Customer information is used only to process orders, verify documents, communicate updates and maintain transaction records. Uploaded documents are stored for order processing and should be protected by server-level access rules in production.