Privacy Policy

This policy applies to:

• The marketing site at titletools.io.
• The TitleTools application at app.titletools.io.
• The TitleTools CLI and any background workers that process documents on behalf of customer firms.

It does not cover third-party services we link to from the site (county recorder portals, underwriter sites, etc.). Those services have their own privacy practices.

From firms (our customers): business name, billing contact, payment information processed through our payments provider, and the configuration settings you choose for your workspace.

From individual users at a firm: name, email address, role within the firm, authentication identifiers if you sign in through a single sign-on (SSO) provider, and a log of actions you take in the application (orders opened, documents reviewed, overrides applied, exports generated).

From the documents you upload: the document files themselves, the text and structured data extracted from them, and any field overrides or notes a user records. Documents you upload are treated as your firm's confidential data — see "How we use it" and "How we protect it" below.

From the marketing site: standard web analytics (page views, referring URL, device class, country) and any information you submit through a contact form. The marketing site uses Google Analytics; the application does not embed third-party analytics on document workspaces.

From your browser: session cookies needed to keep you signed in, and preference cookies for things like theme. We do not use advertising or cross-site tracking cookies.

We use the information above to:

• Operate the platform — process documents, store extracted data, render the workspace, send transactional email.
• Authenticate users, enforce per-firm access controls, and maintain an audit log of who did what.
• Bill the firm and meet our tax and accounting obligations.
• Diagnose errors, monitor reliability, and improve product performance.
• Send service announcements about your account or material changes to this policy.
• Comply with legal obligations and respond to lawful requests for information.

We do not use the documents or extracted data uploaded by one firm to train models, derive aggregate statistics across firms, or build products that benefit other customers, except where the data has been anonymized and aggregated such that it cannot reasonably be associated with a firm or person.

We share information only as needed to operate the service:

• Cloud hosting: data is stored on enterprise cloud infrastructure located in the United States.
• Payments processor: billing details are handled by our payment provider. Limelyte does not retain full payment card numbers.
• AI inference providers: in cloud-AI configurations, document text or images may be sent to a large language model API for processing. These providers operate under data-processing agreements that prohibit training on customer data. A firm may select an on-prem inference configuration if it prefers documents not leave a customer-controlled environment.
• Email infrastructure: a managed transactional-email service is used to send service email.
• Subprocessors: a current list of subprocessors is available on request.

We do not sell personal information. We do not share customer documents or extracted data with other customers, advertisers, or any party that is not directly involved in operating the service.

Documents and extracted data are retained for the lifetime of the firm's account and for a reasonable wind-down period after termination. A firm may request earlier deletion of specific orders, documents, or its entire workspace.

Audit logs and billing records are retained as required for tax, accounting, and compliance purposes, typically seven years.

Marketing-site analytics are retained according to the standard Google Analytics retention period.

If you are an individual whose information we process, you may:

• Ask us what information we have about you.
• Ask us to correct information that is wrong.
• Ask us to delete information, subject to legal-retention requirements.
• Object to specific uses of your information.
• Export your information in a portable format.

For customer-firm data, requests should be coordinated through the firm's account administrator. To exercise rights as an individual, write to privacy@limelyte.com.

Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using managed cloud key management. Access is scoped per firm and gated by role. Production systems require multi-factor authentication for Limelyte personnel and are monitored. A summary of our security posture is available at titletools.io/security.

TitleTools is a business product. We do not knowingly collect information from anyone under 16.

We will update this policy when our practices change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced to account administrators by email.

Limelyte Technology Group, LLC
Spokane, Washington
privacy@limelyte.com