Skip to main content

Privacy Policy

Zero-custody by design — our tools are built to forget.

The short version

  • We run no advertising trackers and no third-party analytics on this site.
  • Documents you run through our analysis tools are processed in memory and never stored.
  • Direct identifiers are scrubbed before any generative AI reads your document's text.
  • We keep only what you choose to type into a form and send us.
  • We never sell or share personal information.

Who we are and what this covers

RHP Law, P.C. is a California professional corporation. This policy covers www.rhp.law and the firm's affiliated tool properties, including paystubaudit.com, and applies to every RHP document-analysis tool, present and future.

AI document-analysis tools — the Zero-Custody Protocol

RHP Law builds tools that review documents containing personal information — today a wage-statement analyzer; tomorrow time-card readers, policy reviewers, and others. Every one of them runs inside the same protocol. A tool that cannot run inside this protocol does not ship.

  1. Receive in memory. Your document travels over an encrypted connection and is processed in memory only. It is never written to storage, never saved, never queued. When the response is built, the document and its text are discarded.
  2. Read in-house. Text recognition (OCR) runs inside RHP Law's own Google Cloud project — not at a third-party document vendor.
  3. Scrub first. Before the document's text is sent to any generative AI model, direct identifiers — Social Security numbers, email addresses, phone numbers, bank and account numbers, and long identification numbers — are masked in place. The masks preserve the document's layout, not your identity: the AI can see that a value exists at a position without ever seeing the value.
  4. Analyze without memory. AI comprehension runs on Google Vertex AI inside that same project. Under Google Cloud's commitments, customer content is not used to train AI models, and we do not enable any feature that stores prompts for search or grounding. The legal-structure rules themselves run in our own code, on our own server.
  5. Return and forget. Results are generated and returned to your browser. The document text is destroyed in the same request, its contents are never written to our logs, and the response is marked not to be cached.

Honest limits. Scrubbing targets direct identifiers; the document as a whole (for example, a name printed in a header) is transiently processed by Google Cloud services under the contractual commitments above, and Google may keep limited short-term logs for abuse prevention under its own policies. No tool output ever includes a full Social Security or account number. Please do not upload a document you are not comfortable processing this way.

Tool results are informational structure review only. They are not legal advice, they reach no conclusions about anyone's legal claims, and using a tool does not create an attorney-client relationship.

What we collect when you contact us

  • Forms you choose to submit (the intake wizard, a tool's contact form, or email): your name, contact details, and whatever you write. We use this to respond, run conflict checks, and — if you engage the firm — represent you. Communications from prospective clients are treated confidentially under the professional responsibility rules even before an engagement exists.
  • Client portal: passkey credentials (a public key only — no passwords are stored).
  • On your device only: accessibility preferences are kept in your browser's local storage and are never transmitted to us.

Form submissions are stored in the firm's case-management systems (Google Workspace and Airtable, acting as our service providers). Our hosting provider (Google Firebase) keeps standard, short-lived server logs to operate the service; we additionally rate-limit requests using transient, in-memory data that is not retained.

What we never do

  • No sale or sharing of personal information — for advertising or anything else.
  • No advertising trackers, no cross-site tracking, no third-party analytics.
  • No use of your documents or communications to train AI models.

Retention and deletion

Tool-processed documents: nothing is retained, so there is nothing to delete. Form submissions and client records are kept as long as needed to respond, comply with the professional-records obligations that govern law firms, and meet legal holds. To request deletion of information you submitted, see our Data Deletion page.

California disclosures

Do Not Track: we do not track visitors across third-party websites, so this site behaves the same whether or not your browser sends a Do Not Track signal. Your rights: regardless of whether a given privacy statute technically applies to a firm of our size, we honor reasonable requests to access, correct, or delete personal information you have submitted — write to rob@rhp.law. Children: this site and our tools are not directed to children under 16, and we do not knowingly collect their information.

Changes

When this policy changes, the new version is posted here with a new effective date. Material changes to how the tools handle documents will be called out, not buried.

Contact

Privacy questions: rob@rhp.law.

Effective date: June 9, 2026.