Privacy Policy

1 · What we collect

We collect only what you give us:

• Account information: your email address and password (password is hashed — we cannot see it).
• Dispute data: facts you write, evidence you upload or forward, recipients, letters, responses, notes.
• AI usage data: the task type, input/output token counts, and timestamp of each AI draft, used for rate limiting and cost monitoring.
• Service usage data: basic analytics (page views, feature usage) to improve the product. We do not track your location, browsing history, or activity outside the app.

2 · How we store your data

Your data is stored in Supabase, a secure cloud database hosted in the United States (US East region). Each user's data is isolated using row-level security — no other user can see or access your records.

Uploaded files (photos and documents) are stored in Supabase Storage with signed URLs that expire after one hour. Files are only accessible to the authenticated account that uploaded them.

3 · AI processing

When you generate an AI draft, the relevant parts of your dispute context — facts, evidence summary, recipient details, prior letters, and the response being analyzed (if any) — are sent to Anthropic (our AI provider, Claude) for that single request.

Per our service agreement with Anthropic, your data is not retained by them and is not used to train their models. Each AI request is independent — Anthropic does not maintain a persistent record of your prior requests.

We log the token counts and task type of each request to our own database for rate limiting and cost monitoring. We do not log the full content of your prompts or AI outputs.

4 · Who can access your data

Only you. We do not access your dispute data unless you explicitly request support that requires it, or we are compelled by law.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

5 · Service providers

We use the following third-party services to operate docmydispute:

• Supabase — database and file storage (US East)
• Anthropic — AI drafting (Claude models). No retention or training on your data.
• Vercel — web hosting and serverless functions
• Cloudflare — DNS, email routing, and security
• Stripe — payment processing (when available)

Each provider has their own privacy policy and operates under their own data processing agreements.

6 · Cookies

We use cookies only for authentication (keeping you signed in) and the coming-soon bypass during private testing. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7 · Your rights

You have the right to:

• Access all of your data at any time through the app
• Export your data using the Download Dispute Backup feature
• Delete individual evidence, recipients, letters, responses, notes, or entire disputes
• Delete your account entirely (contact support@docmydispute.com)
• Request a copy of all data we hold about you

8 · Data retention

Your data is retained for as long as your subscription is active. After cancellation or payment failure, data is retained for 90 days to allow export, then permanently deleted.

9 · Children

docmydispute is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.

10 · Changes and contact

We may update this policy from time to time. Significant changes will be communicated by email or through the app.

For privacy questions or data requests, contact privacy@docmydispute.com.