Scope and acceptance
This Privacy Policy describes how Redline (the "Service"), operated by Tradewind Ops LLC ("we," "us," or the "Company"), collects, uses, stores, and discloses information about users of redline.best and any related applications or APIs. By creating an account or using the Service, you agree to the practices described here.
Contact information appears in Section 12.
The Service is intended for licensed professional engineers, engineering staff, and related construction and design professionals located in the United States. We do not direct the Service to users outside the United States.
Information we collect
Account information
When you sign up, we collect your email address, full name, and a password (stored only as a hashed value by our authentication provider). You may optionally upload a professional engineer seal image and a signature image for use in PDF exports.
Drawings and uploaded files
When you submit a drawing for analysis, we collect the PDF file you upload and any project metadata you enter (project name, discipline, project type, code edition, and focus areas). Drawings may contain information that identifies you, your firm, your clients, project addresses, and other details visible on the drawing.
Analysis output
We store the results of each analysis, including detected defects, severity ratings, code references, AI-generated comments, your review status (approved, in review, ignored), your written comments and notes, and dispute reasons.
Usage information
We collect basic technical information when you use the Service: IP address, browser type, operating system, pages visited, time spent, and timestamps of actions. We also track API token usage and estimated cost per analysis for operational and infrastructure purposes.
Communications
If you contact us by email, send us feedback, or receive a system email (such as a password reset or team invite), we retain that communication.
Billing information
If you purchase a paid plan, our payment processor collects your payment card details, billing name, and billing address directly from you. We do not receive or store your full card number. We receive and store a customer identifier, the last four digits and brand of your card, your plan and billing period, invoice and payment history, and the renewal or cancellation state of your subscription.
Product analytics
We use a first-party product analytics service, routed through our own domain, to understand how the marketing site and the Service are used: pages viewed, referring source, buttons and links clicked, forms started and completed, approximate location derived from IP address at the country and region level, and device and browser type. We do not enable session recording or heatmaps, and we do not send your name, email address, drawing contents, or analysis results to this service.
We do not collect: full payment card numbers, social security numbers, driver's license numbers, biometric data, or precise geolocation data.
How we use information
We use the information described above to:
- Provide the core service: accept your drawing, analyze it, and return defect reports
- Maintain your account, authenticate you, and let you view your historical analyses
- Send transactional emails (password resets, invite acceptances, system notifications)
- Improve the Service over time, including refining defect detection through aggregate review patterns. Drawings themselves are not used to train any third-party AI model (see Section 4 for our processor commitments)
- Monitor and prevent abuse, fraud, and excessive API usage
- Comply with legal obligations and respond to lawful requests
We do not sell, rent, or trade your information. We do not use your information for advertising, and we do not allow third parties to use your information for advertising.
Third-party processors
We rely on third-party service providers to operate the Service. Each is bound by its own privacy and security commitments, and each processes only the information necessary to perform its function.
| Category | Provider | Purpose | Data processed |
|---|---|---|---|
| AI processing provider | Anthropic | Analysis of uploaded drawings | Drawing contents, project metadata, prompts |
| Cloud database and storage provider | Supabase | Authentication, data storage, file storage | Account information, drawings, analysis results, all stored user content |
| Application hosting provider | Vercel | Web application hosting and request routing | HTTP request metadata, server logs |
| Email delivery provider | Resend | Transactional email delivery | Recipient email addresses, message contents |
| Search and retrieval provider | Third-party embedding service | Search and retrieval features that improve analysis quality | Short text extracts of completed analyses, together with the project and drawing name. Not the drawing files themselves |
| Payment processor | Stripe | Subscription checkout, recurring billing, invoicing | Payment card details (collected and stored by the processor, not by us), billing name and address, email address, plan and invoice history |
| Bot protection provider | Cloudflare | Distinguishing real users from automated abuse at sign-in and sign-up | IP address, browser and device signals, a challenge token. No account content |
| Product analytics provider | PostHog | Usage measurement for the marketing site and the Service | Pages viewed, clicks, referring source, device and browser type, IP-derived country and region. No names, emails, drawings, or analysis results |
Each provider receives only the information its function requires, and no more. Our AI processing provider, which analyzes your drawings, is contractually committed not to use customer content to train its models. Other providers process the information shown above under their own published terms, which in some cases permit them to use content they receive to improve their services. We do not sell your information, and we do not use your drawings or analysis results to train any model of our own. Other than the providers described above, we do not share your information with any third party except as described in Section 7 (lawful requests) or with your explicit consent.
