Privacy Policy

1. Information We Collect

Account information. Name, email address, and a password (stored only as a secure hash). We never see or store full payment card numbers — payment details go directly to Stripe, our payment processor.

Content you submit. Fact patterns and descriptions you type, documents you upload, and the memos, extracted document text, and research context generated in producing your memos. We store these so you can access your work product.

Billing information. Subscription status, usage counts (memos generated), and billing period data, synchronized with Stripe.

Technical information. Log and device data generated by operating the Service (such as IP address, browser type, and timestamps), and essential cookies used to keep you signed in. We do not use advertising cookies or sell advertising.

2. How We Use Information

We use your information to: provide the Service (generate, store, and let you download memos); process billing through Stripe; secure the Service and prevent abuse (including trial abuse); communicate with you about your account (including password reset emails via our email provider); and comply with legal obligations. We do not sell your personal information, and we do not use your content to train AI models.

3. How Your Documents Are Processed (the full chain)

When you run a memo, your inputs travel through the following systems, each engaged to provide the Service:

• Precedera's database (hosted on Supabase, in the United States): stores your account, fact patterns, extracted document text, research context, and memos, retained while your account is active.
• AI workflow infrastructure (Dify Cloud, hosted on Amazon Web Services, US-East region, United States): orchestrates memo generation. Uploaded documents and processing logs are retained by this provider in accordance with its retention practices; processing logs are generally retained for approximately three months before archival. Uploaded files are retained until deletion is effected at the account level.
• AI model providers (accessed through Precedera's own enterprise API accounts): portions of your content are transmitted to large-language-model providers to generate memo text and research results. These providers are engaged under API terms that prohibit the use of your content to train their models and provide for limited retention for abuse monitoring.
• Stripe (payments), Vercel (application hosting), and our transactional email provider (account emails such as password resets) process the categories of data necessary to their functions.

A current list of subprocessors is available on request at [privacy@precedera.com].

4. Retention and Deletion

We retain your account information and content while your account is active. If you close your account or request deletion, we will delete your account information and stored content from our systems within [30] days, except as needed to comply with legal, tax, or accounting obligations (for example, billing records), and will direct our infrastructure provider to effect deletion of associated processing data. Backups are purged on a rolling basis. To request deletion, email [privacy@precedera.com].

5. Security

We use industry-standard safeguards: encryption in transit (TLS) for all traffic, passwords stored as salted hashes, secrets encrypted at rest, access limited to what operating the Service requires, and payment processing handled entirely by Stripe (PCI-DSS compliant). No system is perfectly secure; we will notify you of any breach affecting your data as required by law.

6. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can exercise most of these directly: your memos and inputs are visible and downloadable in your dashboard, and account deletion can be requested at [privacy@precedera.com]. We honor verified requests within the timeframes required by applicable law, including the Colorado Privacy Act and similar state laws where applicable. We do not discriminate against you for exercising privacy rights.

7. Where Data Is Processed

The Service is operated from the United States, and the systems described in Section 3 are located in the United States. If you use the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Changes and Contact

We will post any changes to this policy here and, for material changes, notify you by email or in-product notice. Questions or requests: [privacy@precedera.com], or by mail at [PENDING].