Backfrom Sourceful’s own policies · verified 2026-09-02 · some facts not published
Sourceful: data residency & retention
Headquarters
🇬🇧 United Kingdom (Other)
Where inference runs
Not disclosed
Controller is Sourceful Ltd (CRN 11260656), Manchester, England. Privacy policy says data is hosted on 'Google Cloud on their UK and/or European Servers', but that covers platform hosting, and it also states prompt data is shared with third-party 'underlying AI models that support our tool' whose processing location is not disclosed — so inference location for the Riverflow model API is not clearly published.
Region pinning
Not disclosed
No region-pinning or residency controls mentioned; only generic UK/EU transfer-safeguard language.
Prompt retention
Not disclosed
No prompt-specific retention window; generic 'only retain your personal information for as long as we need it' language.
Trains on API data
Not disclosed
Tier-dependent: for paid subscribers, User Materials and Results 'will not be used by Sourceful... to train generative AI components'; free-tier Results/User Materials may be reused by Sourceful (marketing, similar designs) with an email opt-out. Which tier governs API/OpenRouter traffic is not stated.
Zero data retention
Not disclosed
No zero-data-retention option mentioned.
Compiled from Sourceful’s published privacy policy, terms, and documentation on 2026-09-02. “Not disclosed” means Sourceful publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.