Terms of Service

PDM identifies sensitive data (personally identifiable information, and — for clinical files — protected health information) within a file you upload, gives you an upfront price before any payment, and — once paid — scans and masks that sensitive data across your entire file as a batch job, returning a complete, usable masked file. Coverage adapts to the file: financial files receive financial identifier coverage, and all other files receive the same clinical and standard identifier set.

All detection, including our own AI model, runs inside our sealed cloud perimeter, on our infrastructure. Your file never goes to a public AI service, and nothing derived from it is ever used to train any model. Detection combines Google Cloud DLP, our own validation algorithms, and our self-hosted detection model.

You represent and warrant that you have the legal right to upload, process, and mask the data you submit to the Service, including any data belonging to or concerning third parties (such as your own customers, contacts, or employees). You are solely responsible for ensuring your use of the Service complies with any legal obligations that apply to that data, including applicable data protection, privacy, or confidentiality laws.

Files that indicate health data are routed to the attestation step before processing. You either accept the Business Associate Agreement or state that the file contains no Protected Health Information. Either way the file is processed and the choice is recorded with the job. This detection is a good-faith technical measure, not a guarantee of complete identification; you remain responsible for confirming that your use of the Service is appropriate for the data you submit and for the obligations that apply to it.

The Service is provided "as is" and "as available," without warranties of any kind, whether express, implied, or statutory, including without limitation warranties of merchantability, fitness for a particular purpose, or non-infringement.

While the Service is designed to scan every row and column of your file for sensitive data using Google Cloud DLP, our own validation algorithms, and our self-hosted AI detection model, no automated detection system can guarantee the identification of every possible instance of sensitive data in every format. You are responsible for reviewing the masked output before relying on it or sharing it further, particularly for files where the consequences of an undetected value would be significant.

Your original file, any intermediate data extracted for processing, and the masked output are processed on infrastructure with no public-facing IP address. Your file and every intermediate copy are destroyed the moment your masked file is delivered — or automatically within 48 hours if you never download it. We do not retain your file content beyond this window.

We may retain limited metadata about a completed job (such as row count, column names flagged as sensitive, the price paid, and — for a clinical-routed file — the attestation record: whether you attested or declined the Business Associate Agreement, when, and its version) for support and record-keeping purposes. This metadata persists after your file content is deleted and does not include the actual data values from your file.

To the maximum extent permitted by law, Unboxed Labs LLC and its officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunity, arising out of or related to your use of the Service, even if advised of the possibility of such damages.

Our total aggregate liability for any claim arising from these Terms or the Service shall not exceed the greater of (a) the amount you paid us for the specific file giving rise to the claim, or (b) fifty dollars ($50 USD).