Privacy Policy

What we collect

• Account data: your email address and a password hash (we never store your actual password).
• Case data you enter: notice type/date/number, filing status, and per-year tax, penalty, and interest balances you type in.
• Generated documents: the letters and checklists produced from your data.
• Billing records: Stripe customer id, purchase/grant records, subscription status. Card details never touch our servers — Stripe handles them.
• Operational logs: standard server logs for security and debugging.

What we never do

• We never sell your data.
• We never ask for your full Social Security Number in the app — and you should never email it to anyone, including us.
• We never share your case data with third parties except the infrastructure needed to run the service (hosting, database, Stripe) under their own privacy obligations.

Where data lives

All case data lives in this deployment's own SQLite database (self-hosted) — not on a third-party SaaS. When you delete a case, its years, checklist, letters, and simulator runs are deleted with it. Deleting your account deletes your cases and personal data (billing records are retained as required for tax/accounting compliance).

Your choices

• Export any letter (.docx) at any time — your documents are yours.
• Request account/data deletion by writing to support@your-domain.com (Edit before launch) from your account email.
• Cancel IA Guard at any time; cancellation stops future charges (see the Refund Policy for current-period terms).

Cookies

We set one essential cookie: a signed session token (httpOnly, SameSite=Lax) that keeps you logged in. No advertising or tracking cookies.