Privacy Policy

RouteShot LLC · Last updated 2026-09-20

Draft for counsel review. Working language, not final legal advice. Have it reviewed before you rely on it.

What we collect

Account information. Name, work email, organization, and role for the people who use RouteShot.
Access requests. Details you submit through the request-access form.
Customer Data. The websites you direct RouteShot to capture and the resulting screenshots, plus project settings and encrypted staging credentials.
Usage data. Job records (who ran what, when, against which URLs, and the outcome) and basic product and log data needed to run and improve the service.

How we use it

To provide the service, run and deliver captures, secure and support your account, communicate with you, and improve the product. We do not sell your data.

Staging credentials

Credentials you save are encrypted, write-only from the UI, and never stored or logged in plaintext or read back. They are used only to access the staging environments you configure.

Subprocessors

We use a small set of infrastructure providers to run the service. The current list, with purpose and location, is on the subprocessors page.

Data retention

Captured images are retained on a defined schedule and then cleaned up; job metadata (the audit trail) is retained so history and compliance questions have receipts. Retention can be configured for enterprise accounts.

Security

Data is isolated per organization, credentials are encrypted, and we run a HIPAA-aligned control baseline. More detail is on the security page.

Your choices

You can request access to, correction of, or deletion of your personal information, subject to legal and contractual limits. Contact us to make a request.

Contact

Privacy questions or requests: reach us through the contact page.