Legal
Privacy
What RedLine collects in order to run the product, and what it does not claim to be.
Who operates this
These pages refer to the operator as RedLine. No separate legal entity name, registered address, or company number is named here. This page is an operating notice, not a complete controller registration.
Questions about personal data: redline.questions@gmail.com. That address is the sales inbox already used by the product. It is not a published registered office.
Accounts
RedLine is a signed-in product. Creating an account stores a name, an email address, a firm membership, and a role. Email-and-password accounts store a password hash, not the password itself. Email verification is required before login. A password reset email can be sent, and resetting the password revokes existing sessions.
Google sign-in is used only when that provider is configured. In that case Google handles the sign-in handshake, and RedLine stores the linked account so the same email can use the same firm. Google is not required to use the product.
Firm work
The product stores what the firm puts in: knowledge-base documents, uploaded marketing material, scan results, and review marks. That material can contain personal data. It is kept so the firm can run a pre-review and look at the result. RedLine does not sell that material.
Appearance preference is stored on the account, not as a marketing cookie.
Billing
Self-serve plans are billed to the firm through Stripe when checkout is configured. The 60-day trial needs no card. When an owner subscribes, the card is entered in Stripe Checkout and the firm is billed for the interval it chose. RedLine does not need the full card number to show plan status.
Contact form
The public sales form sends a name, email, firm name, firm type, and message to the sales inbox. A hidden honeypot field is ignored and not mailed. The form does not create an account.
Limits and logs
Login, password-reset, and sign-up attempts are counted in the database so a flood is limited across instances. The contact form uses a separate in-process counter. Hosting logs may include IP address, time, and user agent. Those logs are for running and protecting the service, not for advertising profiles.
What we do not do
The product code does not run an advertising network and does not sell personal data. A future analytics tool, if one is added, belongs in this page and the cookie page before it is turned on.