Privacy Policy
How Redline handles your documents, account information and service data.
Last updated: October 16, 2026
On this page
Who this policy covers
Redline is operated by Bookcicle, LLC. This policy covers Redline’s website, API, document comparisons, hosted viewers and related support. Contact privacy@bookcicle.com with questions or requests.
Information we process
We process the original and revised text or files you submit, comparison settings, results and requested artifacts. Account information may include your name, email, authentication details, API key records, subscription and billing records, and support messages. Technical and usage information may include IP addresses, browser and device details, request times, usage counts and security logs.
How we use information
We use this information to compare documents, deliver results and downloads, administer accounts and plans, measure usage, provide support, diagnose problems, prevent abuse and meet legal obligations. Where applicable, our legal bases include performing our agreement with you, legitimate interests in operating and securing the service, consent, and legal obligations.
No model training
Redline’s comparison engine does not use generative AI. Bookcicle does not use your comparison inputs or outputs to train, fine-tune or improve AI models. We may use operational information, such as usage counts and performance measurements, to maintain and improve the service.
Storage and retention
Both document uploads (/v1/redline/uploads, /v1/redline/documents) and hosted comparison artifacts (/v1/redline/comparisons/*) are stored in regional object storage within the caller’s routed deployment region (for example, eu-west-1 in Dublin for EEA, UK and Swiss callers). Standard temporary uploads and comparison artifacts are encrypted at rest and scheduled to expire after 24 hours, and encrypted idempotent retry responses are retained in regional object storage for seven days. For callers whose internal policies require zero post-response storage even within their local region, inline comparisons can be called with Cache-Control: no-store (with inline html or json output and without hosted_viewer or Idempotency-Key) so inputs and results are processed in memory and not retained in comparison caches or object storage.
Link and token expiration can differ from content retention. Expiration does not guarantee immediate deletion; cleanup may run later. Account, billing and security records are kept as needed to operate the service, comply with legal obligations and resolve disputes. Aggregated, anonymized operational data may be retained.
Providers and sharing
Service providers may process information on our behalf for hosting, payments, authentication, analytics and support, subject to appropriate instructions and safeguards. We may disclose information when required by law or necessary to protect rights and safety. Hosted viewer links and embed tokens are sharing credentials: anyone with a valid link or token may be able to view the associated comparison. Share them only with intended recipients.
Security, regional routing and international transfers
We use encryption in transit, encryption at rest for stored information and access controls. No service can guarantee absolute security. Redline routes inline text and document comparison requests to regional deployments in Europe (eu-west-1, Dublin), US West (us-west-1, California), US East (us-east-1, Virginia) and Asia-Pacific (ap-northeast-1, Tokyo) based on caller location, and returns the executing region in the x-execution-region response header. Account, billing, API key, idempotency-claim and numeric usage-quota metadata are replicated or coordinated across regions, including in the United States, without including document text. Where legally required for international transfers, we use applicable transfer safeguards, including Standard Contractual Clauses or other approved mechanisms. See our Security Policy and Regional Routing & GDPR documentation.
Your rights and choices
Depending on your location, you may request access, correction, deletion, portability, restriction or objection to processing, withdraw applicable consent, and complain to a data protection authority. Certain US state laws also provide rights to opt out of sale, sharing or targeted advertising and to appeal a denied request. We honor applicable opt-outs and Global Privacy Control signals where required. Send requests or appeals to privacy@bookcicle.com; we may need to verify your identity. See our Cookie Policy for browser storage choices.
Children
Redline is not intended for children under 13. Where a higher local age applies, users must meet that age or have the required parental consent. Contact us if you believe a child’s information has been collected.
Updates and contact
We may update this policy as practices or requirements change. Material changes will be communicated on the site or through other appropriate channels. Bookcicle, LLC: 373 S Willow St, Unit 240, Manchester, NH 03103, USA. Email: privacy@bookcicle.com.