Privacy policy

1. Who we are

Securing Public Access to Records and Knowledge, LLC operates Open Docket. This Privacy Policy describes what we store when you use the Service.

Contact: Securing Public Access to Records and Knowledge, LLC, 74 E Main St, No. 82, Lititz, PA 17543, support@rtkldecisions.com. Website: https://open.rtkldecisions.com.

Document version 2026-09-28. Last updated September 28, 2026.

2. Information we collect

Account data: email address, name if you provide one, versioned legal acknowledgements (document versions, checkbox-text version, UTC timestamp, IP), reminder preference, and Stripe customer identifiers if you subscribe.

Docket data: requests, agencies you add, denial grounds you record, appeal drafts you write, attachments you upload, and mail metadata needed to track a filing. Do not upload confidential client files you would not send through ordinary email.

Statistical and research information: information derived from your matters that we may retain in aggregated or de-identified form for research and statistics, including asserted denial reasons or other disposition categories, associated with agency identifiers (for example, agency name or type) and reason or exemption categories. This statistical information is separated from your account identity for research and public reporting purposes described in this Policy.

Technical data: IP address at acknowledgement time, and ordinary server logs needed to operate the Service.

3. How we use information

We use account and docket data to operate the tracker, generate documents from information you entered, send sign-in links, and — if you subscribe and enable them — deadline reminder emails. We use acknowledgement records to show that you agreed to the Terms and Privacy Policy then in effect.

We may also use aggregated or de-identified matter information for research and statistics about Right-to-Know Law practice in Pennsylvania, including how often agencies assert particular denial reasons or exemptions. We may publish or display those aggregates publicly. Public aggregates will not identify you as an individual requester and will not include your name, email address, or other account identifiers.

4. Payments

Card numbers are handled by Stripe, not by Securing Public Access to Records and Knowledge, LLC. We receive subscription status so we can unlock Pro features. Live Stripe charges are not enabled until billing is turned on.

5. Email

We send sign-in links. If you are on Pro and have reminders enabled, we send deadline notices. You can turn reminders off in Account Settings or use the unsubscribe link in those messages. Agency mail uses the per-user relay address assigned in the Service for that user’s matters. That relay is not the human support inbox (support@rtkldecisions.com).

6. Analytics, cookies, and advertising

We do not run advertisements in the product. If a product-analytics identifier is configured, we may record named product events (for example, that a sign-in link was requested). Matter content — records requested, letter text, appeal grounds, attachments, and inbound mail bodies — is not included in analytics or advertising payloads.

We do not use advertising cookies to sell your docket. Session cookies are used to keep you signed in.

7. Retention

Matter content is retained for two years after the matter is closed, then deleted from the application database, unless a longer period is required by law or needed to resolve a dispute. Deleting your account removes your user record, docket, custom agencies, and uploaded files from the application database, subject to residual backups that age out on their ordinary cycle.

Aggregated or de-identified statistical records may be retained longer than individual matter content, including after account closure or matter deletion, because they no longer identify you. If you delete your account or ask us to delete personal information, we will remove or de-identify personal identifiers from your account and docket as described above and in Section 10. Pre-existing aggregates that do not identify you may remain.

Legal-acknowledgement records are kept as part of the account record so we can show what you agreed to.

8. Security

The Service is designed to protect account and docket data in transit with HTTPS. At-rest encryption of the application database, multi-factor authentication, and similar controls are design targets and are not represented here as fully shipped features. Magic-link email is the primary sign-in method; optional Google sign-in may be offered. Do not treat the Service as a substitute for a confidential counsel channel.

9. Pennsylvania Breach of Personal Information Notification Act

If we determine that a breach of personal information has occurred that requires notice under Pennsylvania’s Breach of Personal Information Notification Act, we will provide notice as that law requires.

10. Your choices

You may update your name, turn reminder email off, export your docket (Pro), or delete your account in Account Settings. To ask a privacy question, email support@rtkldecisions.com.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children.

12. How we share information

Public research and statistics: we may publish or display aggregated or de-identified statistics derived from Service use (for example, denial reasons by agency). Those publications will not identify individual requesters.

We use service providers to host the application, send email, and process payments (including Stripe). Those processors receive only what they need to perform their function. The Service is operated for users in the United States.