Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and any profile information you provide (name, jurisdiction preferences). Account authentication is handled through Supabase Auth.

Usage Information

We track the number of questions asked per billing period for usage-based limits. We store your chat conversations, generated documents, and situation tracker entries to provide the Service.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account information, or other payment credentials on our servers. We retain only your Stripe customer ID and subscription status.

2. How We Use Your Information

• Providing the Service: Your questions and jurisdiction selections are used to retrieve relevant statutes and generate AI responses.
• Conversation history: We store your chat messages to maintain conversation context and allow you to review past conversations.
• Document generation: Information you provide for document creation is used solely to generate the requested document and is stored with your account.
• Usage tracking: We monitor usage to enforce free tier limits and to improve the Service.
• Communications: We may send you service-related emails (account verification, billing receipts, material changes to terms).

3. Third-Party Services

We use the following third-party services to operate RentCounsel:

• Anthropic (Claude AI): Your questions and conversation context are sent to Anthropic's API to generate responses. Anthropic's use of this data is governed by their privacy policy and commercial API terms, which prohibit using API inputs for model training.
• Voyage AI: Your questions are converted to numerical embeddings using Voyage AI's API for statute matching. The embeddings are mathematical representations, not human-readable text.
• Supabase: Our database and authentication infrastructure is hosted on Supabase. Your data is stored in a PostgreSQL database with Row Level Security enabled.
• Stripe: Payment processing is handled by Stripe. Your payment information is subject to Stripe's privacy policy.

4. Data Security

We implement appropriate security measures to protect your data, including:

• Row Level Security (RLS) on all user data tables, ensuring users can only access their own data.
• Encrypted connections (HTTPS/TLS) for all data in transit.
• Secure authentication via Supabase Auth with JWT tokens.
• Server-side API key management — sensitive keys are never exposed to the browser.

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Deleted accounts: When you delete your account, we delete your profile, conversations, documents, and situation tracker data within 30 days. Anonymized usage statistics may be retained.
• Payment records: Billing records are retained as required by law and Stripe's policies.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Export: Request an export of your conversations and documents.

To exercise any of these rights, contact us at privacy@rentcounsel.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Our authentication cookies are httpOnly and secure.

8. Children's Privacy

RentCounsel is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a minor, we will delete the account and associated data promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and update the effective date at the top of this page.

10. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@rentcounsel.com.