Data handling.

Basic scans run in your browser and are not sent to NULTRA. API requests send content to NULTRA for processing but raw content is not stored in security event records. Event metadata contains categories, counts, decisions, and timestamps.

Opt-in AI explanations send only rule metadata to OpenAI, not raw submitted content. Account deletion removes account data. Anonymized settled payment and revenue records are retained for financial reconciliation; onchain transactions remain public.