Privacy Policy

1. Information We Collect

Account information. When you create an account, we collect your email address and optionally a display name. Payment billing is handled by Stripe — we never see or store raw card numbers.

Document text. When you submit a document for analysis, the text is sent to our AI model for processing. We do not permanently store your document content. It exists in memory only for the duration of your analysis session and is discarded after the AI response is generated.

Analysis history. Summaries of past analyses are stored in your browser's local storage only. We do not send this data to our servers. If you clear your browser data, your history is permanently deleted.

Usage data. We automatically collect standard server log data: IP address, browser type, pages visited, and timestamps, used for security and aggregate analytics. We do not sell this data.

Cookies. We use strictly necessary cookies for authentication sessions only. We do not use advertising or tracking cookies.

2. How We Use Your Information

• To provide, operate, and improve the Service
• To authenticate your account and process payments via Stripe
• To respond to support requests
• To detect and prevent fraud or abuse
• To comply with applicable law
• To send transactional emails (receipts, account notices) — never marketing without consent

3. Information Sharing

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers: Supabase (database & auth), Stripe (payments), Resend (transactional email), and our AI model provider process data under data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect user safety.
• Business transfers: If we are acquired, your information may transfer as part of that transaction.

4. AI Model & Document Processing

Document text is sent to a large language model to generate your analysis. This occurs in real time and the content is not stored by us after the response is delivered. We strongly recommend removing personally identifiable information (names, Social Security or SIN numbers, account numbers) before submitting documents.

5. Data Retention

• Account data: retained while your account is active and for 30 days after deletion
• Payment records: retained for 7 years for legal compliance (Stripe is the controller for card data)
• Server logs: retained for 90 days then automatically purged
• Document text: not retained beyond the immediate analysis session
• Browser localStorage data: under your control — cleared when you clear browser data

6. Security

We use TLS/HTTPS encryption for all data in transit, bcrypt password hashing, and Row Level Security on our database. No internet transmission is 100% secure — use a strong, unique password and avoid submitting documents containing financial account numbers.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, or to object to certain processing. Contact us at [email protected] to exercise these rights. We respond within 30 days.

8. Children's Privacy

Our Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the Service after changes constitutes acceptance.

10. Contact

Email: [email protected]
Website: readlegalease.com