Draft for review — not yet approved by counsel. Anything in [SQUARE BRACKETS] is still to be filled in.

Privacy

ThruLine runs on your machine, and the record it keeps stays there. It sends no reports of how you use it, and its optional narrator, which puts findings into plain English, is off by default. We see a message when you send one through the contact form, and a purchase when you make one through Stripe, never your card.

Effective October 6, 2026 Covers the ThruLine software and thrulinehq.com

Who we are

ThruLine is made by RAAS Labs, LLC, a Delaware limited liability company. Write to us at support@thrulinehq.com.

It is built by one engineer and is open to beta users. On this page, “we” and “us” mean RAAS Labs, LLC.

The product

ThruLine is local-first: it runs on your computer, reads the session logs Claude Code and Codex already write there, and keeps its record on the same disk.

Where each thing goes
The record	Stays on your disk. The core engine makes no network calls.
Usage	Not collected. There is no telemetry — no reports of how you use it.
Re-checks	“Check it again” runs on your machine. It asks your permission once per project, installs nothing and does not touch the network.
Approvals	Written into your project, one file per approved version (the exact commit): .thruline/decisions/<version>.json
The narrator	Off by default. If you turn it on, the findings it puts into plain English go only to a model on this machine, through Ollama (a program that runs a model locally); it refuses any other address. It speaks only after the verdict; no model decides one.

The Security page sets out how the record is kept intact.

This website

This website runs no third-party analytics.

If analytics are turned on later, they will be cookieless — they set no cookies in your browser — and provided by Cloudflare Web Analytics. The site is hosted by Cloudflare, Inc. (Cloudflare Workers). What its servers record about a visit, and for how long: Cloudflare records each request (time, IP address, page and browser) in our Workers logs, kept for up to seven days and not exported anywhere else. Anything else a page loads from another company, such as fonts: fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so Google receives your IP address and browser details when a page loads; nothing else a page loads comes from another company.

The contact form

The form on the Contact page asks for four things. We use them to reply to you.

What the form asks for

Name
Email
What you build with
Message

Messages are handled by our own Cloudflare account (Workers KV) and kept for until we delete them — you can ask us to delete yours at any time; there is no automatic expiry today.

Payments

Payments go through Stripe. Stripe, through Link, is the merchant of record — the company that legally takes your payment. We never see your card: Stripe collects it.

To issue your licence, we keep what the purchase needs: the Stripe references for it, the plan, whether it was paid, and the period each paid invoice covers. We keep these for as long as you might need a licence for a period you paid for. The record that a payment event was processed expires after 31 days, and the link between a checkout and your activation key after 90 days.

Stripe’s own privacy policy covers what Stripe collects: stripe.com/privacy, and Link’s at link.com/privacy. What each plan costs is on the Pricing page.

Licence files

A licence is a small plain-text file. You download it in your browser and install it with thruline licence install <file>. ThruLine itself never contacts us to fetch or check a licence.

thruline-licence.txt · format 1<…> varies by licence

ThruLine licence
# Install with: thruline licence install <this file>
key: <key id>
payload: {"format":1,"licence_id":"<ULID>","product":"thruline","plan":"pro",
          "issued_at":"<UTC time>","expires_at":"<UTC time>"}
signature: <signature>

A licence holds only this: which of our keys signed it, an id, the plan, when it was issued and when it runs out, and the signature — a mark only our key can make, showing the file is ours and unchanged. A licence tied to one machine also carries that machine’s fingerprint: a one-way code worked out from the machine’s own id, which cannot be turned back into it. No name, no email, no card.

Your rights and contact

Your record is on your machine, so it is already yours to read and export, at any time. None of that needs a licence. Removing records from inside ThruLine is coming in 0.2.1.

For what we hold — a message you sent us, a purchase record — you can ask us to show it to you, correct it or delete it. Wherever you live, you can also ask for a copy of it or object to how we use it, and we answer within 30 days. If you are in the EU, the EEA or the UK, you can also complain to your local data protection authority. We do not sell or share personal information.

Email: support@thrulinehq.com
Post: RAAS Labs, LLC, a US company · support@thrulinehq.com
Reply: Every email is answered by the person who built ThruLine, within one business day. (Not a bot, not a queue.)

Effective

October 6, 2026

Security What can leave this machine, and how the record is kept intact. Terms The terms for using ThruLine. Also a draft, pending review. Contact Questions go to the person who built ThruLine.