SourceLock privacy is built around public-content review and source discipline.

SourceLock stores the account details, user email addresses, secure sign-in records, terms acceptance, billing status, reviewed page text or pasted copy, extracted claims, Truth Repository entries, share-link records, and service usage needed to operate the product.

SourceLock is intended for public-facing business content. Users should not submit passwords, API keys, confidential legal strategy, regulated personal data, medical records, payment card data, or private content they do not have authority to process.

To provide automated claim review, SourceLock may send cleaned public page text or pasted copy to OpenAI. Common navigation and site code are removed before analysis where possible. Users remain responsible for keeping secrets and private information out of submitted content.

Stripe processes payments and subscriptions. Apex Blue stores the related billing status and customer and subscription references needed to keep account access accurate.

Truth Repository share links are designed for approved writers, agencies, contractors, and publishing tools that need current brand truth without full account access. These links are intended to stay out of public search results and can expire or be withdrawn.