Privacy Policy

Effective: September 17, 2026   ·   Last updated: October 2, 2026

Deadline Shield is operated by Deadline Shield LLC (“Deadline Shield,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, process, disclose, store, and protect personal information when you use Deadline Shield, including deadlineshield.live and related applications and services.

1. Information We Collect

Account information

We may collect your email address, account identifier, authentication information, organization or business name, preferences, subscription information, and account activity. Passwords are cryptographically hashed and salted rather than stored as plaintext.

Uploaded documents

Documents you upload may contain names, addresses, dates, business information, contracts, licenses, permits, insurance information, financial information, reference numbers, legal information, health-related information, government correspondence, and other information contained in the file. Because we do not control what users upload, documents may contain sensitive personal information.

ChatGPT and connected integrations

If you connect Deadline Shield to ChatGPT or another supported integration and explicitly authorize a document for Deadline Shield analysis, the authorized file and the minimum account/workspace information needed to perform that request are transmitted to Deadline Shield. Deadline Shield then processes the document under this Privacy Policy using the same private storage, analysis, retention, and workspace-access controls that apply to documents submitted through deadlineshield.live. Deadline Shield does not receive your entire ChatGPT conversation merely because the connection is installed.

AI analysis and deadline information

When you request analysis, we may generate or store information such as document title, category, proposed or calculated deadline, notes, issuer, reference number, confidence or verification status, verification reason, source excerpts or source links, machine-readable converted/OCR text, analysis-job status, deadline status, reminder history, and notification information.

Communications

If you contact us, we may retain your email address, messages, support requests, feedback, and information you voluntarily provide.

Sales inquiries and Sales Partner applications

If you request information about Deadline Shield Operations or apply to the Sales Partner Program, we may collect information you submit such as your name, work email, company, phone number, team size, industry, location, sales or business experience, and notes. If an Operations inquiry is submitted through a Sales Partner referral link, the referral code may be stored with that inquiry so we can attribute the opportunity to the referring partner.

Referral codes used for this direct attribution are not used for cross-site behavioral advertising and are not added to our privacy-minimized product analytics records.

Payment information

If you purchase a subscription, Stripe or another disclosed payment provider may process your payment. We may receive subscription status, plan, billing period, transaction identifier, payment confirmation, billing contact information, and limited payment-method information. We do not intend to directly store complete card numbers when a payment provider handles them.

Technical information

We and our infrastructure providers may process IP address, browser and device type, operating system, timestamps, request information, application version, diagnostics, security logs, and error information.

Optional marketing-page analytics

When this optional feature is enabled, only after you select “Allow analytics” on an eligible standalone public marketing page, we use HeyCatch to count visits to a fixed list of public pages. The homepage, signed-in application, account and authorization pages, document scan, tools, sales forms, and private pages are excluded. Refusing does not restrict the Service. Global Privacy Control and Do Not Track keep this optional collection off.

The event contains only the public page path and canonical address without query strings or fragments, temporary random browser-session and event identifiers, event time, and SDK/project installation metadata. Network delivery also exposes your IP address and browser connection information to HeyCatch and its infrastructure. This is pseudonymous usage data, not fully anonymous data. We do not send account identifiers, names, email addresses, subscription/payment information, click text, element attributes, form values, document contents, or deadline details. Click autocapture, session replay, and custom product events are not enabled.

HeyCatch processes these events on our behalf under its Data Processing Addendum. Its Privacy Policy describes US and international processing, including PostHog infrastructure and AI providers through OpenRouter for analytics features. HeyCatch states that private inputs are not used to train foundation models; providers may retain prompts temporarily for abuse prevention. Its policy provides for deletion or irreversible anonymization of SDK data within two months after subscription end unless reactivated, earlier deletion is requested, or retention is required.

