This policy covers two separate things. Part A describes the Rule26 AI marketing website at rule26ai.com. Part B describes the GhostCite application, which is a separate product with its own account system. Visiting the marketing website does not create a GhostCite account, does not sign you in, and does not upload any document.
Part A: The marketing website (rule26ai.com)
A1. Analytics
The marketing website uses Google Analytics, a service provided by Google, to understand how the site is used. Google Analytics may collect usage information such as the pages you view, the page that referred you, approximate location derived from your IP address, device and browser type, and how long you spend on a page.
Google Analytics may set cookies or use similar technologies in your browser to distinguish repeat visits. You can block or delete these through your browser settings, and browser or extension-level controls that block analytics will prevent this collection. Analytics runs only on the production site at rule26ai.com; staging and preview builds do not send analytics data.
Google’s handling of this information is described in Google’s Privacy Policy and how Google uses information from sites that use its services.
A2. Scheduling a conversation
Buttons such as “Discuss Your Project” open a scheduling page hosted by HubSpot. That page is operated by HubSpot, not by us, and it is subject to HubSpot’s own terms and privacy practices.
If you choose to book a time, HubSpot processes the information you voluntarily submit on that page (typically your name, email address and anything you write in the notes) and shares the booking details with us so we can hold the meeting. HubSpot may also set its own cookies or similar technologies on that page. We do not receive information about you merely because you follow the link; we receive it when you submit the form.
HubSpot’s practices are described in the HubSpot Privacy Policy.
A3. Other third parties
The site loads fonts from Google Fonts and is hosted on Cloudflare, which may set a cookie for security and bot management. Links to GhostCite lead to a separate application on a different subdomain, described in Part B.
A4. What we do not collect on the marketing site
The marketing website has no account system, no login, and no form that submits to us. We do not ask for or store documents, case material or client information through it. Please do not include confidential or privileged information in a scheduling note.
Part B: The GhostCite application
B1. Data Sovereignty & Minimization
GhostCite is built on a "Zero-Retention" philosophy. We do not store, own, or claim any rights to the documents you upload for citation verification. Document text is processed in-memory and is purged immediately upon completion of the extraction process.
B2. Localized Public Citation Cache (Performance Optimization)
To maximize verification speed and minimize latency, GhostCite maintains a localized, encrypted cache of public court record metadata extracted from the Free Law Project (CourtListener). When a standard legal citation is verified (e.g., 329 U.S. 495), its corresponding public record mapping is indexed within this local cache to accelerate future lookups for all users.
This cache is strictly limited to public domain citation strings and official court metadata. It never stores, associates, or indexes user identities, uploaded document text, search history, or the contextual substance of your legal research.
B3. Information We Collect
Account Identity: We collect your first name, last name, and professional email address via Google OAuth or Magic Link.
Encrypted Tokens: If you choose to provide a personal CourtListener API token, it is stored using AES-256 encryption. We never use your personal token for other users or for system-wide queries.
Metadata: We log the timestamp and number of citations processed to manage rate limits and system health.
B4. No AI Training
Pixel Rise Labs LLC does not use your uploaded documents, search history, or personal data to train, tune, or improve any artificial intelligence, machine learning models, or large language models (LLMs).
B5. Data Security & Texas Breach Notification
We employ industry-standard encryption for data at rest and in transit. In accordance with Texas Business & Commerce Code ยง 521.053, in the event of a known data breach involving your personal information, we will notify you as quickly as possible and no later than 60 days after determining a breach occurred.
B6. Your Rights
You may update your profile or permanently delete your account at any time through your Account Settings. Deletion results in the immediate and permanent purging of your name, email, and encrypted API keys from our database.
Contact
For privacy questions about either the marketing website or GhostCite, contact [email protected].