Legal
Privacy Policy
What data Recaran collects, how it is used, who processes it, and the choices you have.
Last updated June 5, 2026
Draft for transparency — these terms are being finalized with counsel and are not yet a binding agreement. They describe how Recaran works today and may change before general availability.
1. Information we collect
Account information: your name, email, and any profile details you add (such as a requester identity used to fill request letters).
Workspace content: the matters, requests, chronology, communications, checklists, notes, and files you create or upload.
Usage and technical data: basic logs needed to operate and secure the service.
2. How we use it
We use your data to provide and improve the service: to store and organize your matters, generate draft letters and packets, track follow-ups, send you product and reminder emails you have configured, and keep the service secure.
Aggregated, de-identified analytics (for example, how agencies tend to respond) may be computed across the platform. These are authority- and aggregate-level and are not used to identify individual requesters publicly. Leaderboards show only the public name you choose, and only if you opt in.
3. We do not sell your data
We do not sell your personal information. We share data only with the service providers that operate Recaran, and only as needed to run it.
4. Service providers
Recaran runs on Supabase (database, authentication, and file storage), Railway (application hosting), Resend (transactional email), and Cloudflare (network and inbound email routing). These providers process data on our behalf under their own terms.
If AI-assisted features are enabled, a third-party AI provider may process limited content you submit to those features (for example, the text of a proposed collaborative investigation). When such a provider is in use, it will be named here, it will be a United-States-hosted provider, and we will not permit it to train on your content. (Draft — being finalized with counsel.)
Data is hosted in the United States.
5. Your choices and rights
You can view and edit your profile and matters at any time. You can delete your account from your profile, which removes your matters and associated workspace data.
You can control reminder and notification emails in your profile. To request access to or deletion of other data, contact [email protected].
6. Retention and security
We retain your data while your account is active and for a reasonable period afterward as needed for legal, security, or operational purposes. Account deletion removes your workspace data as described above.
We use industry-standard measures, including encrypted transport and access controls, and store files in a private bucket scoped to your account. No system is perfectly secure, and we cannot guarantee absolute security.
7. Contact
Privacy questions can be sent to [email protected]. This policy is a draft pending finalization with counsel and will be updated before general availability.