Privacy Policy

Evidence Timeline LLC ("Evidence Timeline," "we," "us," or "our") respects your privacy and recognizes that the information you provide to Evidence Timeline may be personal, confidential, or sensitive.

This Privacy Policy explains how we collect, use, process, store, and disclose information when you use the Evidence Timeline website, mobile applications, and related services (collectively, the "Service").

By using Evidence Timeline, you acknowledge the practices described in this Privacy Policy.

Account Information

When you create an Evidence Timeline account, we may collect your name, email address, account credentials, account preferences, subscription status, and account status.

Evidence and Case Information

Evidence Timeline allows users to create cases and upload, enter, organize, and process information. This may include PDFs, documents, photographs, screenshots, text messages, conversations, emails, audio recordings, other uploaded files, case names and descriptions, names of individuals, dates and events, notes, timeline entries and edits, and other information entered into a case.

Because Evidence Timeline is designed to organize evidence, information uploaded by users may contain sensitive or personal information about the user or other individuals, including minors. Users are responsible for ensuring that they have the appropriate rights or authorization to upload and process information through Evidence Timeline.

Automatically Collected Information

When you use Evidence Timeline, certain technical and usage information may be collected automatically by us or by service providers that help us operate and understand the Service. This may include IP address, device type, browser type, operating system, usage and interaction information, device identifiers, login or session information, approximate location derived from an IP address, and technical or diagnostic information.

Evidence Timeline currently uses Google Analytics on the production website. The codebase does not currently include the Vercel Web Analytics package, but Vercel may process technical request and hosting information as part of application hosting.

We may use information collected through Evidence Timeline to:

• Create and maintain user accounts
• Store and organize evidence
• Process uploaded evidence
• Extract dates, people, events, and other relevant information
• Transcribe audio recordings
• Generate timeline entries, summaries, Executive Summaries, possible contradictions, and suggested evidence
• Provide and maintain the Service
• Authenticate users and protect accounts
• Process subscriptions and purchases
• Provide customer support
• Troubleshoot technical issues
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Analyze and improve the performance and usability of the Service
• Communicate important account, billing, processing, security, and service information
• Comply with applicable legal obligations

Evidence Timeline uses artificial intelligence to help users organize and understand uploaded evidence. When evidence is uploaded or reprocessed, some or all of its contents may be securely transmitted to third-party artificial intelligence service providers, including OpenAI, for processing.

• Extracting dates and events
• Identifying individuals and other relevant information
• Transcribing audio
• Creating timeline entries
• Identifying possible contradictions
• Suggesting potentially relevant evidence
• Generating summaries and Executive Summaries
• Organizing information contained within evidence

Evidence Timeline does not use customer evidence to train Evidence Timeline's artificial intelligence models. Development and testing of AI functionality is performed using test data rather than customer evidence.

The current implementation sends evidence content to OpenAI through the Responses API with request storage disabled where that API supports it, and sends audio files separately to OpenAI's audio transcription endpoint. OpenAI may still process or retain API data according to its applicable agreements, policies, and data-handling practices.

Evidence Timeline does not sell your personal information and does not share your personal information with advertisers.

We may disclose information to service providers when reasonably necessary to operate the Service, including providers used for cloud infrastructure, database services, file storage, artificial intelligence processing, payment processing, application hosting, email delivery, analytics, Apple platform services, authentication, and related infrastructure.

Current providers may include Supabase, OpenAI, Stripe, Vercel, Resend, Apple, Google, and other providers necessary to operate the Service. These providers may process information only as necessary to perform services on our behalf and subject to their applicable contractual and privacy obligations.

Evidence Timeline does not directly store complete payment card information. Website payments may be processed by Stripe. Purchases made through Evidence Timeline's Apple applications may be processed through Apple's payment systems if Apple in-app purchases are enabled.

Payment providers may independently collect and process information necessary to complete transactions according to their respective privacy policies. Evidence Timeline may retain transaction records necessary for accounting, tax, fraud prevention, and other legitimate business or legal purposes.

Evidence Timeline restricts access to customer evidence to authorized personnel.

Evidence Timeline personnel do not access the contents of customer evidence except when reasonably necessary to provide customer-requested support, troubleshoot technical problems, maintain the security and functionality of the Service, investigate suspected fraud, abuse, or misuse, protect Evidence Timeline, its users, or others, comply with applicable laws or valid legal requirements, or otherwise operate the Service as described in this Privacy Policy.

Evidence Timeline uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Information transmitted between users and Evidence Timeline is protected using HTTPS/TLS. Supabase-hosted database and storage infrastructure documents encryption of data at rest and in transit. Vercel-hosted application infrastructure also documents encryption at rest and HTTPS/TLS for hosted deployments.

No method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, Evidence Timeline cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and should notify Evidence Timeline if they believe their account has been compromised.

