Redline

Privacy Policy

Last updated: June 23, 2026 · Effective: June 23, 2026

1. Introduction

This Privacy Policy explains how Redline Web Services LLC, doing business as Redline ("Redline," "we," "us," or "our"), collects, uses, shares, and protects information in connection with our chat-first operations assistant, dashboards, integrations, websites, and related services (collectively, the "Service").

This Policy is incorporated into our Terms of Service (set out in this document). Capitalized terms not defined here have the meanings given in the Terms. Please also review the Redline Cookie Policy in this document.

By using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

2. Our Two Roles: Controller and Processor

Redline handles personal information in two distinct roles, and understanding the difference matters for your rights and ours.

2.1 Redline as a "controller" / "business."

For information about our account holders, website visitors, billing contacts, and people who communicate with us, we decide how and why the information is used. This Policy describes those practices.

2.2 Redline as a "processor" / "service provider."

When you, as a Redline customer, upload or connect Customer Data — including personal information about your own End Customers (your customers, prospects, leads, employees, and contractors) — you are the controller of that information, and Redline acts as your processor. We process it on your behalf and on your documented instructions to provide the Service. Your own privacy policy, not this one, governs how you collect and use your End Customers’ information, and you are responsible for providing required notices to, and obtaining required consents from, your End Customers. Our processor commitments are described in this Policy and in any applicable Data Processing Addendum.

If you are an End Customer who received a communication from a business that uses Redline, please contact that business directly; they control your information. We will route or support such requests as described in Section 10.

3. Information We Collect

3.1 Information you provide directly.

• Account and authentication data: name, email address, phone number, password (or a token if you sign in with Google), and two-factor authentication details.
• Onboarding and profile data: your name, company name, trade or industry (e.g., roofing, gutters, HVAC, plumbing, electrical), and crew or team size.
• Billing data: Plan selection, billing email, transaction history, and payment-method details. Card details are collected and processed by our payment processors; we do not store full card numbers.
• Support and communications: messages you send us, feedback, and survey responses.

3.2 Customer Data you submit or connect (processed as your processor).

This includes:

• Contact records and End Customer personal information: names, addresses, phone numbers, email addresses, tags, and notes.
• Job, pipeline, and financial records: jobs, quotes, estimates, invoices, job values, accounts-receivable and overdue-balance information, and payment status.
• Activity and communications data: logs and content of calls, text messages, emails, notes, and payment events associated with contacts.
• Calendar and scheduling data: events, appointments, crew schedules, and locations.
• Imported data: records you import from a connected CRM, from spreadsheet uploads (Excel, CSV, Google Sheets exports), or from photos of paper lists, whiteboards, or business cards.

3.3 Chat inputs, Output, and AI memory.

• Prompts and conversations: the messages you send to the assistant and the conversation history.
• Output: content the Service generates, including drafts, summaries, insights, and recommendations.
• Memory: facts and preferences you save, or that the assistant infers from your use, to personalize Output (for example, that you prefer short text-style messages, or that you treat balances 30+ days past due as overdue).

3.4 Integration data.

When you connect an Integration (e.g., Jobber, QuickBooks, Stripe, Twilio, Gmail, Google Calendar, Facebook Lead Ads, Google Business Profile), we receive and exchange data with that service as needed to provide the feature, consistent with the permissions you grant.

3.4.1 Google API Services — Limited Use.

Redline's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained through Gmail and Google Calendar is used solely to provide the features you authorize (sending email from your connected Gmail address, and syncing your Google Calendar events). We do not sell this information, use it for advertising, transfer it except as needed to provide those features or as required by law, or use it to train generalized artificial-intelligence or machine-learning models.

3.5 Information collected automatically.

• Usage and device data: pages and features used, actions taken, timestamps, approximate location derived from IP address, device and browser type, operating system, and identifiers.
• Log data: IP address, access times, and diagnostic and error information.
• Cookies and similar technologies: see our Cookie Policy. We use first-party storage for sign-in and preferences and privacy-focused analytics to understand and improve the Service.

3.6 Information from third parties.

We may receive information from sign-in providers, payment processors, Integrations you connect, and analytics providers.

4. How We Use Information

We use information to:

• provide, operate, and maintain the Service, including the assistant, dashboards, scheduling, pipeline, accounts-receivable tracking, insights, and the drafting and (where you direct) sending of communications;
• process and generate AI Output and personalize it using your memory and context (see Section 5);
• enable Integrations you connect and exchange data with them at your direction;
• process payments, manage subscriptions and Credits, and prevent fraud;
• provide support and respond to your requests;
• secure the Service, detect and prevent abuse, debug, and protect against malicious or illegal activity;
• analyze and improve the Service, develop new features, and understand usage trends;
• communicate with you about your Account, transactions, security, changes, and — where permitted — products and offers (you can opt out of marketing); and
• comply with law and enforce our Terms.

