Privacy Policy

1.Who we are

Recourse is a product of Astra AI ("we," "us"). This policy explains what we collect, what we do with it, and the rights you have. By using Recourse you agree to it, along with our Terms of Service.

2.What we collect

• The screenshot you upload and the consent answer you pick — used only to generate your assessment and draft letter during your session.
• Your email address — only if you submit it (waitlist or "match me to an attorney").
• Basic technical data — standard server logs such as IP address, timestamp, and request info, used for security, rate-limiting, and abuse/cost prevention.

Please don't upload screenshots containing things you don't want read by software — bank details, passwords, medical info, etc. Crop to just the spam message if you can.

3.The big one: AI / third-party processing

Plain English: an outside AI company sees your screenshot, because that's how the reading happens.

To extract the text from your image, the image is transmitted to a third-party large-language-model provider — currently OpenRouter, which may route the request to underlying model providers such as OpenAI. They process the image to return the text and operate under their own terms and privacy practices, which we don't control. We send only the image you chose to upload, only for this extraction. We do not use your screenshot to train any AI model, and we ask our providers not to either, but we can't absolutely guarantee a third party's internal practices.

4.How we use what we collect

• To read your screenshot and produce your informational assessment + draft demand letter.
• To contact you if you joined the waitlist or asked for an attorney match.
• To keep the service secure, prevent abuse, and control cost.

We do not use your data for advertising or sell it. Period.

5.Retention — what we keep vs. toss

• Screenshots: processed in memory to generate your result, then not stored by Recourse after the request finishes.
• Emails you submit: kept in our CRM until you ask us to delete them.
• Security logs: kept for a limited period for safety and abuse-prevention.

6.Sharing

We share information only: (a) with the AI provider above, to read your screenshot; (b) with an independent attorney, only if you ask to be matched; (c) with infrastructure vendors (e.g., our hosting provider) that help run the service; and (d) if required by law or to protect rights and safety. We do not sell your personal information.

7.Cookies & analytics

Recourse aims to stay light. We don't use the tool to track you across the web for ads. If we add product analytics to understand usage, we'll use privacy-respecting measurement and update this policy.

8.Security — best effort, not a force field

We use reasonable measures (HTTPS, server-side secrets, rate-limiting, data minimization). But no method of transmission or storage is 100% secure, and we cannot and do not guarantee absolute security. You use the service with that understanding.

9.Your rights (CCPA/CPRA, GDPR & friends)

Depending on where you live, you may have rights to access, correct, delete, or port the personal information we hold, to opt out of sale (we don't sell) or certain processing, and to be free from discrimination for exercising these rights. To make a request, email anthony@theastraway.com and we'll respond as required by applicable law. If you're in the EEA/UK, our legal bases are your consent and our legitimate interests in operating and securing the service.

10.Children

Recourse is for adults (18+) and is not directed to children under 13. We don't knowingly collect their information; if we learn we have, we'll delete it.

11.International users

We operate in the United States; using the service means your information may be processed in the US and other countries with different data-protection laws than yours.

12.Changes & contact

We may update this policy; the "last updated" date reflects changes. Questions or privacy requests: anthony@theastraway.com.