Terms of Service

PDM identifies sensitive data (personally identifiable information) within a file you upload, gives you an upfront price before any payment, and — once paid — scans and masks that sensitive data across your entire file, returning a complete, usable masked file.

No LLM. No generative AI. Nothing that trains on, remembers, or improvises with your data. Detection is deterministic — pattern, structure, and context matching via Google Cloud DLP plus our own validation algorithms. The same file produces the same result, every time.

You represent and warrant that you have the legal right to upload, process, and mask the data you submit to the Service, including any data belonging to or concerning third parties (such as your own customers, contacts, or employees). You are solely responsible for ensuring your use of the Service complies with any legal obligations that apply to that data, including applicable data protection, privacy, or confidentiality laws.

The Service is not designed or intended for the processing of Protected Health Information (PHI) as defined under HIPAA. The Service includes automated detection intended to identify likely PHI and will decline to process a file where such indicators are found. This detection is a good-faith technical measure, not a guarantee — you remain responsible for not submitting PHI to the Service unless and until dedicated PHI/HIPAA support is offered and a Business Associate Agreement is in place.

The Service is provided "as is" and "as available," without warranties of any kind, whether express, implied, or statutory, including without limitation warranties of merchantability, fitness for a particular purpose, or non-infringement.

While the Service is designed to scan every row and column of your file for sensitive data using Google Cloud DLP + proprietary deterministic algorithms, no automated detection system can guarantee the identification of every possible instance of sensitive data in every format. You are responsible for reviewing the masked output before relying on it or sharing it further, particularly for files where the consequences of an undetected value would be significant.

Your original file, any intermediate data extracted for processing, and the masked output are processed on infrastructure with no public-facing IP address. Your file and every intermediate copy are destroyed the moment your masked file is delivered — or automatically within 48 hours if you never download it. We do not retain your file content beyond this window.

We may retain limited metadata about a completed job (such as row count, column names flagged as sensitive, and price paid) for support and record-keeping purposes. This metadata does not include the actual data values from your file.

To the maximum extent permitted by law, Unboxed Labs LLC and its officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunity, arising out of or related to your use of the Service, even if advised of the possibility of such damages.

Our total aggregate liability for any claim arising from these Terms or the Service shall not exceed the greater of (a) the amount you paid us for the specific file giving rise to the claim, or (b) fifty dollars ($50 USD).