Privacy

Last updated: October 24, 2026

Who we are and what this covers

BaneyGroup LLC ("RightLine", "we", "us") makes RightLine Check, pre-billing claim and SOAP-note checks sold to US chiropractic practices for business use. This policy is part of our Terms of Service.

It covers our website at rightline.io, RightLine Check and your messages with us. Stripe, Facebook, Google and other services we link to have their own policies. This policy doesn't change your practice's own privacy duties to its patients.

Patient information

Until our attorney review is complete, use sample, de-identified or made-up details only. Do not enter real patient information. This applies in RightLine Check, our forms, feedback, email and messages. We don't ask for health information about patients or about you.

Before any use with real patient information is allowed, we will offer your practice a Business Associate Agreement, and we'll update this policy.

If patient information reaches us by mistake, tell us at support@rightline.io without repeating it. We'll remove it where we can and handle it as the law requires.

Your note text stays on your device

RightLine Check runs the check in your browser. Your note text stays on your device, and we don't receive your note text, including the SOAP note and any previous note you paste. The claim lines, codes and answers you enter and the full results stay in your browser too. When someone signs off, acknowledges a flag or sends feedback, we receive only the details listed below.

Note text saved in the browser is wiped at the end of each day, and signing out removes everything RightLine Check keeps in that browser. Anyone using the same browser profile can see what's saved, so use your office's own devices.

Some browser spell-check, grammar and translation features and extensions send what you type to their makers. RightLine Check asks them to stay out, but they may not, so turn them off.

What we collect and why

Sources: you, your practice, Stripe and your browser.

Demo, call and waitlist forms: name, practice name, state, EHR, how to reach you (email, phone or Messenger) and any message, used to reply, arrange a demo or call, or tell you when we're available in your state.
Checkout: practice name, your name, work email, phone (optional), practice state, number of doctors (DCs), EHR and visits per week, used to set up your subscription and office and to contact you about your account. We save your name, email and phone when you continue to Stripe, even if you don't finish. Stripe receives your email, practice details and channel codes.
Payments: Stripe collects your card and billing address on its own page. Card details don't reach our servers, and Stripe's privacy policy applies to what Stripe collects. Stripe sends us your name and email, IDs, amounts, subscription status and failed payments.
Office setup: names, roles and credentials (such as DC) of the people who need a login, and how to reach each person privately with their personal sign-in link.
RightLine Check accounts: each person's name, role, credential, account status, sign-in times and PIN lockouts, used to sign people in and make sure only a doctor can sign off. Sign-in links and doctors' 6-digit PINs are stored in these records only as one-way codes (hashes).
Sign-offs and acknowledgements: who signed off on a flag or acknowledged a review item (and who was signed in), the rule and claim line number, the reason code for a sign-off, the visit ID, a coded tag of the visit, and the time. The visit ID is a random code from your device, and the tag, made with a key that stays there, can't be turned back into the visit. A sign-off's note stays on your device. These records, with sign-ins, refused PIN attempts and account and settings changes, go into a tamper-evident audit log, so your practice has a record of who cleared what and why.
Feedback, only if you send it: thumbs up or down, a reason from a list, the rule and result status, an optional note of up to 140 characters, and who sent it and when, used to improve the checks. Notes that look like they hold a name, date, ID number or similar are refused, but no screen catches everything.
Messages: what you send us, used to answer you. Meta handles Facebook and Messenger messages under its own terms.
Hosting logs: our hosting provider records details of each request, such as IP address, browser type, page address and time, which we use to run, secure and fix the service. In RightLine Check, page addresses can include the visit ID and a sign-in link.
Channel cookies: which link or campaign brought you to the site, saved with any form or order you send, so we learn which links work.

We also use information to bill you, give support, keep RightLine secure, send account notices, meet legal, tax and accounting duties, and enforce our Terms. Any marketing email will include an unsubscribe link, and we won't send marketing texts without your consent.

