Privacy Policy

Prahaas Nukala (“DataLien,” “we,” “us”) operates DataLien, a private archive and research tool for title professionals. This Privacy Policy explains how we handle personal information when people sign in to and use DataLien, are invited to it, or contact us.

Two roles. For account and activity information, we decide how the information is used. For the documents organizations upload, which name buyers, sellers, borrowers, lenders, trustees and others, we act as a service provider to the organization that uploaded them: we process that information on the organization’s behalf, under our Terms of Service. That organization is responsible for its own privacy notices and legal obligations, such as those under the Gramm-Leach-Bliley Act.

This policy doesn’t cover services you use alongside DataLien, such as your Google account or your web browser, which have their own policies.

Account information

When you sign in, we receive your email address. If you sign in with Google, we also receive the name and profile picture link on your Google account. Our sign-in provider keeps the identifiers and records needed to sign you in. DataLien has no passwords of its own.

Organization and role

Your organization, your agency, and your role (administrator or agent). For an invitation: the invited email address, agency and role, any personal note, who added it and when, and when it was accepted.

What you add

The files you upload and their names, including the folder paths of files you upload as a folder; corrections you make to extracted details; prior-policy reviews you save or export; and the words you search for and the questions you ask Lien Agent.

Information inside documents

Title documents contain personal information about people who may never use DataLien, such as names, addresses, signatures, marital status, loan and account numbers, and sometimes Social Security numbers or other financial details. DataLien reads each document in full and indexes information such as parties’ names and roles, property addresses and parcel numbers, recording references, policy and loan numbers, dates and amounts.

Activity records

For security and accountability, DataLien keeps an access log of archive activity: searches and Lien Agent questions, including their text; records and documents viewed, opened or downloaded; uploads; sharing changes; administrative changes; and denied requests. Each entry records the account, its email address and organization, the action, and when it happened. The log doesn’t contain document page text, Lien Agent’s answers or earlier messages in a conversation, and it doesn’t record IP addresses.

Technical information

Our hosting and sign-in providers automatically log technical information, such as IP addresses, browser type and the time of each request, to deliver DataLien and protect it from abuse.

Information stored in your browser

DataLien keeps some information in your browser’s local storage: your sign-in session, your Lien Agent conversations and history, and your choice of AI model. Conversations are kept only in that browser, not on our servers, until you remove them from History or clear your browser’s data; the access log keeps the text of each question as described above. While you sign in, DataLien briefly remembers the page to return you to. DataLien doesn’t use advertising cookies. When product analytics is enabled, a service provider receives opaque account and organization identifiers, your role, the features you use, action outcomes and active time on pages. It does not receive document contents, searches, questions, answers, names or emails, and we do not record your screen. The analytics identifier stays in memory; your tracking preference is kept in local storage for your account in this browser.

Dictation

If you dictate a question, your browser asks for microphone access, and its speech recognition turns your speech into text. Depending on your browser, the audio is processed on your device or sent to the browser maker’s speech service, under that company’s terms. While you speak, DataLien reads the microphone’s sound level in your browser to draw a waveform; it doesn’t record that audio or send it anywhere. DataLien receives only the resulting text and never receives or stores audio.

When you contact us

Your message and the contact details you give us.

We use personal information to:

• provide DataLien: sign you in, apply your organization’s membership and sharing rules, store and read documents, index and search them, show sources, and produce summaries and Lien Agent’s answers;
• keep DataLien secure: enforce access rules and rate and usage limits, keep the access log, and detect, investigate and prevent misuse and security incidents;
• communicate with you: send sign-in codes, invitations when invitation email is turned on, and notices about DataLien, our Terms and this policy;
• support DataLien: fix problems, such as a document that failed to process; and
• comply with law, enforce our Terms, and protect the rights and safety of our users, the people named in documents, and others.

Product analytics. We use limited usage measurements to understand which features help people and where workflows fail. You can turn it off under Account settings → Product analytics. Turning it off does not change the security access log or organization Usage counts.

What we don’t do. We don’t sell personal information, share it for cross-context behavioral advertising, or use it for advertising of any kind. DataLien itself doesn’t use documents, questions or answers to train AI models, and doesn’t send marketing email. DataLien doesn’t make decisions about people that have legal or similarly significant effects.

Within your organization. Members see the documents shared with the organization, including the personal information in them, and who uploaded each one. A private document is visible only to the person who uploaded it. Administrators see their organization’s members and invitations.

DataLien’s platform administrators. A small number of DataLien personnel can see every organization’s membership and the access log, including search and question text, to run and secure DataLien. Pending: when they may view the documents themselves

Service providers. We use these kinds of outside companies to run DataLien:

Some of them use their own subcontractors. Each handles information under its own terms with us. Those terms govern how long it keeps data, and some allow the provider to use data it receives to improve its own services unless a setting or plan prevents it. Pending: what we commit about provider training and retention, once each provider’s settings are confirmed, and whether an organization can get the names of our providers privately

Signing in with Google. If you choose Google, Google confirms your identity and shares your name, email address and profile picture link with DataLien. Google’s privacy policy covers what Google does.

Legal requirements and safety. We may disclose information when we believe in good faith that the law requires it, such as to answer a subpoena or court order, or that it’s necessary to protect the rights, property or safety of DataLien, our users or others. Where the law allows, we’ll tell the affected organization.

