Privacy Policy

1. Information We Collect

We collect the following information when you use HOABusted:

• Email address — collected at account creation and used for login and transactional communications
• Uploaded documents — HOA violation letters you upload for analysis
• Extracted text — text extracted from your uploaded documents to perform analysis
• Analysis results — AI-generated dispute analysis and letters associated with your account
• Usage data — number of scans performed, credit balance, account activity
• Payment data — payments are processed by Stripe; we do not store card numbers or banking information

We do not collect your name, phone number, address, or any other personal information beyond what is listed above unless you voluntarily provide it.

2. How We Use Your Information

We use your information solely to:

• Provide the HOABusted analysis and dispute letter service
• Process your uploaded documents through our AI system
• Maintain your account, credit balance, and dispute history
• Send transactional emails (sign-in links, purchase confirmations)
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your data. We do not use your uploaded documents or dispute content to train AI models. We do not send marketing emails without your explicit consent.

3. AI Processing of Your Documents

When you upload a document, its contents are transmitted to Anthropic (the maker of the Claude AI) for analysis. Anthropic processes this data as a service provider on our behalf under their API terms. Your documents are not used to train Anthropic’s models. For more information, see Anthropic’s Privacy Policy.

4. Third-Party Service Providers

We share data with the following third-party processors only as necessary to operate the Service:

• Supabase — database and authentication hosting
• Anthropic — AI document analysis
• Stripe — payment processing
• Vercel — application hosting and infrastructure
• Resend — transactional email delivery

Each processor is contractually required to protect your data and may only use it to provide their service to us. We do not share your data with advertisers or data brokers.

5. Cookies and Tracking

We use cookies only for authentication purposes — specifically to keep you logged in between sessions. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking. You may disable cookies in your browser settings, but doing so will prevent you from staying logged in.

6. Data Retention

Your account data, uploaded documents, and dispute history are retained for as long as your account is active. If you request account deletion, your data will be permanently removed within 30 days, except where retention is required by law (e.g., payment records required for tax purposes, which are retained for 7 years).

7. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), database-level encryption at rest, and access controls that limit who can view your data. However, no system is completely secure. We cannot guarantee the absolute security of your information and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, to the extent required by applicable law.

8. Children’s Privacy

HOABusted is not directed to children under the age of 13 and we do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your dispute history in a portable format
• Opt out of any marketing communications (we don’t send any by default)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we have collected, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at the email below.

To exercise any of these rights, email us at cpoole@revasyn.com. We will respond within 30 days.

10. International Users

HOABusted is operated from the United States and is intended for US residents only. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy or your data? Email us at cpoole@revasyn.com.