Privacy Notice

Effective September 8, 2026 · Version 2026-09-08

Castleground LLC operates Redline Studio. Contact contact@castleground.co with privacy questions or requests. This notice describes the application as implemented; the hosting operator must keep it accurate if infrastructure or features change.

Desktop and website processing differ

In the desktop application, document comparison and OCR run on your computer. The application does not upload documents to Castleground for comparison. Temporary input copies are deleted after a job finishes. Results and diagnostic information remain in your local RedlineStudio jobs folder until you delete them. Your operating system, security software, backups and any services you choose to share files with may process local files separately.

On the public website, selecting files does not upload them immediately. Clicking Compare after accepting the Terms sends the selected documents, filenames and comparison settings to the comparison server. Do not use the public website for documents you are not authorized to upload, or documents requiring a special regulated-data or confidentiality agreement that has not been signed.

Information processed by the website

The comparison server receives document contents, filenames, requested author and output filenames, comparison settings, generated outputs and limited job status information. It records the terms version accepted and the acceptance time with the temporary job record. It uses a random session token to limit access to that session’s results. The application receives the connecting network address for network operations and uses a temporary keyed hash for rate limiting. Hosting, content-delivery and security providers may separately process IP addresses, request times, browser headers, error records and other ordinary infrastructure logs.

The application does not request an account, payment details or a mailing address. There are no advertising trackers, analytics scripts or marketing cookies in the shipped application. The session token is held in page memory; reloading or closing the page may make results inaccessible. A hosting provider may use essential security mechanisms outside the application. This notice must be updated before adding analytics, advertising or additional collection.

Purposes and sharing

Information is processed to perform the comparison you request, render previews, deliver downloads, enforce agreed terms, limit abuse, diagnose a specific failure and comply with applicable law. Where a lawful basis is required, the relevant basis may be providing a requested service or taking steps at your request, legitimate interests in proportionate security and abuse prevention, legal obligations, or consent when required. Your mandatory rights are not conditioned on accepting a blanket waiver.

Document contents are not used by this application to train AI models, sold, rented, used for advertising or made public. OCR runs on the comparison server using local models. The operator and its infrastructure providers necessarily process data to provide the online service. Information may also be disclosed if legally required, to respond to a specific security or abuse incident, protect lawful rights, or in a business transfer subject to applicable privacy law. This does not authorize indiscriminate publication or unrelated use of your documents.

Retention and deletion

For the shipped public configuration, input copies are removed after processing completes or fails. Generated files and job records expire 60 minutes after completion; routine cleanup runs approximately every 30 seconds. A restarted server also removes expired job folders. Downloaded files on your device are not deleted by the server. If you close the page, the server’s scheduled deletion still applies even if you can no longer access the result.

Public processing logs and the upload configuration are removed after the job; temporary rate-limiting records last approximately one hour, and inactive session records expire after about 75 minutes. Unfinished jobs are subject to a ten-minute processing limit. A crash or shutdown may delay filesystem cleanup until restart. The provided container configuration uses temporary storage and does not configure document backups. Operators must not enable persistent document backups without updating this notice and implementing an appropriate retention policy.

Application and HTTPS-proxy operational container logs rotate at 10 MB with up to three files retained per container; these logs have a size limit rather than a fixed age limit. Per-request proxy access logging is not enabled. Oracle, Netlify and Wix may retain their own infrastructure, security and account records under their applicable policies; the application’s 60-minute document-expiration policy does not govern those provider records. A specific legal obligation or properly documented security incident may require preservation beyond the routine period; data must not be kept longer than reasonably necessary for that purpose. These are operational deletion policies, not a promise that forensic recovery, infrastructure failures or legally required retention are impossible.

Security and your responsibilities

The public deployment should use HTTPS, session-scoped download authorization, random job identifiers, upload limits, resource limits, temporary storage and access controls. The deployment package supports those measures, but no service can guarantee confidentiality, availability or freedom from vulnerabilities. Do not share your session token. Protect downloaded documents and close a shared browser session when finished. The Service is not an encrypted document vault, backup service or a substitute for your organization’s approved handling procedures.

Location and international users

Document comparison processing takes place on Oracle Cloud Infrastructure in US East (Ashburn), Virginia, United States. The website interface is hosted by Netlify; Wix manages the domain DNS. Document uploads go directly from your browser to the comparison API over HTTPS. Your information may be processed outside your country, where legal protections may differ. The operator is responsible for any required transfer mechanism or provider agreement. Choosing New York law in the Terms does not itself supply a valid international data-transfer mechanism or displace mandatory privacy rights.

Your choices and rights

Use the desktop application if local processing is required. You can stop before clicking Compare, avoid uploading unnecessary personal information, and download or delete your own local copies. Where applicable law gives you rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent or complain to a supervisory authority, contact contact@castleground.co. We may need proportionate information to verify a request and identify a still-existing job. Because jobs are temporary and do not require an account, we may be unable to identify a document once its session is lost or it has been deleted. We will not ask you to resubmit sensitive document contents merely to identify an expired job.

Children and changes

The Service is intended for adults 18 and older and is not directed to children. Do not submit children’s personal information unless you have authority and a lawful reason to do so. Contact us if you believe information was submitted in violation of applicable children’s privacy law.

We will post material changes to this notice with an updated effective date and provide additional notice or consent mechanisms where required. Questions and privacy requests: Castleground LLC, contact@castleground.co.