We use Customer Data only as needed to provide the Service to you and as you instruct, except where we process de-identified or aggregated data as described in Section 6.7.

Legal bases (where required, e.g., for EEA/UK individuals): performance of a contract; our legitimate interests in operating and improving the Service and securing it; compliance with legal obligations; and consent where required (such as for certain marketing or cookies). Where we act as a processor, the controller (our customer) is responsible for establishing the legal basis.

5. Artificial Intelligence and Machine Learning

5.1 How AI processing works.

The Service uses AI and machine-learning models — including models hosted by Redline and/or provided by third-party model providers — to generate Output. To do this, we send relevant inputs (which may include your prompts, your memory and profile context, and relevant Customer Data) to the model for processing, and we return the Output to you.

5.2 Third-party model providers.

We use reputable third-party AI providers as sub-processors to deliver AI features. We contract with these providers to process data only to provide the service to us and subject to confidentiality and security obligations.

5.3 Training and improvement.

We do not sell your prompts, Customer Data, or Output, and we do not authorize our third-party model providers to use your Customer Data to train their generally available foundation models, except as you expressly direct or as required to provide the Service. We may use de-identified and aggregated data, and limited operational data, to monitor, debug, evaluate, secure, and improve the Service and our own models. Where we would use identifiable Customer Data for model improvement beyond providing the Service, we will do so only with an appropriate legal basis or your instruction, and account holders can contact us to ask about available controls.

5.4 AI memory.

The memory feature stores facts and preferences to personalize Output. You can view, add, edit, and delete memory entries and turn the feature off in your settings. Disabling memory or deleting entries stops the Service from referencing them going forward.

5.5 Accuracy and human oversight.

AI Output can be inaccurate or incomplete. The Service is a decision-support tool. You are responsible for reviewing Output before relying on it or sending it, and for ensuring that any automated processing involving individuals has appropriate human oversight and a lawful basis. See the Terms, Section 8.

6. How We Share Information

We share information only as described here. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6.1 Service providers and sub-processors.

We use vendors to operate the Service, including:

• Cloud hosting and infrastructure (hosting, storage, databases, content delivery);
• AI and model providers (to generate Output);
• Payment processors (e.g., Stripe, Square) to process payments;
• Communications providers (e.g., Twilio for SMS, and email providers) to transmit the communications you send;
• Analytics and product-monitoring providers to understand and improve the Service; and
• Customer-support and operational tools.

These providers may process information only to provide services to us and are bound by confidentiality and data-protection obligations.

6.2 Integrations you direct.

When you connect an Integration, we exchange data with it at your direction. Examples include field-service tools (Jobber, Housecall Pro, CompanyCam, ServiceTitan, JobNimbus, Buildertrend, Hover, EagleView), accounting and payment tools (QuickBooks Online, Stripe, Square, Xero, DocuSign, Wisetack), communication and calendar tools (Twilio, Gmail, Google Calendar, Outlook, OpenPhone, RingCentral, Mailchimp), and others (Google Maps, Google Business Profile, Facebook Lead Ads, OpenWeather, Podium, HubSpot, Zapier). Those third parties handle data under their own privacy policies, which we do not control.

6.3 Within your organization.

Customer Data is available to the Users (teammates/seats) you authorize under your Account. You are responsible for managing their access.

6.4 Legal and safety.

We may disclose information if we believe in good faith it is necessary to comply with law, legal process, or a governmental request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Redline, our users, or others.

6.5 Business transfers.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy with comparable protections.

6.6 With your consent.

We may share information for other purposes with your consent or at your direction.

6.7 De-identified and aggregated data.

We may create and use de-identified or aggregated data that cannot reasonably identify you or an individual, for analytics, benchmarking, research, and improving the Service, and we may share it.

7. Third-Party Integrations and Services

Integrations are optional and operate at your direction. When you connect one, you authorize the exchange of data between the Service and that provider, which may include End Customer personal information. We are not responsible for third-party services, their data practices, or changes they make. Review each provider’s privacy policy before connecting, and disconnect Integrations you no longer use through your settings.

8. Data Retention

We retain personal information for as long as needed to provide the Service and for the purposes described in this Policy, unless a longer period is required or permitted by law.

