Legal
Privacy Policy
This policy explains how Linea Score, LLC collects, uses, and protects your information when you use the LineaScore platform.
1 Introduction
Linea Score, LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the LineaScore platform and related services (the "Services").
By using the Services, you agree to the practices described in this Privacy Policy.
2 Information We Collect
We may collect the following categories of information:
- Account Information: name and email address provided at signup.
- Assessment Data: client names, scoring selections, findings, recommendations, and any other content you enter into assessments. This data is yours and we process it only to operate the Services.
- Usage Data: browser type, device information, IP address, pages viewed, timestamps, and feature usage patterns collected via analytics.
- Support Communications: information you provide when contacting us for support or submitting feedback.
- Subscription Information: if you subscribe to LineaScore Pro, we store your Stripe customer ID, Stripe subscription ID, subscription status (for example, trialing, active, past due, or canceled), and related trial and renewal dates.
We never receive your card details. Payments for LineaScore Pro are processed by Stripe. You enter your payment information directly with Stripe, and LineaScore never receives or stores your full card number, security code, or bank account details. See Stripe's privacy policy at
stripe.com/privacy.
3 How Your Data Is Stored
LineaScore operates in two modes and data storage depends on which you use:
- Anonymous / local mode: If you use the platform without creating an account, all assessment data is stored exclusively in your browser's
localStorage. No data is transmitted to our servers. Clearing your browser data or using a different browser will result in loss of locally stored assessments. We strongly recommend using the export feature to back up your work.
- Signed-in / cloud mode: If you create an account and sign in, your assessments are synced to and stored in our cloud database (Supabase, hosted on AWS in the Americas region). This allows access across devices and protects against local data loss.
Assessment data stored in the cloud is protected by row-level security, so you can only access your own data. No other user or administrator can read your assessments through the application.
4 Data Ownership
You retain full ownership of all assessment data, client information, findings, and reports you create within the Services. We process your data only to operate and improve the platform. We do not analyze, share, or use your assessment content for any purpose other than delivering the Services to you.
5 How We Use Information
We use information to:
- Provide, operate, and maintain the Services.
- Manage user accounts and authentication.
- Process subscription payments, manage your plan, and determine which features your account can access.
- Send account-related emails (confirmation, password reset) via our email provider.
- Understand platform usage and improve user experience via analytics.
- Add new users to our CRM for customer relationship management purposes.
- Detect, prevent, and address fraud, abuse, or security issues.
- Comply with legal obligations.
6 Third-Party Service Providers
We work with the following third-party providers to operate the Services. Each has their own privacy practices.
| Provider | Purpose | Data Shared |
|---|
| Supabase | Cloud database and user authentication | Name, email, assessment data |
| Cloudflare | Hosting, CDN, security, bot protection (Turnstile) | IP address, usage data |
| Stripe | Payment processing and subscription billing | Email address, account identifier; payment details you enter directly with Stripe |
| SMTP2GO | Transactional email delivery | Name, email address |
| HubSpot | Customer relationship management | Name and email address (at signup); subscription plan and Stripe customer ID (when your plan changes) |
| Google Analytics | Usage analytics (production only) | Anonymized usage data, IP address |
We do not sell personal information to any third party.
7 Cookies and Tracking
We use the following browser storage and tracking technologies:
- localStorage: Used to store assessment data locally for anonymous users and to cache session information for signed-in users.
- Session cookies: Used by Supabase to maintain your authenticated session.
- Analytics cookies: Google Analytics is used on the production platform to understand usage patterns. It may set cookies to track sessions and page views.
- Turnstile: Cloudflare Turnstile is used on signup and login forms to prevent automated abuse. It runs silently in most cases without displaying a challenge.
You can manage cookies through your browser settings. Disabling cookies may affect authentication and functionality.
8 How We Share Information
We do not sell personal information. We may share information in the following circumstances:
- Service Providers: As listed in Section 6, to operate the platform.
- Legal Requirements: Where required by applicable law, court order, or government authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
9 Data Retention
- Local data: Retained in your browser until you clear it or use the Reset/Delete functions within the app.
- Cloud account data: Retained while your account is active. You may request deletion at any time.
- Analytics data: Retained per Google Analytics default retention settings (26 months).
- CRM data: Contact records in HubSpot are retained for customer relationship purposes and may be deleted upon request.
- Subscription data: Your subscription identifiers and status are retained while your account is active. Stripe retains payment and transaction records as required for tax, accounting, fraud-prevention, and legal purposes, under its own retention policies.
To request deletion of your account and associated data, contact us at privacy_officer@lineascore.com.
10 Data Security
We implement the following security measures:
- All data transmission is encrypted via HTTPS/TLS.
- Cloud-stored assessments are protected by row-level security: each user can only access their own data.
- Authentication is handled by Supabase with industry-standard password hashing and JWT session management.
- Bot protection is enforced on authentication forms via Cloudflare Turnstile.
- API keys and secrets are stored as encrypted environment variables, never in client-side code.
No system can guarantee absolute security. We encourage users to use strong passwords, keep their devices secure, and sign out on shared computers.
11 Data Breach Notification
If a data breach occurs that affects your personal information, we will notify affected users as required by applicable law, including GDPR and applicable U.S. state laws.
12 International Data Transfers
Your information may be processed or stored in the United States or other countries where our service providers operate. By using the Services, you acknowledge that your data may be transferred to and processed in jurisdictions outside your own. We take reasonable steps to ensure appropriate safeguards are in place where required by law.
13 Legal Bases for Processing
Where required by applicable law (including GDPR), we process personal data on the following legal bases:
- Contract performance: To provide the Services you have signed up for.
- Legitimate interests: For analytics, security, and platform improvement.
- Legal obligations: Where required by law.
- Consent: Where you have explicitly provided it (e.g., marketing communications).
14 Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal data.
- Restrict or object to certain processing.
- Request portability of your data in a machine-readable format.
- File a complaint with a supervisory authority.
To exercise any of these rights, contact us at privacy_officer@lineascore.com. We will respond within the timeframe required by applicable law.
15 CCPA / U.S. State Privacy Notice
California and certain other U.S. state residents may have additional privacy rights under applicable state law, including:
- The right to know what categories of personal information we collect and why.
- The right to delete personal information we have collected.
- The right to opt out of the sale of personal information (we do not sell personal information).
- The right to non-discrimination for exercising your privacy rights.
To submit a request, contact privacy_officer@lineascore.com.
16 Children's Privacy
The Services are intended for professional and business use and are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided personal information, we will take steps to delete it promptly.
17 Data Processing Addendum
A Data Processing Addendum (DPA) is available upon request for customers who require one for GDPR or other compliance purposes. Contact privacy_officer@lineascore.com to request one.
18 Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Services after updates constitutes acceptance of the revised policy.
