Privacy Policy

1. Scope and controller

This policy applies to disputepass.com, its localized pages and the DisputePass document workflow. The service is intended for adults in the United States and its territories, the United Kingdom, European Union member states and Australia. The service operator is responsible for product processing; Lemon Squeezy independently processes checkout as merchant of record. Contact privacy@disputepass.com.

2. Information collected

• Files, archives, images, emails and office documents you choose to upload.
• Your dispute description, selected jurisdiction, category, language and requested outcome.
• Extracted text, document classifications, timeline, evidence gaps, analysis, calculations and generated drafts.
• Random case and access identifiers stored in your browser; technical security and consent records.
• With optional analytics consent, the visitor IP address and country derived locally from that address, traffic source and funnel events.
• Order status, currency, tax and opaque case references received from Lemon Squeezy. DisputePass does not receive full card details.

3. Purposes and legal bases

We process information to deliver the audit and package you request, secure and troubleshoot the service, prevent abuse, meet tax/payment/legal obligations and improve non-content product performance. Depending on location, the basis is performance of a requested service or contract, consent for optional or sensitive processing, legitimate interests in security and service operation, and legal obligations. We do not use uploaded evidence to train models or for advertising.

4. AI and automated processing

An isolated, server-authorized Codex worker extracts permitted files, may search generic official public sources without private identifiers, and generates the preview and complete package. The result is advisory software output, not a legal or eligibility decision. Uploaded content is treated as untrusted evidence, and automated systems can misread or invent details. You remain responsible for comparison with originals and current official requirements.

5. Retention and browser access

Original files, extracted content, preview, full report and ZIP package are scheduled for active-server deletion no later than 10 days after upload, or immediately when you use Delete case. Deletion is irreversible. A random access key is kept in local browser storage; there is no account and cross-device restoration is not guaranteed. Limited transaction, consent, security or legal-hold records may be retained as required.

6. Sharing and international transfers

Content is shared only with hosting infrastructure and the authorized AI processor needed to deliver and secure the workflow. Lemon Squeezy receives checkout data, opaque case references and payment information supplied directly to it; it does not receive uploaded dispute files or the generated package. Support, professional advisers, courts or authorities receive limited data only when directed by you, necessary for support, or legally required. Where GDPR or UK GDPR applies, transfers use an available lawful mechanism and appropriate safeguards.

7. Your rights

Depending on law, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent or appeal of a privacy decision, and complain to your supervisory authority. Because the service has no account, provide the case identifier and enough information to verify control without emailing sensitive documents. Some data may be exempt or already deleted. Australian users may complain under the Privacy Act process; applicable US state rights are honored where required.

8. Security and contact

DisputePass uses HTTPS, restrictive file permissions, random access secrets, same-origin checks, type and archive validation, isolated jobs, unprivileged containers, signed payment webhooks and short retention. No system is risk-free. Privacy requests: privacy@disputepass.com. Security reports: security@disputepass.com.