Draft for attorney review — not yet final

Privacy Policy

Effective date: [TO BE SET AT LAUNCH] · Last updated: June 9, 2026

The short version

Your document is read once, in memory, and discarded. We do not store, sell, share, or train on it. We persist exactly three categories of data: payment records (held by Stripe), opt-in deadline-alert signups (your email and chosen county), and anonymized outcome reports if you explicitly choose to share one.

1. Documents you analyze

When you paste text or upload a PDF/image of an assessment notice, it is transmitted over TLS to our server, processed in memory to produce your analysis, and discarded when the response is returned. It is not written to a database, file storage, or logs. Where analysis uses a third-party AI processor (Anthropic), the document is transmitted to that processor solely to produce your analysis, under terms that do not permit training on your content: Anthropic's Commercial Terms of Service (effective June 17, 2025) state that Anthropic may not train models on customer content submitted through its API, and its Data Processing Addendum governs processing and retention.

2. Data we persist

• Payments. Processed by Stripe. We receive and retain the payment record (session ID, amount, time) — never your card number.
• Deadline alerts (opt-in). Your email address and the county you selected, used solely to send you that county's appeal-window reminder. Unsubscribe ends use immediately.
• Outcome reports (opt-in). If offered and you choose to share, an anonymized record of your appeal outcome (jurisdiction, result, savings band) to improve the tool's honesty about what works.

3. What we don't do

• No sale or sharing of personal information. [ATTORNEY: CCPA/CPRA “sale/share” analysis.]
• No advertising trackers; no third-party analytics on document pages. [ATTORNEY: confirm final analytics stack.]
• No training of AI models on user documents.

4. Your rights

You may request deletion of your signup data at any time at [CONTACT EMAIL]. Because documents are never stored, there is nothing to delete for analyses. [ATTORNEY: add state-specific rights sections (CCPA/CPRA, VCDPA, etc.) as applicable; designate contact method.]

5. Security, children, changes

TLS in transit; secrets server-side only; least-data-by-design. Not directed to children under 13. Material changes will be posted here with a new effective date. [ATTORNEY: breach-notification clause; governing law.]