Privacy Policy
The short version
- We collect what you type into the questionnaire so we can fill your court forms. That includes sensitive details.
- Your saved answers are encrypted in our database. Your finished forms are built on request and not kept on our servers.
- To review your answers, we send them to Anthropic’s AI service. Payments go through Stripe. We do not see your card number.
- We use Google Analytics to see which pages people use. Your case answers never go to Google, and you can turn analytics off. We use no ad trackers, and we do not sell your information.
- You can download your data or delete your account at any time from your account page.
Who we are
Divorceline is operated by Baseline OS LLC (“we”, “us”). This policy explains how we handle personal information when you use the Divorceline website and service. It applies alongside our Terms of Service. We operate more than one product; one account works across them, and this policy describes the practices they share.
At a glance
What we collect, why, and how long we keep it. We do not sell your personal information or share it for advertising. We use sensitive details only to provide the service you ask for.
| Category | Why we collect it | How long we keep it | Sold or shared? |
|---|---|---|---|
| Identifiers (name, email, account ID) | To create your account, sign you in, fill your forms, and send service emails | Until you delete your account, or 3 years after your last activity | No |
| Customer records (address, phone, billing address) | To fill your forms and reuse your details | Until you delete your account, or 3 years after your last activity | No |
| Your case answers, including characteristics of protected classifications | To fill and review your court forms | Until you delete your account, or 3 years after your last activity | No |
| Commercial information (purchases and payment records) | To take payment, confirm what you bought, and meet tax and accounting duties | 7 years, then deleted. If you delete your account, we remove the link between the record and you, and ask Stripe to delete your customer record. | No |
| Usage data (pages visited, device and browser, approximate location from your IP address) | To see how people find and use the site, and improve it (Google Analytics) | 14 months, in Google Analytics | No |
| Internet or network activity (server error logs) | To keep the service working and secure | 30 days | No |
| Sensitive details | Only to provide the service: your login, and case details the forms need | As for your account and answers above | No |
The details are below: what we collect, how we use it, how long we keep it, and your rights.
What we collect
Your answers
The questionnaire collects the facts that go on your court forms: Names, addresses, and contact details for you and your spouse; where you have lived; the dates of your marriage and separation; the names, birth dates, and birthplaces of your minor children and where they have lived; your custody and support requests; property and debts; your court and county; and, only if you choose to answer, any history of abuse or substance abuse in your family. Some of this is about other people. Enter only what you need for your own filing.
Account and profile
If you create an account: your name, email address, and password (stored only as a one-way bcrypt hash, never in readable form). If you sign in with Google, Google gives us your name, email address, profile picture, and the sign-in tokens Google issues. After sign-up, you can save a profile (legal name, phone number, mailing address, and billing address) that we reuse to fill in your forms.
Payment records
When you buy a packet, Stripe collects your payment details on its own checkout page. We receive and keep a record of the purchase: the product, amount, currency, status, date, and Stripe’s reference numbers for the payment and customer. We never receive your full card number.
Technical information
Our servers keep operational logs (errors and warnings) to run and fix the service. They are not meant to contain your answers, but an error message can include details such as an email address. We do not use advertising or cross-site tracking tools.
How you use the site
Unless you turn it off, Google Analytics records the pages you visit on our site (the page address, without anything after a “?”), your device and browser type, and an approximate location worked out from your IP address. It does not record your answers: the questionnaire does not put them in page addresses, and we send Google no answers or form data. Your sign-in, sign-up, account, password reset, email confirmation, and onboarding pages are never reported. See Cookies to turn it off.
Location
If you tap “use my location” to find your nearest court, your browser works out the nearest court on your device. Your location is not sent to us.
How we use it
- To run the questionnaire, save your progress, and fill and deliver your court forms.
- To review your answers for gaps and inconsistencies before you generate your forms.
- To create and secure your account, sign you in, and reset your password.
- To take payment and confirm what you have bought.
- To keep the service working and secure, fix problems, and prevent abuse.
- To understand how people find and use the site, so we can improve it.
- To comply with the law and respond to lawful requests.
We send the emails the service needs, such as email-address confirmation and password reset links. We send news or offers only if you ask for them, and every one has an unsubscribe link. We never use your case answers to decide what to send you. We do not sell your information, use your answers for advertising, or use them to train AI models.
AI processing
When you reach the review step, we send your questionnaire answers to Anthropic, PBC, through its commercial API, so its Claude model can flag possible inconsistencies and omissions. This happens whether or not you are signed in.
Anthropic processes this data to provide the service to us. Under its commercial terms, Anthropic does not use it to train its models, and it keeps it only for a limited period. We do not store the review notes the model returns; they are shown to you and discarded. You decide what to do with every note. See our Terms for the limits of AI review.
Where it is stored and how we protect it
- Our servers and database run on Amazon Web Services in the United States (Oregon region). The database and its backups are encrypted at rest.
- Your saved answers get a second layer: we encrypt them with AES-256-GCM before they reach the database, so a copy of the database alone does not reveal them. Your profile details (name, phone, and addresses) are protected by the database encryption, not this second layer.
- Connections to the site and to our database are encrypted in transit.
- Passwords are stored only as bcrypt hashes. Password reset links expire after one hour, and email confirmation links after 24 hours; both are stored only as hashes.