We don't sell personal information or share it for cross-context behavioral advertising (ads based on your activity on other companies' sites). We share it only with:

Service providers that run parts of RightLine for us, including Vercel (hosting, hosting logs and private data storage), Stripe (payments, receipts and the billing page), Cloudflare (our domain and DNS) and Google (any demo form we link to from Messenger).
Legal reasons: when the law or legal process requires it, or to protect anyone's rights, safety or property, including against fraud and security threats.
A new owner, if BaneyGroup LLC or RightLine is part of a merger, acquisition, financing or sale of assets, subject to this policy.
Others you choose, when you ask us to.

Cookies and browser storage

The site sets only two first-party cookies, each lasting 90 days:

rl_ft: the first link or campaign that brought you here.
rl_lt: the most recent link or campaign that brought you here.

They hold only a short code for the link and its campaign tags, no personal details. The checkout form also keeps your entries in that browser tab until you close it, in case you come back from Stripe.

RightLine Check uses an essential 30-day sign-in cookie, renewed while you use it, and browser storage on that device for saved visits, settings and sign-off codes.

Today the site has no third-party trackers, ad pixels or analytics, and RightLine Check has no ads, analytics or trackers. If we add analytics or advertising tools to the site, we'll update this policy first and ask for consent where the law requires.

You can block or delete cookies, but RightLine Check needs its sign-in cookie. We don't track you across other sites, so we don't respond differently to Do Not Track signals.

How long we keep information

Audit log: 7 years, including after you cancel. To keep it tamper-evident, we don't edit or delete single entries.
Demo, call and waitlist requests, and unfinished checkouts: until we no longer need them to reply or follow up, or sooner if you ask.
Orders and billing records: as long as tax and accounting laws require.
Hosting logs: for the limited time our hosting provider keeps them.
Your devices: note text until the end of the day, and the rest until someone signs out of that browser. We can't see or delete it.

How we protect information

Connections use HTTPS, stored data is kept private, and our server logs don't record what you type into forms. Sign-in links are long random codes, and 5 wrong PIN tries lock the PIN for 15 minutes. RightLine Check's pages may connect only to RightLine's own address. Each audit log entry is chained to the one before it, so changes and deletions can be detected.

No system is perfectly secure, and we can't guarantee security. If a sign-in link or device may have been exposed, tell your admin or RightLine so they can reissue the link. If a breach affects your information, we'll notify you as the law requires.

Your privacy rights

Some state laws give you rights over your personal information. We offer these to everyone in the US:

Access: ask what personal information we have about you and get a copy, in a portable format where the law requires.
Correction: ask us to fix information that is wrong.
Deletion: ask us to delete it, subject to the exceptions below.
Opt-out: we don't sell personal information, use it for targeted advertising, or use it for profiling with legal or similarly significant effects. If that changes, we'll update this policy and offer an opt-out first.

Global Privacy Control. We honor Global Privacy Control (GPC) signals where applicable, as a request to opt out of sale or sharing for that browser.

How to ask. Email support@rightline.io with "Privacy request" in the subject. We'll verify it, usually through the email address we have for you, and respond within the time your state's law requires (45 days if none does), plus any extension it allows.

Authorized agents. Someone you authorize can ask for you. We may ask for your signed permission and confirm your identity with you directly.

Exceptions. We may keep information needed to complete a transaction, meet legal, tax or accounting duties, keep RightLine secure, or bring or defend legal claims, and the audit log as described above. For an account your practice set up, we may involve your practice. If we can't do what you ask, we'll tell you why.

Appeals. To appeal a denial, email us with "Privacy appeal" in the subject. We'll answer within the time the law requires. If you still disagree, you can contact your state attorney general.

No discrimination. We won't charge you more or treat you differently for using these rights.

Children

The site and RightLine Check are for businesses, not children, and RightLine Check users must be at least 18. We don't knowingly collect personal information from children under 13 or anyone under 16. If you believe a child has given us information, contact us and we'll delete it.

Where we operate

We operate from the United States. RightLine Check is offered only to practices in the 50 states and the District of Columbia. If you visit from another country, your information will be handled in the United States.

Changes to this policy

We'll post updates here with a new "Last updated" date. If a change materially affects how we use information we already have, we'll tell customers by email or in RightLine Check before it takes effect, and ask for consent where the law requires.

Contact

Email: support@rightline.io