Privacy Policy

Information We Collect

We collect information you provide directly when you create an account or use Refyle:

Account information: Email address and password (stored as a secure hash).
Usage data: Files processed per month, plan type, and general usage statistics.
Payment information: Processed entirely by Stripe. We never see or store your full card number.
Communications: If you contact support, we retain that correspondence.

We automatically collect:

Log data (IP address, browser type, pages visited, timestamps)
Device information (browser, OS, screen size)
Analytics data via privacy-respecting tools

How We Use Your Information

We use your information to:

Provide and improve the Refyle service
Process payments and manage subscriptions
Send transactional emails (account confirmations, billing receipts, usage alerts)
Send optional onboarding emails — you can unsubscribe at any time
Detect and prevent fraud and abuse
Comply with legal obligations

We never sell, rent, or share your personal information with third parties for their marketing purposes.

File Processing

Your files are never stored permanently.

When you upload documents to Refyle, they are transmitted over an encrypted connection, analyzed by Claude AI to extract naming information, then permanently deleted from our servers immediately after processing. We retain only the renamed filename — never the original document content.

Every upload is also automatically screened for Protected Health Information (PHI). Documents containing patient identifiers are rejected before processing and never stored.

Data Retention

Account data: Retained while your account is active, and for 30 days after deletion.
File contents: Never retained. Deleted immediately after processing.
Billing records: Retained for 7 years as required by applicable law.
Support communications: Retained for 3 years.

You can request deletion of your account at any time from Settings → Account → Delete Account.

Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze how the service is used. You can disable cookies in your browser settings, though some features of Refyle may not function correctly without them.

Third-Party Services

Refyle uses the following third-party services:

Supabase — Database and authentication
Anthropic (Claude AI) — Document analysis
Stripe — Payment processing
Resend — Email delivery
Netlify — Hosting

Each service processes data only as necessary to provide the Refyle service, under their own privacy policies.

Data Security

We protect your data with TLS encryption for all data in transit, encrypted data at rest, role-based access controls, regular security reviews, and immediate file deletion after processing. If you believe your account has been compromised, contact us immediately at security@refyle.com.

Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information; opt out of marketing communications; and request data portability. To exercise these rights, contact us at support@refyle.com.

Children's Privacy

Refyle is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of Refyle after changes constitutes acceptance of the updated policy.

Contact Us

Questions about this Privacy Policy? Contact us at support@refyle.com.