Privacy and data
Last updated: October 30, 2026. Clearline Lab is an experimental product project. Contact the operator about privacy or pilot requests at vamvaay@gmail.com.
Your documents stay in the browser
LineAudit reads selected CSV files and pasted text in your browser. The application does not upload document contents, filenames, SKUs, descriptions, prices, quantities, comparison results or report contents to its APIs, Supabase, analytics services or external AI services. QuoteClarity also calculates its comparison locally. There is no AI/OCR service or cloud document storage in these demos.
Document text and results exist in the page's memory and displayed interface. The application does not save them to local storage, session storage, IndexedDB or a service-worker cache. Your browser may retain page state in history, session restoration or device-level storage. Reset example replaces the displayed documents and results; it does not promise secure erasure from your device.
Downloads and printing
CSV reports are generated locally and may contain confidential SKUs and financial results from your files. Downloads remain wherever you save them. Print / Save PDF uses your browser and operating system; a selected network printer or cloud print destination may send the report elsewhere under your control. Protect downloaded files, shared devices, screenshots and printouts accordingly. Browser extensions and software on your device may also have access to page content.
Optional pilot requests
If you submit the pilot form and collection is enabled, the application sends your email, selected product, purchasing role or situation, selected interest, consent and a short traffic-source label to its own API. A server-side consent timestamp is stored with the request. The form is not a purchase, payment or document upload. Do not place confidential purchasing documents in the pilot form, email address or campaign links.
Product activity and browser storage
The page may send six product activity types to its own API: page opened, comparison requested, file loaded, CSV report downloaded, video played and pilot request submitted. Each activity payload contains only product, event type and a short source label, never document contents, filenames or comparison statistics. Whether these events are stored depends on the deployment's collection settings.
The source label comes from utm_source/utm_campaign, the referring website's domain, or a previous label in this tab. Only the label is placed in session storage for attribution; no document text is stored there. Avoid sensitive or identifying information in campaign parameters. These labels are not guaranteed to be anonymous. The application does not set tracking cookies or create a visitor fingerprint.
Hosting, database and abuse prevention
The project uses Vercel for hosting and, when collection is enabled, Supabase for pilot requests and product activity. Visiting the site and using its APIs exposes ordinary technical information such as your IP address, request URL and user-agent to hosting infrastructure. Provider logs and backups are separate from the application's database tables. The database region, infrastructure log retention and backup settings have not been verified for the current deployment; this notice does not guarantee a particular country or backup deletion time.
The prepared API abuse-prevention design derives a daily keyed digest from the client IP for each endpoint category. It does not put the raw IP in application database rows. The digest, time window and request count are pseudonymous security metadata, not anonymous data. This protection takes effect only after its reviewed database and server configuration are installed. No external CAPTCHA or external analytics script is used.
Retention and your choices
The intended retention periods are 180 days for pilot requests, 90 days for product activity and 24 hours for rate-limit counters. Cleanup SQL is provided, but its installation and successful scheduling must be verified before collection is enabled. Scheduled deletion can be delayed by outages; backups and hosting logs may follow different retention. Downloaded reports and browser/device copies are outside this cleanup.
Ask for removal of your pilot request, withdraw permission for future emails, or ask about access and correction at vamvaay@gmail.com. Activity records without an email may not be attributable to a particular person. We do not sell contact information or use it for unrelated marketing.
Limits of this prototype
Outputs require human review and are not engineering, accounting or legal advice. This notice makes no claim of certification, regulatory compliance or protection against compromised hosting, browsers or devices. Do not use the prototype for documents that your organisation prohibits processing in this environment.