Demo data handling

What we log, how long we keep it, and how to request deletion.

The public media classification demo is a small open tool. Because it is open to the internet, we log a limited set of data for trust & safety review and for the protection of our service. This page explains exactly what.

What we record for every submission

  • Date and time of the request.
  • Your IP address, and the country / region / city Cloudflare resolves it to.
  • Your network provider (ASN and organisation name).
  • Your browser's User-Agent string.
  • The image you submitted, its size, format, and a SHA-256 hash.
  • The classification result our Media Examiner Service returned for the image, including the severity band and any detected classes. The demo's backend is the classifier, so this signal is what the demo exists to produce. Submissions that detect explicit content surface a prompt offering a free pilot of our secure tool.

How long we keep it

Image bytes are deleted automatically after 7 days. The images themselves live in Cloudflare R2 storage with a lifecycle rule that enforces this deletion. We don't touch them after upload other than for review.

The submission record (timestamp, IP, geo, image hash, classification summary) is kept indefinitely. The hash lets us identify the same image being submitted again after the bytes are gone, which is essential for spotting abuse patterns.

Why we keep it

  • To investigate misuse of the public demo.
  • To comply with legal requests if abuse is reported.
  • To monitor traffic patterns and detect automated scraping.
  • To protect users by blocking IPs that submit illegal content.

We do not use demo submissions to train models. The image is sent to our classification API for inference and is not added to any training set.

Please don't submit

  • CSAM. Submissions of illegal material may be reported to law enforcement.
  • Images of identifiable people without their consent.
  • Images of minors, unless you are their parent or legal guardian.
  • Sensitive personal images, identity documents, or medical imagery.
  • Anything illegal under the laws of your jurisdiction or Ireland (where Rigr AI is registered).

Adult content is fine for testing the classifier; CSAM is not.

Deletion requests

To request deletion of your submission record, or to ask what we hold, email [email protected] from any address and include the approximate date and time of your visit. We will respond within 30 days.

Production use of the classification API

This page covers the public demo only. The production classification API used by customers under contract is governed by the relevant data-processing agreement, not by this page.