BankTech Oracle Privacy Notice

Who we are

BankTech Oracle ("BTO") is operated by Paladin fs, LLC ("Paladin," "we"), P.O Box 660675 #17410, Dallas, TX 75266. Contact us at bto@paladin-fs.com or 877-746-4859. This notice explains what we collect through this website and how we use it. Our AI Safety, Privacy & Confidentiality Policy and Data Protection Pledge describe how we protect the contracts and invoices you share.

What we collect

• Contact details you give us: your work email address, name, institution name and phone number.
• Documents you upload: vendor contracts, renewals/amendments and invoices, plus the file names.
• Security data: a one-way, keyed hash of your IP address (we do not store the address itself), used to prevent abuse and to keep an audit trail of access to your documents.
• Bot-protection signals: Cloudflare Turnstile checks that a real person is using the form.

Website visitor analytics: on our public information pages (not the upload pages or the staff portal), we use Apollo.io to understand which organizations visit the site. Apollo receives the pages you view, the referring site and campaign tags, and may use its identity partner LiveIntent to match your visit to a business email address. Apollo stores a random visitor ID in your browser's local storage. Nothing you type into a form and none of your documents are shared with Apollo.

We do not use advertising cookies. The site itself sets one strictly necessary, short-lived cookie after you verify your email so you can finish your upload.

How we use it

• To verify your email address and deliver your BankTech Oracle report.
• To analyze your documents and contact you about your results.
• To protect the service against fraud and abuse.
• To understand which organizations are interested in BankTech Oracle so Paladin can follow up.

We never sell your information, never use your documents to train AI models, and never share your specific contract terms with other institutions or vendors.

Where it is stored and who can access it

Your information and documents are stored in the United States, encrypted in transit and at rest. Only authorized Paladin personnel with a need to know can access your documents, using individual accounts with multi-factor authentication, and every download is logged. See Security & Data Handling for the list of service providers we use.

How long we keep it

Uploaded documents are deleted automatically 180 days after you submit them, or once your report has been delivered, whichever comes first. You can also ask us to delete them at any time by emailing bto@paladin-fs.com. Confidentiality obligations continue for five (5) years as described in our Data Protection Pledge.

Your choices and rights

You can ask us to access, correct or delete your personal information, or to delete your uploaded documents, by emailing bto@paladin-fs.com. Depending on where you live (for example, under the Texas Data Privacy and Security Act), you may have additional rights, and you may appeal a decision by replying to our response. We will not discriminate against you for exercising your rights.

Changes

If we change this notice, we will update the effective date above.