Use “Analytics choices” on an eligible public page to reject or withdraw consent. We store your consent choice and its date for up to 180 days. HeyCatch also stores an opt-in/out preference in local storage; this preference is separate from analytics identifiers. Analytics identifiers are kept in memory rather than persistent browser storage. Withdrawal stops new collection and reloads the page to unload the SDK; requests already sent cannot be recalled. Contact support@deadlineshield.live for an eligible deletion request.

First-party product analytics

We record privacy-minimized product analytics so we can understand how Deadline Shield is used and whether it is working. These records are stored in our own Cloudflare D1 database in a table named product_analytics_events. These first-party records are separate from the optional marketing-page analytics described below. We do not sell or share these records for advertising.

Each record holds only: the type of event that happened (for example an account was created, a document analysis completed, a protected date was saved, a subscription started or ended, a payment succeeded or failed, or an AI finding was confirmed, corrected, or ignored), an internal account or workspace identifier, a subscription plan name, a payment or subscription amount, and the time it happened.

These records deliberately exclude email addresses, names, business names, document filenames, document text, deadline titles, notes, reference numbers, IP addresses, user agents, and payment-provider identifiers. Internal administrator and testing accounts are excluded from them. We use these records only to operate, measure, and improve Deadline Shield.

2. Cloudflare Infrastructure and AI

Deadline Shield is built primarily on Cloudflare infrastructure. At the time this Policy was last updated, we use:

• Cloudflare Workers for application and server functionality;
• Cloudflare D1 for account, deadline, notification, subscription-related, and other structured application data;
• Cloudflare R2 for uploaded-document storage; and
• Cloudflare Workers AI for AI-assisted document analysis; and
• Cloudflare document and image-processing capabilities for file conversion, scanned-page recovery, image transforms, and OCR/vision-style processing used by supported analysis flows.

When you request document analysis, Deadline Shield may retrieve the uploaded document from R2, convert it into machine-readable content, recover text from scanned or image-based pages, divide large content into bounded analysis sections, and provide relevant content to one or more AI models made available through Cloudflare Workers AI.

Deadline Shield may combine model output with deterministic date calculations and independent/source-backed verification. The Service may propose information such as title, category, due date, notes, issuer, reference number, source evidence, confidence, verification status, and an explanation. Results should be reviewed against the original document.

3. AI Training and Customer Content

We do not intentionally use your uploaded documents to train our own AI models.

Cloudflare's published Workers AI data-usage terms currently state that Customer Content submitted to Workers AI, including inputs and outputs, is not used to train Workers AI models or improve Cloudflare or third-party services without explicit consent. Cloudflare may make third-party models available through Workers AI.

The particular AI model used by Deadline Shield may change as the Service develops. Our handling of your information remains subject to this Privacy Policy and applicable law.

4. How We Use Information

We use personal information as reasonably necessary to create and operate accounts, authenticate users, create business workspaces, store documents, convert and analyze documents at your request, perform OCR/vision processing on scanned material, calculate source-backed relative dates, verify findings, preserve resumable analysis progress, create and manage deadlines, provide notifications and reminder emails, manage subscriptions and payments, respond to Operations sales inquiries, administer Sales Partner applications and direct referral attribution, provide support, troubleshoot problems, maintain reliability, run privacy-safe security and reliability diagnostics, prevent fraud and abuse, secure our systems, comply with law, and enforce our Terms.

We do not use uploaded documents for unrelated advertising purposes.

5. Where Information Is Stored and Processed

Uploaded documents are currently stored using Cloudflare R2. Structured application information may be stored in Cloudflare D1. Information may be processed through Cloudflare's infrastructure when providing the Service.

6. Email Reminders

Deadline Shield currently uses Resend to assist with transactional email delivery. Information provided to Resend may include your email address, email subject, deadline title, deadline date, and message content needed to deliver the reminder. Resend may process technical delivery information. We do not provide your uploaded document itself to Resend merely to deliver a deadline reminder.

