Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address and name. If you sign in with Google, we receive your name, email, and profile picture from Google.

Case Information: When you use the Service, you provide details about your child support case including financial information, children's ages, parenting time arrangements, and case circumstances. This information is used solely to generate your case materials.

Payment Information: Payments are processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe's privacy policy governs the handling of your payment data.

Activity Logs: We maintain internal audit logs of actions taken on your account (such as document generation, strategy creation, and account changes) for security monitoring and to help resolve any issues with your account. These logs do not contain the content of your case data.

2. How We Use Your Information

We use your information to: provide and improve the Service, generate case strategies, documents, and hearing preparation materials, process payments, communicate with you about your account, monitor for security issues, and comply with legal obligations. We do not sell your personal information to third parties.

3. AI Processing & Data Protection

Your case information is processed by Anthropic's Claude API to generate strategies, court documents, and hearing preparation materials. Here is how we protect your data during AI processing:

Automatic redaction: Before your case data is sent to the AI, our system automatically strips sensitive identifiers including Social Security numbers, email addresses, phone numbers, street addresses, and case numbers. The AI processes your case facts without seeing these personal identifiers.

No model training: Your data is not used to train AI models. Anthropic processes your data solely to generate your requested content, in accordance with their data processing agreements.

Prompt injection defense: All AI processing routes include safeguards to prevent manipulation of AI outputs through injected instructions in case data fields.

No personal names in prompts: Your real name is not included in AI generation prompts. Documents use generic party labels (Petitioner/Respondent) during generation, and you fill in actual names directly in the final document.

4. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We implement the following security measures:

Encryption in transit (TLS) for all data transmission. Row-level security (RLS) policies ensuring you can only access your own data. Server-side authentication on all API routes. Per-user rate limiting to prevent abuse. Input validation on all data submissions. Security headers including Content Security Policy, HSTS, and X-Frame-Options. Stripe webhook signature verification for payment security.

While no system is 100% secure, we take reasonable and industry-standard measures to protect your information.

5. Data Retention

We retain your data for the following periods:

Case data (intake information, strategies, documents): Retained for as long as your account is active. You can delete your account and all associated data at any time from Settings.

Account information (email, name): Retained until you delete your account.

Payment records: Retained as required by tax and financial regulations (typically 7 years). These records are stored by Stripe, not on our servers.

Audit logs: Retained for 90 days for security monitoring, then automatically deleted.

Rate limiting records: Automatically deleted daily.

6. Sensitive Information

We understand that family court information is deeply personal. Your case details, financial information, and family circumstances are treated with the highest level of confidentiality. We never share individual case information publicly and access to case data is strictly limited to the automated systems that generate your materials. No human at ParentReady reviews your case data unless you explicitly request support and grant permission.

7. Third-Party Services

We use the following third-party services:

Anthropic — AI content generation (strategies, documents, hearing prep). Your case facts are sent with personal identifiers redacted.

Supabase — Database and authentication (hosted on AWS).

Stripe — Payment processing. We never see or store your card details.

Vercel — Application hosting.

Google — OAuth authentication (sign in with Google).

Each of these services has their own privacy policies governing how they handle your data.

8. Your Rights

You have the following rights over your data:

Access: You can view all case data, strategies, and documents in your account at any time.

Correction: You can update your intake information and personal details through the application at any time.

Deletion: You can permanently delete your account and all associated data at any time from Settings. This immediately removes your account, all case data, strategies, documents, and audit logs. Payment records retained by Stripe are governed by Stripe's retention policies and applicable financial regulations.

Data export: You can export your court documents as PDF at any time through the application.

Withdraw consent: You may stop using the Service at any time. To withdraw consent for data processing and have your data deleted, use the delete account option in Settings.

9. Children's Privacy

The Service is intended for adults (18+) who are parties to family court proceedings. We do not knowingly collect personal information from children under 13.

10. Changes & Contact

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date above. You can manage your data and delete your account at any time from Settings.