Privacy Policy

Who we are

Divorceline is operated by Baseline OS LLC (“we”, “us”). This policy explains how we handle personal information when you use the Divorceline website and service. It applies alongside our Terms of Service. We operate more than one product; one account works across them, and this policy describes the practices they share.

Notice at collection

This is our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the CCPA). It lists the personal information we collect, why, and how long we keep it. We do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We use sensitive personal information only to provide the service you ask for, and not to infer anything about you. We give these rights to every California user, whatever our size.

The details are below: what we collect, how we use it, how long we keep it, and your rights.

What we collect

Your answers

The questionnaire collects the facts that go on your court forms: Names, addresses, and contact details for you and your spouse; where you have lived; the dates of your marriage and separation; the names, birth dates, and birthplaces of your minor children and where they have lived; your custody and support requests; property and debts; your court and county; and, only if you choose to answer, any history of abuse or substance abuse in your family. Some of this is about other people. Enter only what you need for your own filing.

Account and profile

If you create an account: your name, email address, and password (stored only as a one-way bcrypt hash, never in readable form). If you sign in with Google, Google gives us your name, email address, profile picture, and the sign-in tokens Google issues. After sign-up, you can save a profile (legal name, phone number, mailing address, and billing address) that we reuse to fill in your forms.

Payment records

When you buy a packet, Stripe collects your payment details on its own checkout page. We receive and keep a record of the purchase: the product, amount, currency, status, date, and Stripe’s reference numbers for the payment and customer. We never receive your full card number.

Technical information

Our servers keep operational logs (errors and warnings) to run and fix the service. They are not meant to contain your answers, but an error message can include details such as an email address. We do not use analytics, advertising, or tracking tools.

Location

If you tap “use my location” to find your nearest court, your browser works out the nearest court on your device. Your location is not sent to us.

How we use it

• To run the questionnaire, save your progress, and fill and deliver your court forms.
• To review your answers for gaps and inconsistencies before you generate your forms.
• To create and secure your account, sign you in, and reset your password.
• To take payment and confirm what you have bought.
• To keep the service working and secure, fix problems, and prevent abuse.
• To comply with the law and respond to lawful requests.

We send only the emails the service needs, such as password reset links. We do not send marketing email. We do not sell your information, use it for advertising, or use your answers to train AI models.

AI processing

When you reach the review step, we send your questionnaire answers to Anthropic, PBC, through its commercial API, so its Claude model can flag possible inconsistencies and omissions. This happens whether or not you are signed in.

Anthropic processes this data to provide the service to us. Under its commercial terms, Anthropic does not use it to train its models, and it keeps it only for a limited period. We do not store the review notes the model returns; they are shown to you and discarded. You decide what to do with every note. See our Terms for the limits of AI review.

Who we share it with

We share personal information only with service providers that help us run the service:

• Amazon Web Services: hosting, our database, backups, and server logs.
• Anthropic: AI review of your answers.
• Stripe: payment processing. We pass your email address and account reference so Stripe can issue a receipt and link the payment to your account.
• Mailgun: sending password reset and other service emails.
• Google: only if you choose to sign in with Google.

These providers may use the information only to provide their services to us or as their own terms and the law allow. We may also disclose information if the law requires it (for example, a valid subpoena or court order), to protect the rights, safety, or property of our users, us, or others, or as part of a merger, sale, or reorganization of our business, in which case this policy will continue to apply to your information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never file or send your forms to a court or to the other party. You do that.

Where it is stored and how we protect it

• Our servers and database run on Amazon Web Services in the United States (Oregon region). The database and its backups are encrypted at rest.
• Your saved answers get a second layer: we encrypt them with AES-256-GCM before they reach the database, so a copy of the database alone does not reveal them. Your profile details (name, phone, and addresses) are protected by the database encryption, not this second layer.
• Connections to the site and to our database are encrypted in transit.
• Passwords are stored only as bcrypt hashes. Password reset links expire after one hour and are stored only as hashes.
• Your filled forms are generated when you ask for them, sent straight to your browser, and not stored on our servers. Save your copy.
• If you are not signed in, your answers are saved only in this browser’s local storage, on your device, and are not encrypted there. Anyone who uses this browser could see them. They are removed from the browser 30 days after you last saved them, when you sign in (they move to your account, or, if your account already has saved answers, the account’s version is kept and the browser copy is discarded), when you use “Forget this device” on your account page, or when you clear your browser’s site data.