Evidence Timeline retains account and case information as reasonably necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

Users may delete individual evidence and cases through the Service. Users may also delete their account and associated personal information. When an account and its associated data are permanently deleted, Evidence Timeline may retain limited information when reasonably necessary or legally required for purposes such as financial recordkeeping, tax compliance, fraud prevention, security, resolving disputes, and complying with legal obligations.

Information may temporarily remain in backups or disaster-recovery systems until those backups are overwritten or expire according to applicable retention schedules. Evidence Timeline does not publish a specific backup-retention period in the product code.

Users may initiate account deletion through Evidence Timeline's account settings. Permanent account deletion will delete the user's account and associated personal information that Evidence Timeline is not legally required or otherwise permitted to retain.

• Uploaded evidence
• Cases
• Timelines
• AI-generated analyses and summaries
• Transcriptions
• Account information
• Other case-related information

Users may also contact support@evidencetimeline.com regarding deletion or other privacy requests. Evidence Timeline may verify the identity and account ownership of individuals submitting privacy requests before fulfilling the request.

Depending on where you live, you may have certain rights regarding your personal information. Users may contact Evidence Timeline to request access, correction, deletion, account deletion, or information about how personal information is processed.

Requests may be submitted to support@evidencetimeline.com. We may verify account ownership through email or other reasonable verification procedures before processing a request. Additional rights may apply depending on the laws of your jurisdiction.

Evidence uploaded to Evidence Timeline may contain personal information about individuals other than the account holder. Users are responsible for ensuring they have an appropriate lawful basis, right, permission, or authorization to upload and process information concerning other individuals.

Evidence Timeline processes such information at the direction of the account holder for purposes of providing the Service.

Evidence Timeline is not directed to children under the age of 13. Individuals under 13 may not create an Evidence Timeline account.

Evidence uploaded by an adult account holder may contain information concerning minors, including information relevant to family, parenting, or custody matters. If you believe a child under 13 has created an Evidence Timeline account or provided personal information directly to Evidence Timeline, please contact support@evidencetimeline.com.

Evidence Timeline may preserve or disclose information when we reasonably believe disclosure is necessary to comply with applicable law, respond to a valid subpoena, court order, warrant, or other lawful request, protect rights, safety, or property, or detect or prevent fraud, security incidents, or misuse of the Service.

When legally permitted and reasonably practicable, Evidence Timeline may notify an affected user regarding a legal request for their information.

Users retain their rights in the evidence and other content they upload to Evidence Timeline.

By uploading content, users authorize Evidence Timeline and its service providers to host, store, reproduce, process, analyze, transmit, and otherwise use that content only as reasonably necessary to provide, secure, maintain, and improve the Service and as otherwise described in this Privacy Policy and the Terms of Service.

Evidence Timeline does not sell uploaded evidence. Evidence Timeline does not use customer evidence to train Evidence Timeline's AI models.

Evidence Timeline may send transactional and service-related communications including account verification emails, password reset messages, evidence processing notifications, billing and subscription notices, security alerts, important changes to the Service, and other account-related communications.

Because these communications may be necessary to operate an account, users may not be able to opt out of certain transactional communications while maintaining an active account. If Evidence Timeline sends optional marketing communications in the future, users will be provided with an appropriate method to unsubscribe.

Evidence Timeline uses cookies and similar technologies for authentication, security, analytics, and operation of the Service. Supabase Auth uses cookies to maintain web sessions.

The production website loads Google Analytics 4, which can set first-party analytics cookies such as _ga to distinguish users and sessions. The implementation sends sanitized page paths and does not intentionally configure advertising features, remarketing, Google Signals, or advertising cookies.

The codebase does not currently include the Vercel Web Analytics package. Evidence Timeline does not intentionally use advertising trackers. Users can control cookies through browser settings, although disabling required authentication cookies may prevent parts of the Service from working.

If Evidence Timeline is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be transferred as part of that transaction.

Any successor entity receiving personal information will be required to handle that information in accordance with applicable law and the privacy commitments applicable to the information.

Evidence Timeline is operated by Evidence Timeline LLC, a company registered in Washington State, United States. The Service may be accessed by users outside the United States. Information may therefore be processed or stored in the United States or other jurisdictions where Evidence Timeline's service providers operate.

Privacy and data protection laws in those jurisdictions may differ from those in the user's country of residence. Where required by applicable law, Evidence Timeline will implement appropriate safeguards for international transfers of personal information.

Evidence Timeline may update this Privacy Policy periodically to reflect changes to the Service, our information practices, legal requirements, or other operational considerations.

When this Privacy Policy is updated, the revised effective date will be displayed at the top of the policy. If changes materially affect how we handle personal information, we may provide additional notice when required by applicable law.