Privacy Policy
Last updated: May 2025
The short version: Your documents are never stored. They're processed in memory and discarded the moment your request completes. We collect only what's needed to run the service. No document content is ever retained, logged, or analyzed after processing.
Who we are
BushelIQ is an eDiscovery software platform operated by BushelIQ. Questions about this policy can be directed to hello@busheliq.com.
What we collect
We collect the minimum information needed to provide the service:
- Email address: when you subscribe, Stripe provides your email to associate your account with a subscription.
- Billing information: handled entirely by Stripe. We never see or store your card number.
- Usage data: which tool was used, when, and from which IP address. This is used for rate limiting and billing. It does not include document content.
We do not collect names, addresses, phone numbers, or any personally identifying information beyond your email.
How your documents are handled
This is the most important part of this policy. When you upload a document to BushelIQ:
- The document is transmitted over an encrypted HTTPS connection to our processing function.
- It is processed entirely in memory. It is never written to disk and never stored in a database.
- Once the response is returned to your browser, the document is discarded. Nothing is retained.
- For AI-powered features (privilege log generation), the document text is sent to Anthropic's Claude API over an encrypted connection. Anthropic's API processes the request and returns a response. Document content is not stored or used for training by Anthropic under their API terms.
PDF stamping and load file generation happen entirely in your browser. Those tools never send your files to our servers at all.
Cookies and local storage
We use browser localStorage (not cookies) to store your access token after you subscribe. This token lets you use the tools without re-authenticating on every visit. It expires after 90 days. We do not use third-party tracking cookies or analytics scripts.
Third-party services
We use the following third parties to operate the service:
- Stripe: payment processing and subscription management. Stripe's privacy policy governs how they handle your billing information.
- Supabase: database for subscription records and usage logs. Supabase is hosted in the United States.
- Anthropic: AI processing for privilege log generation. Document content sent to Anthropic's API is subject to Anthropic's API usage policies.
- Netlify: hosting and serverless function execution.
Data retention
Usage logs (tool name, timestamp, IP address) are retained for 90 days for rate limiting and abuse prevention, then deleted. Subscription records (email, Stripe customer ID, plan status) are retained for as long as your account is active and for a reasonable period after cancellation for billing dispute purposes.
Data sharing
We do not sell, rent, or trade your data to any third party. We share data only with the service providers listed above, and only to the extent necessary to operate the service.
Your rights
You can request deletion of your account and associated data at any time by emailing hello@busheliq.com. We will process deletion requests within 30 days.
Security
All data in transit is encrypted using TLS. Access tokens are signed with HMAC-SHA256. Our database uses row-level security. We follow standard security practices for a service of this type.
Changes to this policy
We may update this policy as the service evolves. Material changes will be noted at the top of this page with an updated date. Continued use of the service after a policy update constitutes acceptance of the revised policy.
Contact
Questions or concerns about privacy? Email us at hello@busheliq.com.