Privacy Policy

1. The short version

We designed ServiceRecord so there is almost nothing to have a privacy policy about. Your documents are processed in memory and discarded. We keep no copies, build no profiles, and sell nothing about you.

2. Documents you analyze

Text, PDFs, and photos you submit are sent over TLS to our server, analyzed in memory (including, when the AI engine is enabled, transmission to our AI provider, Anthropic, under terms that do not permit training on the data), and discarded when the response is returned. We do not store, log, index, or back up document content. Your multi-letter session timeline is stored only in your browser tab's session storage and is deleted by your browser when the tab closes.

3. What we do persist

• Your email address, only if you opt in to updates. Unsubscribe anytime; we delete on request.
• Payment records, held by Stripe, our payment processor, if you buy the Prep Pack. We never see your card number. Stripe's privacy policy governs its processing.
• Anonymized, opt-in outcome reports, if you explicitly choose to tell us how things turned out. These contain no document content and no identifying details.

4. Aggregate, anonymous usage counts

To know whether the tool is useful and whether the free-to-$25 step works, we keep simple aggregate counts of a few funnel events — for example, “a decode completed” or “the Prep Pack offer was shown.” These are plain totals. They contain no identifiers, no cookies, no IP address, no document content, and nothing that could tie an event to you. We honor your browser's Do Not Track and Global Privacy Control signals and record nothing when they're set. [ATTORNEY: confirm this qualifies as non-personal-information analytics under applicable state law before launch.]

5. What we don't do

• No selling or sharing of personal information, for any definition in any state statute.
• No advertising trackers or cross-site identifiers.
• No training of any model — ours or anyone's — on your documents.
• No accounts, so no credential database to breach.

6. Service providers

Hosting (Vercel), AI analysis (Anthropic, when enabled), and payments (Stripe). Each receives only what is necessary for its function, under contracts limiting use to providing the service. [ATTORNEY: confirm DPA posture for each provider before launch.]

7. Your rights

Because we hold almost nothing, most data-rights requests reduce to deleting an email address — write to privacy@servicerecord.example [ATTORNEY: confirm address and applicable state-law disclosures, including CCPA/CPA notices, before launch].

8. Changes

If we ever change the read-once-and-discard architecture, that is a different product and we will say so loudly on the homepage — not bury it in a diff to this page.