Faultline Web privacy

What this covers

This notice covers the hosted Faultline web app at faultline.nxtg.ai and its sister sites. The NXTG.AI Privacy Policy (https://nxtg.ai/legal/privacy-policy) covers the Faultline CLI and NXTG.AI's other tools, which run on your machine. Unlike those tools, the web app does collect personal data, listed below. Where this notice and the NXTG.AI Privacy Policy differ for the web app, this notice applies.

What we collect and where it lives

Account: if you sign in, Clerk stores your email address, your name if you give one, and sign-in details. Your recent scans (the first 200 characters of each, with the results) and your monthly scan count are stored on your Clerk account until you clear your history or delete the account.

Team workspaces: scans saved to a team workspace (the newest 50) are stored on that Clerk organization, and every member of the workspace can see them.

Billing: if you subscribe, Stripe processes your payment. At checkout, Stripe also receives your country, your ZIP or postal code, and any VAT number you enter, which Faultline uses only to calculate tax. Card details stay with Stripe; we keep only your Stripe customer and subscription IDs.

Scan text: the text you submit is sent to the Faultline engine (hosted on Fly.io) and to the AI model providers that check it: Google Gemini, and on Enterprise multi-model consensus scans also OpenAI and Anthropic. The engine keeps recent results in memory to answer repeat scans and does not write your text to its storage; its operational logs may contain fragments of a scan. The AI providers handle the text under their own terms.

Shared scans: when you share a scan, its first 200 characters and its results, including the claims extracted from your text, are stored in Upstash Redis for 30 days.

Anonymous use: without an account, your history stays in your own browser. We use your IP address to enforce the free allowance (3 scans a day); that counter expires after 24 hours. IP addresses are also used for short-lived rate limits, and Vercel’s request logs record them.

Product analytics: we count funnel events (for example "scan completed" or "pricing page viewed") without your name, email or account ID. The one exception is a completed checkout, which is recorded with your account ID so the payment can be matched to your plan. Funnel events are deleted after 90 days.

Activity log: starting a checkout is recorded with your account ID and email, and administrator actions are recorded with the administrator’s account ID. The log keeps only the newest 500 entries.

Invitations: an administrator can invite people by email in bulk. Those addresses are sent to Clerk to issue the invitations, and the import job record is deleted after 24 hours.

Cookies

Clerk sets the cookies that keep you signed in, Cloudflare Turnstile runs a bot check, and a fl_brand cookie remembers which Faultline site you are on. We use no advertising or cross-site tracking cookies.

Who processes your data

Vercel (hosting), Clerk (accounts), Stripe (payments), Upstash (shared scans, quotas, rate limits, product analytics, the activity log and import jobs), Cloudflare (bot check), Fly.io (the Faultline engine), and the AI provider that runs your scan. We do not sell your data or use it for advertising.

Your choices

You can clear your scan history from the History page. To get a copy of your data, or to delete your account and the data linked to it, email faultline.web@nxtg.ai from the address on your account.