Privacy and security

Draft · Oct 24, 2026

Facedown is run by Rumblestories.

Checks run on the computer

Facedown is a Chrome extension. It checks what people paste, type, or upload to AI tools, inside Chrome on their computer. The SSNs, card numbers, and client names it finds never leave the computer, and we never log them. Your client list is stored as one-way hashes, so we can't read the names.

What we receive

Your admin log. When Facedown stops or changes something, it sends us the time, the person's Chrome email, the site, what it did, the kind of data (like "SSN"), and any reason the person typed. Never the text, file, or page. Only your firm's admin can see it.

Firm rules, if you write them. Your admin can add rules in plain English, like "Don't paste merger terms." Text goes to our server only if all of these are true: your firm has a rule, the page is an AI tool, the built-in checks didn't already decide, and the text looks like it could match a rule. SSNs, card numbers, and secrets are removed first. Our server asks Jev, a model from TypeSafe, whether a rule matches, and sends back the answer. We don't store the text, log it, or train on it.

Payments. Stripe handles payments. We never see your card number. We keep the buyer's email to make them your firm's admin and send sign-in links.

Where it runs

Our server and admin log run on Vercel in the US. Sign-in links expire after 15 minutes and work once.

Contact

Email hello@facedownlabs.com.