Privacy Policy
1. What we collect
We collect as little as possible. Specifically:
- Account information: your email address and a cryptographic hash of your password. We never store your password itself.
- Drafts you create: the notes you enter, the drafts generated from them, and your review and certification activity.
- Demo usage: nothing. The no-account demo on our landing page never stores anything, ever.
- Feedback you choose to give us: anonymous star ratings and any written feedback you submit, in the app or after the demo.
- Aggregate page-view counts: how many times our pages are visited per day. We do not track individual visitors, IP addresses, or browsing behavior.
- Waitlist emails: email addresses submitted to be notified about the launch.
2. How we use it
We use your information for one purpose: to provide the Service. Account information runs your account. Drafts exist so you can write, review, and certify reports. Feedback helps us improve. We do not use your information for anything else.
3. What we never do
- We do not sell your data to anyone.
- We do not use your data to train AI models.
- We do not use your data for advertising.
- We do not share your drafts or notes with any third party except as described in Section 5.
4. Deletion
Account drafts are automatically and permanently deleted 24 hours after you last work on them. Demo drafts are never stored in the first place.
To request deletion of your account and all associated data, email afteractionreportllc@gmail.com and we will delete it.
5. Third parties
Your data touches exactly three service providers, each for a specific job:
- DeepInfra performs the AI inference that generates your drafts. Your notes are transmitted to DeepInfra solely for that purpose.
- Heroku hosts the application.
- Neon provides the database where accounts and drafts are stored.
We do not send your data to anyone else.
6. Security, stated honestly
We use encryption in transit and at rest, and we automatically delete drafts as described in Section 4. We are not CJIS-compliant, and the Service is not a CJIS-compliant system. If your use case requires CJIS compliance, do not use the Service for that data.
7. Children
The Service is for adults 18 and older. We do not knowingly collect information from anyone under 18.
8. Changes to this policy
We may update this policy as the Service grows. Material changes will be communicated to account holders. Continued use after changes take effect constitutes acceptance. Contact: afteractionreportllc@gmail.com.