Business transfers. If we’re involved in a merger, acquisition, financing or sale of all or part of our business, information may transfer as part of that transaction, subject to this policy.

We don’t otherwise share personal information unless your organization directs us to.

How DataLien works today:

• Documents and everything derived from them stay in your organization’s archive until deleted for good by the uploader, or an administrator for a shared upload. Remove from archive hides the document but keeps it available to restore. Delete for good removes its archive entry and derived records, and requests erasure of the stored original; failed erasures are retried. An organization that holds documents can be suspended but not deleted. A person’s uploads stay with the organization after the person is removed.
• Account and membership information. Removing you from your organization deletes your membership (organization, agency and role). Your sign-in account (your email address and, if you use Google, your name and profile picture link) and your accepted invitation remain, and your uploads, corrections and access-log entries stay linked to your name or email address. Pending: when a removed person’s sign-in account and invitation are deleted
• Search and question text in the access log is deleted after 90 days: searches and Lien Agent questions older than that are removed, and search text is removed from other access-log entries.
• Other access-log and administration records, such as who opened or downloaded a document and changes to memberships or sharing, are kept with no fixed deletion date, including after the person or organization is removed.
• Lien Agent conversations stay in your browser until you remove them or clear your browser’s data.
• Independent recovery copies. Available independent recovery copies of original files and snapshots of document records are kept for 30 days after deletion for good. An hourly process then attempts to erase those copies and retries failures.
• Backup inventory metadata, including document and organization identifiers, checksums, file sizes and copy dates, is kept separately from copies of originals and document records. Pending: how long this metadata is kept
• Database backups keep copies of deleted information until the backups expire.
• Product analytics is retained separately by our analytics provider. Turning tracking off stops new events; it does not delete earlier events. Contact us to request deletion. The archive’s search-history deletion does not delete analytics events.

Still to be decided: Pending: whether removed documents expire automatically, and when a departed organization’s data is deleted Pending: how long database backups, backup inventory metadata and access records are kept

Deleting information from DataLien won’t immediately erase every copy: copies can remain in backups until they expire, and service providers keep data as their own terms allow.

DataLien’s safeguards include database rules that check organization membership and sharing before returning any document, page, search result or AI answer; private storage for original files, which DataLien serves only after checking access; encryption in transit, and at rest in our database and file storage; an append-only access log; and rate and usage limits. DataLien is designed to treat text inside documents as information, never as instructions to its AI. No system is perfectly secure. If a security incident affects your organization’s information, we’ll notify it as described in section 9 of our Terms of Service.

Your account. DataLien’s account menu shows your name, email address, organization and role. You can change your name and firm under Account settings. Ask your organization’s administrator or us to correct the rest.

Your uploads. Every upload is shared with your organization, and a shared document can’t be made private again. A document uploaded privately before this rule stays private until you share it. If DataLien misread a detail in a document you uploaded, you can fix it from the document’s Edit menu. An administrator can also fix a shared upload. The uploader, or an administrator for a shared upload, can remove, restore, replace or delete a document for good. Removed documents must be restored before they can be opened.

Privacy rights under state law. Depending on where you live, you may have rights to know what personal information we hold about you and get a copy, to correct it, to delete it, and to opt out of its sale, its sharing for targeted advertising, and profiling. We don’t sell personal information, share it for targeted advertising or use it for profiling. Some state privacy laws don’t apply to information covered by the Gramm-Leach-Bliley Act or to people acting in a business role; where a law applies to your request, we’ll honor it.

Making a request. Email prahaas@cleartitlelien.com. We’ll confirm the request comes from you, usually through your email address, and respond within the time the law requires. You may use an authorized agent, whom we may ask to show your permission. If we decline your request, you may appeal by replying to our decision. We won’t treat you differently for exercising your rights.

Browser signals. We don’t sell or share personal information or track you across other sites. Global Privacy Control and Do Not Track turn optional product analytics off. They do not disable sign-in, archive access or the security log.

If you bought, sold, financed or otherwise held an interest in real property, your information may appear in title documents that a title professional uploaded to DataLien. Many of these documents, such as deeds and deeds of trust, are recorded in public land records. Others, such as title policies and closing documents, are kept by the title company that handled the transaction.

The organization that uploaded a document controls it in DataLien. To ask about, correct or delete information about you in a document, contact the title company or agent that handled your transaction. You can also contact us at prahaas@cleartitlelien.com, and we’ll pass your request to that organization and help it respond.

We use information about people named in documents only to provide DataLien to the organization that uploaded them. We don’t sell it or use it to build profiles of individuals.

DataLien is for professionals and isn’t directed to children. We don’t knowingly collect personal information from children through DataLien. Title documents sometimes name minors, for example as heirs; that information is handled as part of the document, for the organization that uploaded it.

DataLien is intended for use in the United States, and its own systems run in the United States. Pending: where our AI and document-processing providers process information

We may update this policy. The version and date appear at the top of this page. Pending: the notice given before a material change takes effect Changes to the list of service providers follow section 8 of our Terms of Service.

Questions, requests or concerns about privacy or security: prahaas@cleartitlelien.com.

Prahaas Nukala
Mail: Pending: mailing address

See also section 7 for how to make a privacy request.