• Account data is retained while your Account is active and for a reasonable period afterward.
• Customer Data is retained while your Account is active. The Service may let you configure how long certain activity records (such as call and text logs) are kept.
• After termination, we provide a reasonable window for you to export Customer Data, after which we delete or de-identify it, except for residual copies in routine backups (which are deleted on a rolling basis) and information we must retain for legal, accounting, security, or dispute-resolution purposes.
• Memory entries persist until you delete them or disable the feature.
• You can delete your workspace and request account deletion as described in Section 10.

9. Data Security

We maintain administrative, technical, and organizational measures designed to protect personal information, including encryption in transit; encryption at rest for sensitive credentials such as the access and refresh tokens of connected accounts (for example, Jobber and Google), which are encrypted using AES-256-GCM; database-level access controls (row-level security); authentication options such as two-factor authentication; and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for securing your credentials and for managing your Users’ access. If we become aware of a breach affecting your information, we will notify you as required by law.

10. Your Rights and Choices

10.1 Access, correction, export, and deletion.

Depending on your location and role, you may have rights to access, correct, export, delete, or restrict the processing of your personal information, and to object or withdraw consent. Within the Service, you can:

• update your profile and account information;
• export Customer Data (such as contacts, jobs, and activity) using the export tools;
• view, edit, and delete memory entries and disable memory;
• manage notifications and marketing preferences;
• manage sessions and security settings; and
• delete your account/workspace.

10.2 How to exercise rights.

You may also contact us through the methods we make available. We will verify your request and respond within the timeframes required by applicable law. We will not discriminate against you for exercising your rights.

10.3 End Customer requests.

If you are an End Customer whose information was uploaded by a business that uses Redline, that business is the controller. Please direct access, correction, and deletion requests to that business. If you contact us, we will, where appropriate, refer your request to the relevant business or assist them in responding, consistent with our role as a processor.

10.4 Marketing communications.

You can opt out of marketing emails using the unsubscribe link or your settings. We may still send transactional and account messages.

10.5 Cookies and tracking.

Manage cookies and similar technologies as described in the Cookie Policy, including through your browser. We honor recognized opt-out preference signals (such as Global Privacy Control) where required.

11. U.S. State Privacy Disclosures

This Section provides additional disclosures for residents of U.S. states with applicable privacy laws (such as California, Virginia, Colorado, Connecticut, Utah, and others), and applies to our processing as a controller/business. Where we act as a processor/service provider on behalf of our customers, those customers are responsible for honoring consumer requests, and we assist them as required.

11.1 Categories of personal information.

In the past 12 months, depending on your interactions, we may have collected: identifiers (name, email, phone, IP address); commercial information (subscription and transaction records); internet and device activity (usage and log data); approximate geolocation; professional or employment information (company, trade); and audio/electronic information (support communications). For our customers, Customer Data they submit may include the categories listed in Section 3.2.

11.2 Sources and purposes.

Sources and purposes are described in Sections 3 and 4. We disclose information to the categories of recipients in Section 6 for business purposes.

11.3 No sale or sharing.

We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are defined under California and other state laws.

11.4 Sensitive personal information.

We do not use or disclose sensitive personal information for purposes that require an opt-out under applicable law. You should not submit sensitive data except as the Service is designed to handle (see the Terms, Section 6.5).

11.5 Your state rights.

Subject to your state’s law, you may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale/share or certain profiling, and appeal a denial. To exercise them, use the in-product controls or contact us through the methods we make available. You may use an authorized agent where the law permits; we may verify the agent’s authority and your identity.

11.6 Appeals.

If we deny your request, you may appeal by replying to our decision or contacting us through the methods we make available. If you have concerns after an appeal, you may contact your state attorney general.

11.7 Massachusetts and other states.

We comply with applicable Massachusetts data-protection and breach-notification requirements and with other applicable U.S. state laws.

12. International Users and Data Transfers

We are based in the United States, and we process and store information in the United States and other countries where we or our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data-protection laws that differ from those in your country. Where required for transfers of EEA, UK, or Swiss personal data, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. Contact us for more information.

13. Telephone, SMS, and Email Data

Because the Service can draft and (at your direction) send communications, we process related data, including phone numbers, email addresses, message content, delivery and engagement metadata, and opt-out and suppression information. When you send messages through the Service, you are the sender and are responsible for legal compliance, including consent, identification, opt-out handling, and do-not-call obligations (see the Terms, Section 7.2). We and our communications providers process this data to deliver messages, manage opt-outs, and meet carrier and regulatory requirements. Opt-out and suppression requests are processed to stop further messaging.

14. Children’s Privacy

The Service is intended for business use by adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us through the methods we make available and we will take appropriate steps to delete it.

15. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, notify you by email or in-app. Changes are effective when posted unless we state otherwise. Your continued use of the Service after the changes take effect constitutes acceptance.

