Privacy Policy

Draft — pending review by counsel. Last updated: [DATE]. Bracketed items are placeholders awaiting confirmation.

1. Who we are

RedactBot is operated by Kobargo Technology Partners [legal entity name, registered address — PLACEHOLDER], the data controller for the personal data described in this policy, except for document contents you upload, for which you (or your organization) are the controller and we act as a processor.

2. What we collect

• Account data: your email address, authentication credentials (including any two-factor authentication method you enroll), and the delivery metadata of the account emails we send you.
• Uploaded documents: the files you upload for redaction, plus derived artifacts (rasterized pages, OCR text, detections, marks, privilege logs, certificates).
• Usage records: pages processed, actions taken (the audit trail), and service diagnostics.
• Visit analytics (only if you allow them): if you accept the analytics notice on our public pages, we count the visit: which page you landed on, the host of the site that linked you (never the full address), any campaign parameters already in the link, how long the page stayed open, how far it scrolled, and a random identifier your browser generates for itself. We do not record your IP address or browser user-agent for this purpose, and we set no cookies for it. If you decline, none of this is collected and nothing is sent.
• Payment data: handled by Stripe. Payment card details go directly to Stripe; we never store card numbers.

3. Why we process it

• To provide the service: detection, review, burn-in, verification, and exports.
• To operate your account, meter plan limits, and bill subscriptions.
• To maintain the tamper-evident audit trail the product exists to provide.
• To secure the service and prevent abuse.
• To understand how people find and use our public pages, so we can improve them — on the basis of your consent, which you may withdraw at any time (see section 5).
• [PLACEHOLDER — any additional purposes, e.g. service emails, to be confirmed.]

4. Subprocessors

AI detection is off by default. AI detection on Pro and Premier runs through one managed AI gateway operated for RedactBot; your document text is sent only to return detections and is never used to train models. The gateway and the model provider behind it act as our subprocessors, and the row above names them. Enterprise customers may instead connect their own AI endpoint; that endpoint is one they configure themselves, under their own agreement with that provider — it is not our subprocessor.

5. Cookies and local storage

• Sign-in tokens (localStorage): strictly necessary to keep you signed in.
• Cloudflare bot-management cookies: strictly necessary to protect the service from automated abuse.
• No advertising or third-party tracking cookies. The small promos shown on the Free plan are first-party and involve no tracking.
• Analytics choice and visit identifier (localStorage, only if you allow): your answer to the analytics notice is remembered so we do not ask again, together with the random visitor identifier described in section 2. These are first-party, readable only by this site, and never sent to anyone else.

If you have not answered the analytics notice yet, nothing has been stored and nothing has been sent. To withdraw consent, clear this site’s data in your browser: the notice will ask again, and the random visitor identifier is destroyed with it. We also treat a browser “Do Not Track” setting as a decline and do not ask at all.

6. Retention

• Free plan: uploaded documents auto-delete 48 hours after upload.
• Pro plan: uploaded documents auto-delete 14 days after upload.
• Premier plan: documents are kept until you delete them.
• Closing your account deletes your stored documents and account data [PLACEHOLDER — backup and audit-record retention windows to be confirmed].

7. Your rights

Depending on where you live (including under the GDPR and CCPA), you may have rights to access, export, correct, or delete your personal data, and to object to or restrict certain processing. You can export and delete your documents at any time from within the app, and close your account in settings. For anything else, contact us at the address below. [PLACEHOLDER — full GDPR/CCPA rights language, legal bases, international transfer mechanisms, and supervisory-authority details pending counsel review.]

8. Contact

Privacy questions and requests: privacy@redactbot.app [PLACEHOLDER — confirm mailbox]. Postal address: [PLACEHOLDER].