Privacy Policy

Account Information (email, authentication details): We collect this to create and secure your account, authenticate your identity, send service-related notices, and manage your subscription. Without this information, we cannot provide access to the service.

Documents You Upload (letters, bills, forms, PDFs, images): We collect and store these so you can organize, search, and receive AI-generated summaries, deadline alerts, and suggested replies. We cannot process or explain your paperwork without access to these files.

Usage Data (features used, session activity, errors): We collect this to keep the service secure, diagnose technical issues, understand which features are most helpful, and improve performance. This data is aggregated and anonymized where possible.

Billing Information: When you subscribe to a paid plan, our payment processor collects payment details to process transactions and manage renewals. We do not store your full payment card information.

To Provide Our Service: We use your uploaded documents to generate plain-English explanations, flag deadlines, suggest next steps, and draft replies.

AI Processing: Document content is sent to AI models for analysis. We do not use your documents to train AI models without your explicit consent.

Account Management: We use your email to authenticate you, send important service updates, and manage your subscription.

Improvements: We may analyze aggregated, anonymized usage patterns to improve our service.

We keep your personal data only as long as necessary for the purposes described below:

• Account Information: Retained for the lifetime of your account plus 30 days after deletion to handle billing disputes, fraud prevention, and legal obligations. After 30 days, it is permanently erased.
• Uploaded Documents: Retained while your account is active. You may delete individual documents at any time; deletions are permanent and immediate. If you delete your account, all documents are removed within 7 days.
• Usage Data: Retained in identifiable form for up to 12 months, then aggregated or anonymized for analytics and security purposes. Aggregated data may be kept indefinitely.
• Billing Records: Retained for 7 years to comply with tax and accounting regulations.

Your documents are stored in secure cloud infrastructure with encryption at rest and in transit. Access is restricted to authenticated users and protected by Row-Level Security policies.

We do not sell your personal data or uploaded documents. We only share data with:

• Cloud infrastructure and AI providers necessary to deliver our service
• Payment processors for billing transactions
• Legal authorities when required by applicable law

All third-party providers are bound by strict confidentiality and data protection obligations.

GDPR (for users in the European Economic Area): We process your personal data based on the following legal grounds:

• Performance of a contract: Account information and uploaded documents are necessary to provide the service you signed up for.
• Legitimate interests: Usage data helps us maintain security, prevent fraud, and improve the service without overriding your privacy rights.
• Legal obligation: Billing records are retained to satisfy tax and accounting laws.
• Consent: Where required, we obtain your explicit consent before using data for purposes beyond core service delivery (for example, training AI models).

CCPA (for California residents): Under the California Consumer Privacy Act, you have specific rights regarding your personal information:

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of that information, and the business purposes for collecting it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions required by law (such as billing records we must retain for tax compliance).
• Right to Opt-Out: We do not sell personal information. If this practice ever changes, we will provide a clear opt-out mechanism and update this policy.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your GDPR or CCPA rights, contact us at the email below. We will respond within 45 days (or as required by applicable law) and may need to verify your identity before fulfilling your request.

In addition to the rights described above, you generally have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain types of processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the email below.