Privacy docket / 001
Privacy by architecture
Your filing files stay local
CSV and Excel parsing, column mapping, validation, corrections, saved filings, and evidence files run inside your browser. RuleTally does not need to receive the file contents.
Device-local storage
Client vaults and evidence are stored in the browser profile on the current device. Clearing browser data removes them. Export important records before changing devices.
Minimal website telemetry
RuleTally counts page views, workspace starts, completed validations, and definitely qualified pilot requests using a first-party endpoint. It stores only the event name, page path, broad acquisition source, and time—never filenames, field values, employee information, narrative text, IP-derived identifiers, or cross-site tracking cookies. No advertising tracker runs inside the filing workspace.
Assisted-pilot requests
When you request the assisted pilot, RuleTally sends the business contact details and message you provide through Resend so we can reply. Do not include employee records, incident narratives, or other sensitive filing data in the request.
Payments
When payment is enabled, Paddle processes checkout, billing, tax, receipt, fraud-prevention, and refund information as merchant of record. RuleTally does not receive or store your full card details. Paddle’s own privacy notice applies to information entered in Paddle Checkout.
Not an OSHA service
RuleTally is independent and is not affiliated with or endorsed by the U.S. Department of Labor or OSHA. Users review and submit through the official ITA.