Privacy Policy
Effective date: March 18, 2026
The short version
We collect as little data as possible. Your contract text is deleted after analysis. We don't use tracking cookies, we don't run analytics, and we don't sell your data to anyone. Payment is handled by Stripe — we never see your card number.
What data we collect
RedlineBot collects only what is necessary to perform a contract review. Here is everything we touch:
| Data | Why | Retention |
|---|---|---|
| Contract text (extracted from your PDF) | Sent to AI for analysis | Deleted immediately after analysis completes |
| Analysis results | So you can access your review | Auto-deleted after 30 days |
| Payment info | To charge for the review | Handled entirely by Stripe — we never see or store card numbers |
| File name | Display purposes during review | Deleted with review results after 30 days |
That is the complete list. We do not collect your name, email address, phone number, IP address logs, or any other personal information. You don't even need an account.
How we use your data
Your contract text is used for exactly one thing: generating your AI analysis. Here is the flow:
- You upload a PDF. We extract the text from it
- The extracted text is sent to the configured OpenAI-compatible API, which performs the clause-by-clause analysis
- The analysis results are saved so you can view them
- The original contract text is deleted from our servers
We do not use your contract to train AI models. We do not aggregate contract data. We do not read your contracts ourselves.
Data retention
- Contract text: Deleted immediately after the AI analysis is complete. If analysis fails, it is deleted at that point instead
- Review results: Stored for 30 days, then automatically deleted. This gives you time to reference your analysis
- Payment records: Managed by Stripe according to their retention policies. We store a Stripe session ID for refund purposes only
There is no "keep my data forever" option. Everything is temporary by design.
Third-party services
RedlineBot uses three third-party services to operate:
- Stripe — Processes payments. Stripe handles all credit card data directly. We never see, store, or have access to your card number. Stripe's Privacy Policy
- OpenAI API — Performs the AI contract analysis. Your contract text is sent to the configured OpenAI-compatible API endpoint for processing. By default, OpenAI does not use API inputs or outputs to train or improve its models. OpenAI business data policy
- Railway — Hosts the RedlineBot application. Standard web hosting infrastructure. Railway's Privacy Policy
We do not share your data with any other third parties.
What we don't do
To be completely clear:
- No tracking cookies. We do not set tracking or advertising cookies
- No analytics. We do not currently run Google Analytics, Mixpanel, or any other analytics service
- No data selling. We do not sell, rent, or trade your data to anyone, ever
- No profiling. We do not build profiles about you or your contracts
- No marketing emails. We don't have your email address, so we couldn't email you even if we wanted to
- No third-party sharing. Your data is not shared with anyone except the services listed above, which are strictly necessary to operate
Cookies
RedlineBot uses a minimal session cookie to manage the review flow (connecting your upload to your payment and results). This is a functional cookie required for the service to work. It does not track you across sites, and it expires when you close your browser.
We do not use advertising cookies, analytics cookies, or any other non-essential cookies.
Your rights
You have the right to:
- Request deletion of your data — though in practice, your contract text is already auto-deleted after analysis, and review results expire after 30 days
- Request information about what data we hold about you (likely nothing, given our retention policy)
- Opt out of any future data collection practices if we add them (we will update this policy first)
To exercise any of these rights, email us at the address below.
Children
RedlineBot is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used the Service, contact us and we will delete any associated data.
Changes to this policy
If we change how we handle your data, we will update this Privacy Policy and the effective date at the top. For significant changes (like adding analytics or new third-party services), we will make reasonable efforts to notify users.
We are committed to collecting as little data as possible. Any changes will be in the direction of more transparency, not less.
Contact
Questions or concerns about your privacy? Reach out:
Email: human@breakinggood.media