Privacy Policy
Last updated: June 15, 2026
RedactWorks exists to remove sensitive information — so protecting the data you trust us with is the whole point. We never use your documents to train AI models, we let you permanently delete your files the moment you’re done, and we keep only what we need to run the service.
This Privacy Policy explains how Barter-Win LLC, a California limited liability company (“RedactWorks,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the RedactWorks hosted service at app.redactworks.ai and our website at redactworks.ai (together, the “Service”). It applies to the self-serve, individual (“Solo”) edition of the Service. Organizations that sign a separate Data Processing Agreement (DPA) are governed by that agreement where it conflicts with this Policy.
1. Information we collect
a. Information you provide
- Account information — your email address and display name, provided through sign-in (including Google sign-in).
- Documents you upload — the files you submit for redaction, and the content within them (which may itself contain personal or sensitive information). We process these to detect and redact sensitive content at your direction.
- Redaction choices — the highlights you approve or reject, manual redaction boxes you draw, and custom detection rules you create.
- Support communications — messages you send us or our in-app assistant.
b. Information collected automatically
- Usage and ledger metadata — record identifiers, document counts, status, timestamps, and credit/usage counts. This metadata is kept PII-free and is used to run your account and meter usage.
- Technical data — basic request logs (e.g., IP address, browser type) needed to operate and secure the Service.
c. Payment information
Payments are processed by Stripe. We never receive or store your full card number, CVC, or bank details — that information goes directly to Stripe. We receive only limited billing metadata from Stripe (such as a customer identifier, subscription status, the amount, and the email used at checkout).
2. How we use information
- To provide the Service — detect, review, redact, verify, and deliver your documents.
- To authenticate you and isolate your workspace from other users.
- To meter free credits and process purchases.
- To provide support and operate the in-app assistant (which is restricted to product help and is not given access to your document contents, findings, or account data).
- To secure, maintain, and improve the Service’s reliability.
- To comply with legal obligations.
3. We do not train AI on your documents
Your documents and their contents are not used to train, fine-tune, or improve any artificial-intelligence model — ours or our vendors’. Detection is performed by Google Cloud’s Vertex AI and Cloud Data Loss Prevention under contractual terms that restrict use of your data to providing the service to you. We do not sell your data, and we do not use the contents of your documents for advertising.
4. Service providers (sub-processors)
We rely on a small set of trusted providers to run the Service. They process data only to provide services to us and are bound by confidentiality and data-protection obligations:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Cloud (incl. Vertex AI, Cloud DLP, Cloud Storage, Firestore, Firebase Authentication) | Hosting, AI/automated detection, document storage, database, sign-in | Documents and their contents (transiently), account and usage metadata |
| Stripe | Payment processing | Payment details (handled directly by Stripe), billing metadata |
| SendGrid (Twilio) | Transactional email (e.g., verification) | Email address |
This list may change as the Service evolves; we will update this Policy when it does.
5. Where your data is processed
The Service is hosted on Google Cloud infrastructure located in the United States. If you access the Service from outside the U.S., you understand your information will be processed in the U.S.
6. Data retention and deletion
- Your uploaded files. When you download your redacted output, you can choose to permanently delete your uploaded source files and all working copies from our storage. We re-scan storage to confirm removal. We retain only PII-free record metadata (so your usage history and credit counts remain accurate).
- If you don’t delete. Files you leave in your workspace remain until you delete them or close your account; we may apply a retention limit and will state it in-product if so.
- Account data. We keep your account and PII-free metadata for as long as your account is active and as needed to comply with legal, tax, and accounting obligations.
- Closing your account. Contact support@redactworks.ai to close your account and request deletion of your data, subject to records we are required to keep.
7. Security
We protect data in transit and at rest using industry-standard encryption, enforce per-user workspace isolation so one user cannot access another’s documents, restrict administrative access, and keep audit logs. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security; you are responsible for keeping your sign-in credentials confidential.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email support@redactworks.ai. We will not discriminate against you for exercising them. We do not sell or “share” personal information as those terms are defined under U.S. state privacy laws.
9. Student data and other regulated information
If you upload records governed by laws such as FERPA, HIPAA, or similar regimes, you are responsible for ensuring you are permitted to do so, and you act as the controller of that information. For the Solo edition we act as your service provider/processor and use that information only to provide the Service to you. Organizations needing a FERPA/HIPAA-aligned agreement should contact us for a Data Processing Agreement before uploading regulated records.
10. Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children. Note that documents you upload may contain information about minors (e.g., student records); that content is handled under Sections 6 and 9, at your direction and responsibility.
11. Cookies
We use only the cookies and local storage necessary to keep you signed in and remember basic preferences. We do not use advertising or third-party tracking cookies.
12. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.
13. Contact us
Barter-Win LLC
Huntington Beach, California, USA
Email: support@redactworks.ai