- Your filled forms are generated when you ask for them, sent straight to your browser, and not stored on our servers. Save your copy.
- If you are not signed in, your answers are saved only in this browser’s local storage, on your device, and are not encrypted there. Anyone who uses this browser could see them. They are removed from the browser 30 days after you last saved them, when you sign in (they move to your account, or, if your account already has saved answers, the account’s version is kept and the browser copy is discarded), when you use “Forget this device” on your account page, or when you clear your browser’s site data.
No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.
Cookies and browser storage
We use the cookies and browser storage the service needs to work: to keep you signed in, to keep sign-in secure, and to remember your drafts and display settings. We also use Google Analytics cookies to see how the site is used. There are no advertising or cross-site tracking cookies.
The necessary cookies are needed to provide the service you ask for, so we do not ask for consent to them. If you block them in your browser, signing in will not work. Google Analytics is on unless you turn it off, here or on the cookie notice. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as turning analytics off.
| Name | What it does | How long |
|---|---|---|
| authjs.session-token | Keeps you signed in. Holds a signed, encrypted reference to your account. | Up to 30 days, or until you sign out |
| authjs.csrf-token, authjs.callback-url | Protect sign-in forms and return you to the right page after sign-in. | Browser session |
| Google sign-in cookies | Short-lived security checks, set only while you sign in with Google. | Minutes |
| dl_gate | Only during private preview: remembers that you entered the preview password. | 30 days |
| divorceline:draft:v1 (local storage) | Saves your answers on this device when you are not signed in. | 30 days after your last save, or until you sign in, use “Forget this device”, or clear site data |
| theme (local storage) | Remembers your light or dark display choice. | Until you change it, use “Forget this device”, or clear site data |
| cookie-notice (local storage) | Remembers that you closed the cookie notice. | Until you use “Forget this device” or clear site data |
| _ga, _ga_<ID> (Google Analytics) | Tell Google Analytics that two visits came from the same browser. Not set if you turn analytics off. | Up to 2 years |
| analytics-consent (local storage) | Remembers whether you turned analytics on or off. | Until you change it, use “Forget this device”, or clear site data |
Stripe’s checkout page is on Stripe’s own website and sets its own cookies there, under Stripe’s privacy policy.
How long we keep it
- Saved answers and your account: until you delete your account, or 3 years after your last activity (signing in or saving answers), whichever comes first. Then we delete them.
- When you delete your account: deleting it from your account page right away removes your account, profile, saved answers for every product, sign-in sessions, and linked sign-in accounts such as Google. If you ask us by email instead, we complete the deletion within 30 days of verifying your request. Either way, deleted data can remain in our encrypted database backups for up to 7 days, until those backups expire. If we ever shut down the database itself, we keep one final encrypted backup as a safety copy and delete it within 30 days.
- Payment records: 7 years, for tax and accounting, then deleted. When your account is deleted, we keep the purchase record (Stripe’s reference numbers, amount, currency, status, and dates) but remove its link to you, and we ask Stripe to delete your customer record, which holds your email address. If Stripe can’t be reached we keep trying daily until it’s done. Stripe may still keep transaction records it is legally required to hold, under Stripe’s privacy policy.
- Server logs: 30 days.
- Google Analytics usage data: 14 months, then deleted by Google.
- Password reset links: expire after one hour.
- Email confirmation links: expire after 24 hours.
- Abuse-prevention counters: per account or network address (IP), deleted after 2 days.
- Answers saved in your browser when signed out: 30 days, on your device only.
- Filled forms and AI review notes: not stored on our servers.
- Data sent to Anthropic: kept by Anthropic only for the limited period its commercial terms allow.
We may keep information longer if the law requires it, for example to comply with a court order.
Your choices: download, correct, delete
- Download: sign in and use your account page. You get a copy of what we hold about you across all our products, in a machine-readable file: your account and sign-in methods, profile, saved answers, and purchase records. It never includes passwords or security tokens.
- Correct: change your answers in the questionnaire, or your name, phone, and addresses with “Edit your details” on your account page. To change the email address on your account, email us.
- Delete: use your account page. Deletion takes effect right away, subject to the payment records we must keep (see How long we keep it).
- By email: for any request, including if you cannot sign in, email help@baselineos.ai from the email address on your account, or tell us that address. We verify that you control that address before acting, and complete deletion requests within 30 days of verifying them.
Shine the Light (Civil Code section 1798.83): we do not disclose personal information to third parties for their own direct marketing.
Do Not Track
We do not track you across other websites or over time for advertising, and we do not allow third parties to do so on our site. If your browser sends a Do Not Track or Global Privacy Control signal, we treat it as turning Google Analytics off.
Children
The service is for adults preparing their own court papers. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (see our Terms). We do not sell or share anyone’s information, including a child’s. Information about a child that a parent enters for a court filing is handled under this policy like the rest of the parent’s case. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will review this policy at least once a year. When we change it, we will post the new version here and update the effective date. If a change is material, we will also tell account holders by email, at the address on their account, at least 30 days before it takes effect.
Contact
Baseline OS LLC
Email: help@baselineos.ai
Mail: 4244 1/2 25th St., San Francisco, CA 94114