Privacy Policy

1. Overview

This Privacy Policy explains how Java Books, LLC collects, uses, shares and retains information when you use Legal Red Flag Alerts (the "Service"). It applies to the website, the application and the review memos it generates.

2. Information We Collect

Account information: if you create an account, we collect your email address and authentication identifiers. If you sign in with Google, we receive your email address, basic profile information and a provider identifier — we never receive your Google password.

Documents and generated output: the files you upload, the text extracted from them, the document type and party you select, and the review memo produced for you. If you are signed in, these are stored to your account so you can revisit them; if you are not signed in, the review is held in your browser session only.

Consent records: when you accept the Terms of Service and Privacy Policy, we record the versions you accepted, the date and time of acceptance, your IP address, your browser user-agent string, and your account identifier if you are signed in. This record is append-only and is retained as evidence of consent.

Technical information: IP address, browser and device type, pages requested, timestamps, and error diagnostics generated automatically when you use the Service.

3. How We Use Information

We use information to operate and deliver the Service (extracting document text, generating and storing your review memos), to authenticate you and secure your account, to maintain a legally required record of your consent, to diagnose errors, prevent abuse and monitor performance, and to respond to support requests.

We do not sell your personal information, and we do not use your uploaded documents to train our own or third-party artificial-intelligence models.

4. Third-Party Services

These are the only outside services this application contacts, the exact internet addresses involved, and what is sent to each one.

Application hosting (lovable.app / lovable.dev, operated by Lovable) — serves every page of this site from your browser. Your browser contacts this address on every visit, including when you read this Privacy Policy, and the host receives the standard technical details of the request: IP address, browser type, page requested and timestamp.

Supabase (supabase.co) — database, sign-in and storage. Your browser contacts this address to sign you in, to save or load your reviews, and to write your consent record. It receives your account details, your saved reviews and your consent record.

Google Sign-In (accounts.google.com) — contacted only if you choose the "Continue with Google" button. Google receives the sign-in request; we receive your email address, basic profile information and a provider identifier, never your Google password.

Lovable AI Gateway (ai.gateway.lovable.dev) and the model provider behind it (Google Gemini) — receives the text extracted from the document you upload so the review can be generated. This request is made by our server, not by your browser. The text is sent for processing only, and is not used by us to train models.

Lovable font service (cdn.gpteng.co, operated by Lovable) — serves the typeface files used to display the site. Like any resource your browser loads, this request carries the standard technical details (IP address, browser type). No personal information is sent for any other purpose.

We do not load advertising networks, analytics trackers or social media pixels from other companies. We do not share your documents with advertisers or data brokers. Each provider above processes data under its own terms and only to the extent needed to deliver the Service.

5. Data Retention

Saved reviews and their document text remain in your account until you delete them or delete your account. Anonymous reviews live only in your browser session and disappear when you close the tab.

Consent records are append-only and are retained for as long as we may need them to establish that consent was given, typically for the applicable statute-of-limitations period, even after an account is deleted; where an account is deleted, the record is retained without the account link.

Technical logs are retained for a limited operational period and then deleted or aggregated.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can delete individual reviews in the app at any time, and you can request account deletion or a copy of your data by emailing customersarelikefish@gmail.com.

Withdrawing consent to the Terms means you can no longer use the Service. Because consent records are our evidence that consent was given, they are not deleted on request; everything else associated with your account can be removed.

7. Cookies and Tracking

We use strictly necessary cookies and browser storage to keep you signed in, to hold an in-progress review in your session, and to remember that you have accepted the current version of the Terms and Privacy Policy. We do not use advertising cookies or cross-site tracking pixels.

You can block or clear browser storage, but the Service will then ask you to sign in and to accept the Terms again, and unsaved reviews will be lost.

8. Security and Contact

Data is transmitted over encrypted connections and stored with access controls that restrict each account to its own records. No system is perfectly secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect their information. Questions or privacy requests: Java Books, LLC, customersarelikefish@gmail.com.