipts.
For the hosted per-result API form, shaped-result and receipt records are the operator's own operational records, retained 30 days under the production retention policy, then deleted. Daily backups are retained 30 days. Support correspondence (support@textforagents.com) is handled under the company's ordinary support privacy practice.