Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and Google account ID.

Service Data: When you use our services, we collect the Amazon warning/suspension text you provide, uploaded documents (invoices, LOAs, certificates), questionnaire responses, and generated appeal content.

Usage Data: We automatically collect browser type, IP address, pages visited, and timestamps for analytics and security purposes.

Payment Data: Payment information is processed through our payment provider. We store transaction records but do not store credit card numbers.

2. How We Use Your Information

We use your information to:

• Provide and improve our AI-powered appeal generation services
• Process your documents and generate Plans of Action
• Send verification emails and service notifications
• Process payments and maintain account balances
• Improve our AI models and service quality (anonymized data only)
• Prevent fraud and ensure platform security

3. Data Storage & Security

Your data is stored on secure servers with 256-bit SSL encryption in transit and AES-256 encryption at rest. We use industry-standard security measures including firewalls, access controls, and regular security audits.

Uploaded documents are processed for appeal generation and stored securely. You may request deletion of your data at any time.

4. Third-Party Services

We use the following third-party services to provide our platform:

• Anthropic (Claude AI)
• OpenAI (GPT)
• Google OAuth
• Render
• Stripe (coming soon)

Each third-party service has its own privacy policy. We recommend reviewing their policies for details on how they handle data.

5. Cookies

We use essential cookies for authentication (session management) and preference storage (theme, language). We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data and appeal history for as long as your account is active. You may delete your account and associated data by contacting us. Generated reports and documents are retained for 90 days after creation unless you request earlier deletion.

7. Your Rights

CCPA (California): California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

GDPR (EU/EEA): If you are in the EU/EEA, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Contact us to exercise these rights.

8. Children's Privacy

AppealMind is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: [email protected]