Privacy in this demo

This pilot collects basic details in your SMS conversation through Pico and Twilio, and uses your email address to send the confirmation code you request through Pico and Cloudflare. Updates remain in SMS; the portal is an optional fallback. Names and business information are self-declared. Please use fictional business details. Genuine identity documents and DBS certificates are disabled; only the supplied synthetic image is accepted. SMS delivery does not verify identity.

Better Auth stores sessions and your mobile number in dedicated Cloudflare storage. Codes are stored as keyed hashes; temporary message envelopes are encrypted and expire within 15 minutes. SMS draft details and contact email are encrypted at rest. Unattached drafts expire after 24 hours of inactivity and are removed on the next scheduled cleanup; saved applications remain until deleted. Pico stores delivery metadata; Twilio processes SMS content and Cloudflare processes requested verification email. Unnecessary sensitive details should not be sent by text. No public demo mailbox is enabled. Authorised reviewers can access applications; phone numbers, email addresses and authentication data never appear on public cards.

Cards start private. Public cards expose only selected display fields and check summaries, with real contact checks clearly distinguished from simulated credentials. Public content can be copied by visitors; making a card private stops new access but cannot retrieve copies.

Sampha Studio operates this pilot. Your mobile is used for the sign-in and service messages you request, not marketing. Account and application records remain in the pilot until deleted; request access, correction or deletion in your portal or email contact@samphastudio.com. Web sign-in codes expire after five minutes, email confirmation codes after ten minutes, and web sessions after eight hours. Requested WEB links are signed, single-use and expire after 15 minutes. They open a read-only view of one request for 30 minutes without granting account or admin access; anyone holding an unused link can open that view, so do not forward it. STOP revokes these private views. Third-party analytics and marketing cookies are not used.