Privacy Policy

StratForge Group ("StratForge," "we," "us," or "our") operates StratForge Claims Assistant (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. This Policy is written for a software service that helps United States veterans organize documents related to their VA disability claims. It is provided for general information and is not legal advice.

1. Information we collect

We collect the following categories of information:

• Account information. Name, email address, password (stored as a hash), and profile settings you provide.
• Documents you upload. Files you choose to upload to your Secure Document Vault, which may include VA decision letters, C&P exams, DBQs, service treatment records, VA and private medical records, imaging, prescriptions, personal statements, and related images (PDF, JPG, JPEG, PNG). These documents frequently contain sensitive personal, medical, and military information. You choose what to upload.
• Content you generate in the app. Chat conversations, questions you ask AI features, personal statement drafts, interview responses, notes, and claim tracker entries.
• Payment information. If you subscribe, payment card details are collected and processed directly by our payment processor (Stripe). We do not store full card numbers on our servers. We receive limited information such as subscription status, plan, last four digits, brand, and billing country.
• Device and log information. IP address, browser type, operating system, device identifiers, referring URLs, timestamps, and pages visited.
• Usage analytics. Aggregate metrics about how features are used (for example, feature clicks and error events) so we can improve the Service.
• Support communications. Messages you send to our support team.

2. How we use information

• To operate, secure, and improve the Service.
• To authenticate you and protect your account.
• To process the documents you upload so you can search, organize, and view them.
• To power AI features you invoke (for example, decision letter explanations, personal statement drafts, evidence review, and chat).
• To process subscription payments and manage billing.
• To communicate with you about your account, security, and product updates.
• To detect, prevent, and respond to abuse, fraud, and security incidents.
• To comply with legal obligations.

3. Third-party service providers

We rely on trusted third-party service providers to operate the Service. These providers act on our behalf and are only permitted to process information as necessary to deliver their services to us. Categories of providers include:

• Backend and database (e.g., Supabase) for authentication, database, and file storage.
• AI model providers (e.g., OpenAI and other model providers accessed through our AI gateway) to power AI features such as document explanations, chat, and drafting assistance.
• Payment processing (Stripe) for subscription billing.
• Email delivery for account, transactional, and support emails.
• Hosting and content delivery providers for the application.
• Analytics and error monitoring providers to understand feature usage and diagnose issues.

We do not sell your personal information, and we do not sell the documents you upload. We do not share your uploaded content with advertisers.

4. AI processing and model training

When you use an AI feature, the content required to answer your request (which may include portions of your documents or messages) is sent to an AI model provider through our AI gateway so that the model can produce a response. We instruct our AI providers not to use your content to train their general foundation models, and we do not use your uploaded documents or chat content to train AI models ourselves. AI providers may retain content for a short period for abuse monitoring as described in their own policies.

AI outputs are generated by machine learning models and may be inaccurate, incomplete, or out of date. You should independently verify any information before relying on it, and consult a qualified professional (for example, a VA-accredited representative, attorney, or licensed clinician) before making decisions about your VA claim, medical care, or finances.

5. Data retention

We retain your account information and uploaded content for as long as your account is active or as needed to provide the Service. Backups and logs may be retained for a limited additional period for security and disaster recovery. When you delete a document, we remove it from your active vault and it is removed from backups on our normal backup rotation. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your rights and choices

• Access and correction. You can view and update your profile in Settings.
• Delete documents. You can delete any document from your Document Vault at any time.
• Delete your account. You can delete your account and associated data from Settings, or by emailing us.
• Export your data. You can request a copy of your account data by contacting us.
• Manage your subscription. Manage or cancel your plan from the Subscription page.
• Marketing communications. You can opt out of non-essential email at any time.

Depending on where you live, you may have additional rights under applicable law (for example, the CCPA or GDPR). To exercise these rights, contact stratforgegroup@gmail.com.

7. Data security

We take security seriously and use a defense-in-depth approach. Measures include:

• Encryption in transit using industry-standard TLS.
• Encryption at rest for stored documents and database contents through our infrastructure providers.
• Authentication and account controls, including hashed passwords and session management.
• Database-level access controls (Row-Level Security policies) intended to ensure that requests scoped to your account cannot read another user's data.
• Operational safeguards such as least-privilege access for our team and audit logging.

No online service can guarantee absolute security. We work to protect your information, but we cannot promise that unauthorized access, disclosure, alteration, or destruction will never occur. Please use a strong, unique password and keep your credentials confidential.

8. Cookies and similar technologies

We use cookies and similar technologies for essential functions such as keeping you signed in, remembering preferences, and understanding how the Service is used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

9. Legal requests

We may disclose information if required to do so by law, subpoena, or valid legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. We will only disclose the minimum information necessary and, where allowed, will notify affected users.

10. Children's privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. International users

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or in other countries where our providers operate.

12. Not affiliated with the VA

StratForge Claims Assistant is an independent software platform. We are not affiliated with, endorsed by, approved by, or sponsored by the U.S. Department of Veterans Affairs (VA) or any other government agency.

13. Changes to this policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. Continued use of the Service after an update constitutes acceptance of the revised Policy.

14. Contact us

Privacy questions, requests to access or delete data, or reports of a suspected security issue: stratforgegroup@gmail.com.

This Policy is provided for general informational purposes and does not constitute legal advice.