RedFlag ("we", "us", "our") operates the website rfdocs.net and associated mobile applications. This Privacy Policy explains how we collect, use, and protect your information when you use our services.
Account information: When you create an account, we collect your email address and an encrypted password. We do not collect your name, phone number, or physical address unless you voluntarily provide it.
Contract text and photos: When you scan a contract, you submit text (pasted, uploaded, or photographed) to our servers for analysis. We process this content to return your analysis results.
Payment information: If you subscribe to Pro, payment is processed by Stripe. We do not store your credit card number, bank account, or full payment details on our servers. Stripe handles all payment data under their own privacy policy.
Usage data: We collect basic analytics (pages visited, features used, scan count) to improve the product. We do not use third-party ad trackers.
Contract text you submit is sent to Anthropic's Claude AI for analysis. The text is used solely to generate your analysis and is not used to train AI models. Analyzed contracts are cached using a one-way hash (SHA-256) of the normalized text so that identical contracts return identical results without re-analysis. The cached results contain the analysis output, not your original contract text.
Photo-based scans are processed the same way: your photos are sent to the AI for reading and analysis, then discarded after the analysis is returned. Photos are not stored on our servers.
Your account data and scan history are stored in Supabase (hosted on AWS). All data is encrypted in transit (TLS) and at rest. We use Row Level Security to ensure users can only access their own data.
We retain your scan history for as long as your account is active. Pro users can view their last 15 scans. If you delete your account, your scan history is deleted.
We use the following third-party services that may process your data under their own privacy policies:
You can request a copy of your data, request deletion of your account and all associated data, or update your email address at any time by contacting us at david@prospectpages.college.
RedFlag is not intended for use by anyone under the age of 13. We do not knowingly collect information from children under 13.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of RedFlag after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, contact us at david@prospectpages.college.