Privacy Policy

What we collect

• Account data: email address and a bcrypt hash of your password (we never store the password itself).
• Claim data: the vehicle, accident, repair, comparable, and insurer details you enter, plus generated evaluation results — stored so you can access your claims and documents.
• Payment data: handled entirely by Stripe. We store only a record of the purchase (product, amount, Stripe session id); we never see or store card numbers.
• Usage: minimal server logs and in-memory rate-limiting counters for abuse prevention.

How we use it

To provide the service (compute estimates, generate documents, track your claims), to process payments and grant entitlements, and to send transactional emails if/when enabled. We do not sell your data.

Sharing

Data is shared only with the processors required to run the service: Stripe (payments) and your hosting/database provider. We may disclose data if required by law.

Retention and deletion

Claim data is retained while your account is active. You may delete individual claims from the dashboard. To delete your account and all associated data, contact support@example.com — Edit before launch and we will process the request.

Security

Sessions use signed, httpOnly cookies; passwords are hashed with bcrypt. No system is perfectly secure — use a unique password.