No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

Cookies and browser storage

We use only the cookies and browser storage the service needs to work: to keep you signed in, to keep sign-in secure, and to remember your drafts and display settings. There are no advertising, analytics, or third-party tracking cookies.

Because everything below is strictly necessary to provide the service you ask for, we do not ask for consent to it. The cookie notice on our site is there to tell you this, not to ask. If you block these cookies in your browser, signing in will not work.

Stripe’s checkout page is on Stripe’s own website and sets its own cookies there, under Stripe’s privacy policy.

How long we keep it

• Saved answers and your account: until you delete your account, or 3 years after your last activity (signing in or saving answers), whichever comes first. Then we delete them.
• When you delete your account: deleting it from your account page right away removes your account, profile, saved answers for every product, sign-in sessions, and linked sign-in accounts such as Google. If you ask us by email instead, we complete the deletion within 30 days of verifying your request. Either way, deleted data can remain in our encrypted database backups for up to 7 days, until those backups expire.
• Payment records: 7 years, for tax and accounting, then deleted. When your account is deleted, we keep the purchase record (Stripe’s reference numbers, amount, currency, status, and dates) but remove its link to you, and we ask Stripe to delete your customer record, which holds your email address. If Stripe can’t be reached we keep trying daily until it’s done. Stripe may still keep transaction records it is legally required to hold, under Stripe’s privacy policy.
• Server logs: 30 days.
• Password reset links: expire after one hour.
• Answers saved in your browser when signed out: 30 days, on your device only.
• Filled forms and AI review notes: not stored on our servers.
• Data sent to Anthropic: kept by Anthropic only for the limited period its commercial terms allow.

We may keep information longer if the law requires it, for example to comply with a court order.

Your privacy rights and how to use them

The CCPA gives California residents the rights below. We give them to every California user, whether or not the law would require it for a business our size.

• Know and access. Ask what personal information we have collected about you, including the categories, sources, purposes, and who we disclosed it to, and get a copy in a portable, machine-readable format.
• Delete personal information we collected from you, subject to legal exceptions (such as the payment records we must keep).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information. We do not sell or share it. We also treat a Global Privacy Control signal from your browser as a valid request to opt out.
• Limit the use of sensitive personal information. We use it only to provide the service you asked for, as the law allows, so there is no other use to limit.
• Not be discriminated against for using any of these rights. We will not deny you the service or charge you a different price because you used them.

How to use your rights

• Download or delete: sign in and use your account page. Download gives you a copy of what we hold about you across all our products, in a machine-readable file: your account and sign-in methods, profile, saved answers, and purchase records. It never includes passwords or security tokens. Delete takes effect right away.
• Correct: change your answers in the questionnaire, or your name, phone, and addresses with “Edit your details” on your account page. To change the email address on your account, email us.
• By email: for any request, including if you cannot sign in, email help@baselineos.ai from the email address on your account, or tell us that address.

Verifying requests. Requests made while signed in are verified by your sign-in. For email requests, we verify that you control the account’s email address, and may ask for more information if we need it. We use that information only to verify the request.

Authorized agents. Someone you authorize can make a request for you. We may ask for signed proof of the agent’s authority and ask you to confirm your identity with us directly.

Response time. We will confirm an email request within 10 business days and respond within 45 days. If we need more time, up to 45 more days, we will tell you why. Account deletion requests by email are completed within 30 days of verification.

Shine the Light (Civil Code section 1798.83): we do not disclose personal information to third parties for their own direct marketing.

California disclosures (CCPA)

In the past 12 months we have collected the categories below, from the sources shown, and disclosed them for a business purpose only to the service providers shown. We have not sold or shared any of them.

We use each category for the purposes in How we use it, and keep it for the periods in How long we keep it and the notice at collection.

Do Not Track and Global Privacy Control

We do not track you across other websites or over time for advertising, and we do not allow third parties to do so on our site. Because of that, the service works the same whether or not your browser sends a Do Not Track signal. We treat a Global Privacy Control signal as a valid request to opt out of the sale and sharing of your personal information; since we do neither, no further change is needed, and you do not need to do anything else.

Children

The service is for adults preparing their own court papers. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (see our Terms). We do not sell or share anyone’s information, including a child’s. Information about a child that a parent enters for a court filing is handled under this policy like the rest of the parent’s case. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We will review this policy at least once a year. When we change it, we will post the new version here and update the effective date. If a change is material, we will also tell account holders by email, at the address on their account, before it takes effect.

Contact

Baseline OS LLC
Email: help@baselineos.ai
Mail: 4244 1/2 25th St., San Francisco, CA 94114