16. Contact Us

You can reach Redline through the contact options made available within the Service and on our website. For privacy requests, use the in-product privacy controls or the contact options we provide.

If you are an account holder with questions about a Data Processing Addendum or our processor obligations, contact us through the methods we make available.

Cookie Policy

Last updated: June 23, 2026 · Effective: June 23, 2026

1. About This Policy

This Cookie Policy explains how Redline Web Services LLC, doing business as Redline ("Redline," "we," "us," or "our"), uses cookies and similar technologies on our websites and within the Redline application (the "Service"). It should be read together with the Redline Privacy Policy and Terms of Service in this document.

By using the Service, and where required by setting your preferences through our consent tools or your browser, you agree to the use of cookies and similar technologies as described here.

2. What Are Cookies and Similar Technologies?

Cookies are small text files stored on your device when you visit a website. They let a site recognize your device, remember your actions and preferences, and function properly.

We also use similar technologies, including:

• Local storage and session storage: browser storage the Service uses to keep you signed in and to remember your settings. The Service relies on local storage for core functionality such as your sign-in state and preferences.
• Pixels and web beacons: tiny graphics that help us understand engagement (for example, whether an email was opened), where used.
• Software development kits (SDKs) and similar identifiers in mobile contexts.
• Server logs: records of requests that include data such as IP address and timestamps.

In this Policy, we use "cookies" to refer to all of these technologies, except where we distinguish them.

Cookie durations: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain until they expire or you delete them.

3. Why We Use Them

We use cookies and similar technologies to:

• keep you signed in and maintain your session;
• remember your settings and preferences (such as theme and default landing view);
• operate core features of the Service;
• keep the Service secure and detect abuse;
• understand how the Service is used so we can improve it; and
• where applicable, support sign-in through third-party providers and embedded third-party features.

We do not use cookies for cross-context behavioral advertising, and we do not sell information collected through cookies.

4. Categories of Cookies We Use

4.1 Strictly necessary (always on).

These are essential for the Service to work and cannot be switched off in our systems. They include technologies that keep you signed in (for example, sign-in state stored in your browser), maintain your session, route requests, balance load, and protect security. Without them, parts of the Service will not function. Because they are essential, they are typically not subject to consent.

4.2 Functional / preferences.

These remember choices you make to provide a more personalized experience, such as your theme (light or dark), your default landing view, and other interface preferences. Disabling them may cause some features to forget your settings.

4.3 Analytics / performance.

These help us understand how visitors and users interact with the Service — which pages and features are used, how often, and whether errors occur — so we can improve performance and usability. We use privacy-focused analytics; depending on configuration, these technologies may use first-party cookies or similar identifiers, and we aim to minimize the personal information collected. Disabling them does not affect core functionality.

4.4 Third-party / integration cookies.

Some features rely on third parties whose technologies may set their own cookies, including:

• Sign-in providers (such as Google) when you authenticate through them;
• Embedded services such as maps or other connected tools that render within the Service; and
• Integrations you connect, which may set cookies governed by their own policies.

These cookies are controlled by the relevant third parties and are subject to their privacy and cookie policies, which we do not control.

Note: We do not currently use advertising or cross-site tracking cookies. If this changes, we will update this Policy and, where required, request your consent before using such cookies.

5. How to Manage Cookies

5.1 Consent tools.

Where required by law (for example, for visitors in the EEA, the UK, and certain U.S. states), we provide a consent mechanism that lets you accept or reject non-essential cookies and update your choices. Strictly necessary technologies do not require consent.

5.2 Browser controls.

Most browsers let you view, block, and delete cookies and clear local storage through their settings (Google Chrome, Apple Safari, Mozilla Firefox, Microsoft Edge). If you block or delete cookies and local storage, you may be signed out, your preferences may be lost, and some features may not work — including features that depend on local storage to keep you signed in.

5.3 Opt-out preference signals.

Where required, we honor recognized browser-based opt-out signals such as Global Privacy Control (GPC).

5.4 Analytics opt-out.

You can limit analytics by rejecting non-essential cookies through our consent tool (where offered) or by using your browser controls.

5.5 Third-party choices.

To manage third-party cookies (for example, from sign-in providers or embedded services), use the controls those providers offer and review their policies.

6. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry standard for responding to DNT, the Service does not currently respond to DNT signals. We do, however, honor recognized opt-out preference signals such as GPC where required by law.

7. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, law, or how we operate. We will post the updated Policy with a new "Last updated" date and, where appropriate, provide additional notice. Changes are effective when posted unless we state otherwise.

8. Contact Us

You can reach Redline through the contact options made available within the Service and on our website. For more on how we handle personal information, see the Redline Privacy Policy in this document.