7. Payments

Deadline Shield may use Stripe to process paid subscriptions. Payment and billing information may be provided directly to Stripe. We generally receive the transaction and subscription information needed to determine account status without storing your complete payment-card number.

8. How We Share Personal Information

We may disclose information to service providers that help us operate the Service, including Cloudflare for infrastructure, database, storage, AI, network, and security services; Resend for email delivery; Stripe for payments; and other professional or technical providers reasonably necessary for security, support, accounting, legal compliance, or product operation.

We may also disclose information when reasonably necessary to comply with law or valid legal process, investigate fraud, protect the Service or its users, prevent abuse, or protect rights or safety. Where legally permitted and appropriate, we may attempt to provide notice before producing user information in response to compulsory legal process.

If Deadline Shield LLC is involved in a merger, acquisition, financing, restructuring, bankruptcy, or asset sale, information may be transferred as part of that transaction subject to applicable law.

9. Ownership of Uploaded Documents

You retain ownership of documents you upload. Uploading a document does not transfer ownership to Deadline Shield LLC. We process documents for purposes reasonably necessary to provide, secure, support, and operate Deadline Shield.

10. Sensitive Information

Uploaded documents may contain sensitive information such as financial, health, government-identification, legal, religious, citizenship, insurance, or other private information. Only upload information reasonably necessary for the feature you are using.

Do not upload passwords, authentication codes, cryptocurrency seed phrases, private cryptographic keys, or similar authentication secrets. Where applicable law requires affirmative consent before processing certain sensitive information, we will seek that consent as required.

11. Data Retention

We retain information only as long as reasonably necessary to provide Deadline Shield, maintain accounts, store documents you choose to keep, maintain active deadlines, send reminders, fulfill subscriptions, maintain security, prevent fraud, resolve disputes, comply with legal obligations, and establish or defend legal claims.

For no-account free scans, the temporary upload session normally expires within about one hour while uploading and within about 30 minutes after a preview is produced, unless you create or sign in to an account and claim the document into your private workspace. Free-scan findings are returned to your browser for the preview and are not stored as permanent protected items unless you later use the signed-in workflow.

For new document uploads, Deadline Shield currently defaults to deleting the original uploaded file after 30 days. You may choose a different available retention option, including deletion after analysis, after 7 days, after 1 year, or keeping the original until you delete it. Changing or deleting an original does not necessarily delete deadline information you already reviewed and approved.

Documents explicitly sent to Deadline Shield through the ChatGPT integration currently default to deletion of the original file after analysis completes. Analysis findings, verification information, and source excerpts may remain for review or may be associated with protected dates you explicitly confirm.

You may delete an individual original file at any time or use the account controls to delete all stored originals. Unreviewed uploads may be removed completely when originals are purged. When an original is deleted through Deadline Shield, the corresponding object is removed from our active R2 document storage.

When you ask Deadline Shield to analyze a large document, the Service may temporarily divide converted or OCR-recovered document text into bounded analysis sections so processing can resume if interrupted. Temporary section text is cleared as sections finish and temporary analysis jobs expire automatically. Extracted findings, verification metadata, and source evidence may remain available for review for a limited period and may be retained when you approve them as deadline information. In-product privacy controls may allow you to delete AI analysis history and saved source evidence while keeping approved reminders.

Deleting information from active systems may not immediately remove copies from temporary backups, logs, payment records, fraud-prevention records, or disaster-recovery systems where retention is legally required or technically necessary. Such copies may remain until those systems are overwritten or their applicable retention period ends.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. Current controls include HTTPS, authenticated server-side sessions, salted and cryptographically hashed passwords, optional authenticator-app multi-factor authentication, authentication rate limits, workspace-scoped document and source-evidence access checks, restricted server-side access to stored documents, private object storage, upload validation, document-retention controls, private/no-store API caching, and browser security headers.