The table above is the current list. If we add or change a provider, we will update this page and the version number below before the change takes effect. The identity of any provider shown here by category is available on request to support@redline.best, and we will add you to a notice list for future changes if you ask.
Retention
We retain your information for as long as your account is active and for a reasonable period afterward, as follows:
- Account information: for the life of your account, plus up to 90 days after deletion to handle any final billing or support matters
- Uploaded drawings and analysis results: retained indefinitely while your account is active, so that you can return to them at any time. You may delete individual analyses through the Service at any time. When a plan ends, access stops at the end of the period you have paid for and the account is closed; we keep the data for a further 90 days and then delete it permanently. During those 90 days you can email support@redline.best from the account address and we will send you a copy, or restart a plan and pick up where you left off
- Usage logs: retained for up to 24 months for operational and security purposes, then deleted or anonymized
- Communications: retained for up to 24 months
- Billing and payment records: retained for 7 years to meet tax and accounting obligations, reduced to the minimum needed (amounts, dates, plan, and an account reference). These are not removed by a deletion request
You may request full deletion of your account and all associated data at any time by contacting us using the address in Section 12. We will complete deletion within 30 days of a verified request, except where retention is required by law. Deletion removes your data from the live Service straight away; encrypted backups are overwritten on their normal cycle and any residual copy ages out within a further 30 days.
Security
We take reasonable measures to protect your information:
- All connections to the Service use HTTPS / TLS
- Passwords are hashed using industry-standard algorithms by our authentication provider and are not stored in plaintext or accessible to us
- File storage is configured so that each user can access only files in their own account scope, enforced at the database level
- Secret keys for third-party services are stored as encrypted environment variables, are not committed to source control, and are replaced if we have reason to believe one has been exposed
- Administrative access is restricted to the operator of the Service
No system is perfectly secure. We cannot guarantee that information transmitted over the internet or stored on our systems will never be compromised. We are not currently certified to any specific information security standard such as SOC 2, ISO 27001, or HIPAA. If a data breach occurs that materially affects your information, we will notify you without unreasonable delay.
Your rights
Regardless of where you live, you may:
- Access the information we hold about you
- Correct inaccurate information through your account settings or by contacting us
- Delete individual analyses or your entire account
- Export your analyses as PDF files at any time through the Service while your account is active, or by emailing us within 90 days of the account closing
- Withdraw consent by ceasing use of the Service and deleting your account
To exercise these rights, contact us at the address in Section 12. We may ask you to verify your identity before acting on a request. We will respond within 30 days.
California residents
If you are a resident of California, the California Consumer Privacy Act ("CCPA") gives you additional rights, including the right to know what personal information we collect about you, the right to delete that information, the right to correct inaccuracies, and the right not to be discriminated against for exercising these rights.
We do not "sell" or "share" personal information as those terms are defined under the CCPA. We do not have actual knowledge of selling or sharing personal information of consumers under 16 years of age.
To exercise CCPA rights, submit a request to the contact address in Section 12. We will verify your request by confirming the email address associated with your account.
Cookies and storage
We use a small number of cookies and browser-storage items to operate the Service and to measure how it is used. We do not use advertising cookies, and we do not allow third parties to track you across other websites.
- Authentication session cookie: required for the Service to function. Without it, you cannot stay logged in
- Product analytics identifier: a randomly generated identifier set by our analytics provider so that repeat visits can be counted as one visitor rather than many. It is not linked to your name or email address on the marketing site, and it is not used for advertising
- Theme preference: remembers your selection of light, dark, or system theme
- Last-report restore: remembers the last analysis you viewed so that the Service can return you to it after a refresh
- PDF export defaults: remembers your preferred export options on a per-report basis
You may clear these at any time using your browser's controls. Clearing the authentication cookie will sign you out.
Children
The Service is intended for professional users and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, post a notice in the Service or send you an email. Continued use of the Service after a change indicates your acceptance of the revised policy.
Contact
Questions, requests, or complaints about this policy should be sent to:
Tradewind Ops LLC
d/b/a Redline
Mailing address: 2980 NE 207th St, Suite 300-191, Aventura, FL 33180
Email: support@redline.best