Mainframe Bill Audit — Privacy Notice

Last updated 28 September 2026

Mainframe Bill Audit never sells your personal data or shares it for advertising. Every U.S. resident has the same rights here, whatever state they live in: to know, get a copy of, correct and delete their data.

Who we are

Mainframe Bill Audit is operated by Digent LLC, the controller of the personal data described here, which means it decides how that data is used. Write to us at [email protected]. Mainframe Bill Audit is offered to people in the United States only.

What we collect

Account: the username Digent assigns you, its expiry date, and a 12-hour sign-in cookie. The site checks your sign-in against a one-way hash. Because Digent issues each invitation, Digent also keeps the sign-in it issued you on its own encrypted computer so it can send it to you, and deletes it when the invitation ends.

What we never collect

The SCRT reports, invoices and other files you audit are read in your own browser tab and are never sent to Digent, so we never collect, see or store them. The site runs no analytics and keeps no logs of its own. If you email us, we keep that correspondence as long as needed to answer you and meet record-keeping law.

What we use it for

To run the service, keep it secure, bill you, send the account emails the service needs, and comply with law. That is all. We do not sell personal data, share it for cross-context behavioral advertising, show advertising, or run third-party tracking scripts. We do not use your data to train AI models.

Who handles it for us

Cloudflare hosts the site and, to deliver it, sees each visitor's IP address and browser details; Purelymail receives email sent to mainframebillaudit.com addresses; Proton holds the mailbox where that email is read and answered. Each handles data only to provide its service to us, under contract, and this list is updated before anyone new is given access. We also disclose data when the law requires it, to protect rights and safety, or to a successor in a merger or sale of the business, which stays bound by this notice.

How long we keep it

Account data and what you enter: until the invitation is withdrawn or you ask us to delete it. After deletion, backups hold a copy for up to 30 days. We keep no server logs of our own.

Your choices and rights

Wherever you live in the United States, you may ask to know what we hold, get a copy in a portable format, correct it, or delete it, and you may opt out of any sale, sharing, targeted advertising or profiling (we do none of these). Where the service offers it, download and deletion are self-serve; otherwise write to [email protected]. We verify requests, answer within 45 days (extendable once by 45 days where the law allows), accept requests from an authorized agent with written authorization, never treat you differently for using a right, and if we decline you may appeal by replying to our answer.

Security

Connections are encrypted and stored data is encrypted at rest. No system is perfectly secure; if a breach affects your data we notify you and the authorities as the law of your state requires.

Cookies and privacy signals

We set only the cookies that keep you signed in and protect sign-in from forgery. There are no advertising, analytics or tracking cookies. Because we never sell or share personal data, a Global Privacy Control or Do Not Track signal changes nothing: every visitor is already treated as opted out.

Adults only

The service is offered only to adults. You must be at least 18 years old to use it. We do not market to minors and do not knowingly collect personal information from anyone under 18; an account found to belong to someone under 18 is closed and its data deleted.

Outside the United States

The service is not directed to residents of the European Economic Area, the United Kingdom or anywhere outside the United States. If you use it from elsewhere, your data is processed in the United States.

Changes

We may change this notice at any time by posting the new version with a new date at the top; it takes effect when posted. For a material change we make reasonable efforts to email account holders, and any new use of data you have already given us applies only with your consent where the law requires it.

empire-legal v3.3 (2026-09-28)