Production deployments are also subjected to automated security/isolation testing with disposable test accounts and synthetic test documents. Test-only diagnostics are restricted to a locked deployment-test origin and are designed to expose structural status information rather than document contents. We do not intentionally place uploaded document text or document contents into ordinary application logs.

Deadline Shield does not claim to be zero-knowledge or end-to-end encrypted because the Service must be able to read a document in order to analyze it. No internet-connected system can guarantee absolute security. You are responsible for protecting your credentials and devices. Additional implementation details are available in our Security Center.

13. Your Privacy Choices and Rights

Subject to applicable law, you may ask us to confirm whether we process information about you, provide access to eligible information, correct inaccurate information, delete eligible information, provide a portable copy of eligible information, or explain certain processing.

Deadline Shield provides in-product controls for deleting stored original documents and permanently deleting an account. Permanent account deletion requires password verification. If you have a subscription, cancel it first in My Account → Billing & receipts before deleting your entire account. Account deletion is not a substitute for canceling a paid plan. If you are the sole member of a workspace with an active Deadline Shield subscription, the Service may also attempt to cancel that subscription before completing deletion; if cancellation cannot be completed safely, account deletion is stopped.

The Security & Privacy area may also display a privacy inventory summarizing stored originals, scheduled deletions, AI analysis jobs, findings awaiting review, and source-evidence records. You may delete AI analysis history and saved source evidence while keeping reminders you already approved. These destructive bulk-data actions require password re-verification.

Some information may be retained where required by law, needed to complete billing or tax records, prevent fraud, resolve disputes, or establish or defend legal claims. Payment processors may also retain records under their own legal obligations and policies.

You may also contact us for an eligible privacy request. We may need to verify your identity before completing a request. We will not unlawfully discriminate against you for exercising applicable privacy rights.

Privacy requests may be sent to support@deadlineshield.live.

14. Colorado Privacy Rights

Colorado residents may have rights under the Colorado Privacy Act where that law applies, including rights to access, correct, delete, and obtain portable copies of personal data and to opt out of qualifying sales, targeted advertising, and certain profiling.

Deadline Shield does not currently sell personal information or use personal information for targeted behavioral advertising. Where legally required, we will honor recognized Universal Opt-Out Mechanisms.

15. California Privacy Rights

California residents may have additional rights where applicable, including rights to know, access, delete, correct, receive information about certain disclosures, opt out of certain sales or sharing, and exercise applicable rights without unlawful discrimination.

Deadline Shield does not currently sell personal information or share personal information for cross-context behavioral advertising.

16. Cookies and Similar Technologies

Deadline Shield may use cookies, local storage, or similar technologies for authentication, user sessions, security, fraud prevention, settings, application functionality, and basic performance measurement. We do not currently use personal information for third-party behavioral advertising.

17. Communications

We may send transactional communications necessary to operate the Service, including account, security, subscription, billing, and deadline-reminder messages. If marketing email is introduced, legally required opt-out functionality will be provided. Opting out of marketing does not necessarily prevent requested reminders or essential account and security messages.

18. Children

Deadline Shield is intended for people 18 years of age or older. We do not knowingly solicit personal information directly from children under 13. If we learn that personal information was collected from a child in circumstances requiring parental authorization and such authorization was not obtained, we will take reasonable steps to delete it.

19. International Processing

Deadline Shield is operated from the United States. Cloudflare and other providers may process information using infrastructure located in the United States or other jurisdictions. Users outside the United States may have additional rights under applicable law.

20. Third-Party Websites

Deadline Shield may link to third-party sites. Those sites operate independently and are governed by their own terms and privacy practices.

21. Changes to This Privacy Policy

We may update this Privacy Policy because of product changes, service-provider changes, security developments, legal requirements, or changes in our practices. The “Last updated” date identifies the current version. Where legally required, we will provide additional notice before material changes take effect.

22. Contact Us

For privacy questions, requests, complaints, or other concerns: