Your client evidence stays under your control.

Short version: RevisionFence keeps projects locally by default, has no advertising or cross-app tracking, never sends raw images or PDFs to an AI provider, and never sends a reply for you. Optional managed drafting sends only the bounded text you review and explicitly approve for that request.

Information you enter

RevisionFence may store project labels, approved-scope text, later messages and notes, extracted text, candidate scope changes, evidence links, draft replies, review decisions, and timestamps. Avoid entering personal or confidential information that is not necessary for the review.

Local documents and text extraction

Core project records are stored in the app’s protected local container. Image and PDF text extraction uses Apple Vision on device. Raw images, PDFs, file metadata, and unreviewed OCR output do not cross the managed-AI boundary.

Optional managed drafting

When you explicitly request AI-assisted analysis or drafting, RevisionFence shows the exact minimized text payload before sending. A request proceeds only after your consent, and editing the preview invalidates that consent. The NexLevel gateway verifies eligibility and abuse controls, routes the bounded text through OpenRouter to the selected DeepInfra-hosted text model, and is designed not to log project content. No tool use or autonomous external action is permitted. You can use the deterministic on-device fallback instead.

Service receipts and retention

The gateway may retain keyed, non-content security and usage receipts—such as a pseudonymous account key, request identifier, model-policy version, outcome class, token counts, and cost—to prevent replay, enforce quotas, and investigate abuse. It does not need to retain your project text or model completion. Security receipts expire on a documented schedule; deletion requests remove associated server-side receipts unless retention is required for security, fraud prevention, tax, or legal obligations.

Purchases

Apple processes subscriptions and the Lifetime purchase. RevisionFence receives verified product and current entitlement status needed to unlock Pro, restore access, and respond to expiration or revocation. NexLevel does not receive your full payment-card details.

Sharing and exports

Copy, export, and Share Sheet actions occur only when you choose them. The destination you select handles exported data under its own privacy terms. RevisionFence never autonomously contacts a client or sends a drafted reply.

Analytics, advertising, and tracking

RevisionFence does not use third-party advertising or cross-app tracking SDKs, does not sell personal data, and does not use project content to train advertising profiles.

Deletion

You can delete projects and review history in the app. Removing the app deletes its local container, subject to device backups you control. For deletion of non-content gateway receipts, email us from the address associated with your request context; we may ask for a non-content receipt identifier to locate the record without collecting project text.

Security

RevisionFence uses Apple data protection, bounded parsing and OCR, verified StoreKit entitlements, request replay defenses, strict AI payload limits, and fail-closed feature availability. No security measure is perfect; keep Apple software current and share exports only with trusted destinations.

Professional judgment

RevisionFence is a productivity tool, not legal advice. Its findings and drafts may be incomplete or wrong. Review the source evidence and obtain qualified professional advice when a decision has legal or contractual consequences.

Children and changes

RevisionFence is a professional productivity tool and is not directed to children under 13. Material policy changes will appear here with a revised effective date.

Contact

Developer: NexLevel. For privacy questions, email contato@nexlevel.com.br or visit RevisionFence Support.