Privacy Policy

1. Introduction

Welcome to RedLine by PlainLaw ("RedLine," "PlainLaw," "we," "us," or "our"). RedLine by PlainLaw is an AI-powered legal document analysis service available at plainlaw.org.

This Privacy Policy explains what information we collect when you use our website and services, how we use that information, and what rights you have regarding your personal data. By accessing or using RedLine by PlainLaw at plainlaw.org, you agree to the practices described in this Privacy Policy.

2. Information We Collect

a. Account Information

When you create a RedLine account, we collect:

• Your name
• Email address
• Password (stored in encrypted form — we never store plain-text passwords)
• Account creation date and login history

b. Documents You Upload

To use our analysis service, you upload legal documents (contracts, leases, medical bills, employment agreements, etc.). We collect and temporarily process the content of these documents in order to deliver your analysis results.

Please see Section 4 for important details about how uploaded documents are handled.

c. Usage Data

We automatically collect certain information when you use our service, including:

• IP address and approximate location (city/region level)
• Browser type and version
• Pages visited and features used
• Date and time of access
• Document review history (linked to your account)

d. Payment Information

Payment processing is handled by Stripe, a third-party payment processor. We do not store your full credit card number, CVV, or bank account details. We receive a transaction confirmation and limited billing information (last 4 digits of card, billing zip code) from Stripe. See Section 5 for more detail.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing the service: To analyze uploaded documents, generate risk scores, and deliver clear, easy-to-understand summaries.

Account management: To create and manage your account, track your free review usage, and process payments for pay-per-review or subscription plans.

Improving the service: To understand how users interact with RedLine, identify bugs, and improve accuracy and usability. We may use aggregated, de-identified data for this purpose.

Communications: To send you receipts, service updates, password reset emails, and important notices about your account. We do not send marketing emails without your consent.

Legal compliance: To comply with applicable laws, respond to lawful legal requests, and protect our rights and the rights of our users.

4. Documents You Upload

This section is important. When you upload a document to RedLine by PlainLaw:

• Your document is transmitted securely (HTTPS/TLS encryption in transit) to our servers and to Anthropic's AI API for analysis.
• The content of your document is used solely to generate your analysis results. We do not use the content of your uploaded documents to train AI models.
• Documents are stored in our database linked to your account so you can access your past analyses. If you delete your account, your uploaded documents will be removed from our systems within 30 days.
• We do not share, sell, or disclose the content of your uploaded documents to any third party, except as required to deliver the service (i.e., transmission to Anthropic's API for AI processing) or as required by law.
• Anthropic, the AI provider that powers our analysis, processes document content according to their own privacy policy, available at anthropic.com/privacy. We encourage you not to upload documents containing highly sensitive personal information (e.g., Social Security numbers, financial account numbers) beyond what is necessary.

5. Payments and Billing

PlainLaw uses Stripe to process payments for Pay Per Review ($10) and RedLine Pro ($29/month) plans. When you submit payment information:

• Your card details are entered directly on Stripe's secure, PCI-compliant payment form and are never transmitted to or stored on our servers.
• We receive a Stripe customer token, transaction ID, and basic billing information (last 4 digits of card, expiration date, billing zip code) to track your subscription status.
• Stripe's privacy policy governs their handling of your payment information and is available at stripe.com/privacy.
• You can cancel a RedLine Pro subscription at any time from your account settings. Cancellations take effect at the end of the current billing period.

6. How We Share Your Information

We do not sell your personal information. We do not share your information with advertisers. We may share limited information in the following circumstances:

Service providers: Anthropic (AI analysis), Stripe (payments), Railway (cloud hosting). These providers access your data only to the extent necessary to provide their services to us and are bound by confidentiality obligations.

Legal requirements: If required by law, court order, or government request, we may disclose information as necessary. We will notify you when permitted to do so.

Business transfers: If PlainLaw is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Protection of rights: We may share information if we believe it is necessary to investigate fraud, enforce our Terms of Service, or protect the safety of our users or the public.

7. Data Retention

• Account information is retained for as long as your account is active.
• Uploaded documents and analysis results are retained until you delete them or close your account.
• Upon account deletion, we will remove your personal data and uploaded documents within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.
• Payment records may be retained for up to 7 years as required by financial regulations.

8. Security

We take reasonable technical and organizational measures to protect your information, including:

• HTTPS/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords
• Limited employee access to personal data on a need-to-know basis
• Regular review of our security practices

No method of electronic transmission or storage is 100% secure. While we work to protect your data, we cannot guarantee absolute security. If you become aware of any security vulnerability or incident, please contact us immediately at jpm3300@gmail.com.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your account and associated data.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to certain uses of your data, including for analytics.

To exercise any of these rights, email jpm3300@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). Residents of the European Economic Area or United Kingdom may have additional rights under GDPR. Please contact us for more information.

10. Children's Privacy

RedLine by PlainLaw is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us at jpm3300@gmail.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify you by email or by posting a prominent notice on our website. Your continued use of RedLine by PlainLaw after changes take effect constitutes your acceptance of the updated policy.

12. Legal & Contact

RedLine by PlainLaw is operated by Jon Paul Marshall.

For privacy questions, data requests, or legal inquiries, please contact:

A dedicated privacy@plainlaw.org address will be added once PlainLaw LLC is formally established.