Privacy Policy

What Information We Collect

Account information: Name, email address, state of residence, password (hashed — never stored in plain text).

Case information: Contractor names, dispute amounts, state, description of dispute, evidence files you upload.

Payment information: Processed by Stripe. We receive only a payment confirmation token — never your full card number.

Usage data: Pages visited, actions taken, browser type, IP address. Used to improve the product.

How We Use Your Information

• To provide the The Fightback App platform and generate documents
• To calculate your documentation score (a measure of documentation completeness — not legal merit)
• To send transactional emails (case updates, receipt confirmations)
• To connect you with attorneys only with your explicit written consent
• To improve our AI models and platform (anonymized/aggregated only)
• To comply with legal obligations

Evidence Files

Evidence files you upload are stored in private, encrypted cloud storage. They are never publicly accessible. Access is via signed URLs that expire after 15 minutes. Files are only shared with attorneys you explicitly authorize via written consent.

Third-Party Service Providers

We use the following third-party services to operate the platform. Each is bound by their own privacy policy and data processing agreements:

• Supabase — database and file storage (supabase.com/privacy)
• Stripe — payment processing; receives billing name, email, and card details (stripe.com/privacy)
• Anthropic — AI document generation; receives anonymized case facts, never your name or payment info (anthropic.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• Vercel — hosting and edge infrastructure; may log IP addresses briefly for security (vercel.com/legal/privacy-policy)

We do not share your personally identifiable information with any other third parties except as required by law.

Cookies and Tracking

We use the following cookies and tracking technologies:

• Authentication cookies — session tokens set by Supabase to keep you logged in. These are strictly necessary and cannot be disabled.
• Analytics cookies — we log anonymized page view data (hashed visitor ID, page URL, timestamp) in our own database to understand how users navigate the platform.
• Meta Pixel (Facebook) — we use the Meta Pixel to measure the effectiveness of our advertising and understand how visitors interact with our site. This sends anonymized event data (page views, button clicks) to Meta Platforms, Inc. Meta may use this data per their own privacy policy (facebook.com/privacy). You may opt out via your Meta ad preferences or a browser ad-blocker.

We do not use behavioral profiling for third-party ad targeting beyond standard conversion measurement. You may disable non-essential cookies in your browser settings, though this may affect platform functionality.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party for marketing purposes. Attorney referrals are only made with your explicit written consent, and are considered a service delivery — not a data sale.

New Jersey Residents (NJDPA)

If you are a New Jersey resident, under the New Jersey Data Privacy Act (P.L.2023, c.266, effective January 15, 2025) you have the right to:

• Access: Confirm whether we process your personal data and obtain a copy
• Correction: Correct inaccuracies in your personal data
• Deletion: Delete personal data you have provided or that we have collected about you
• Portability: Obtain a copy of your personal data in a portable format
• Opt out of profiling: Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in such profiling.
• Opt out of targeted advertising: We do not sell your data or use it for targeted advertising to third parties.

To exercise any of these rights, email support@thefightbackapp.com. We will respond within 45 days. If we deny your request, you may appeal by replying to our denial response. If the appeal is denied, you may contact the New Jersey Division of Consumer Affairs.

Automated Decision-Making: Our Documentation Score (0–100) is generated by automated calculation. It measures documentation completeness only — not legal merit. You may request human review of this score at any time.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: (1) know what personal information we collect; (2) delete your personal information; (3) correct inaccurate personal information; (4) opt out of the sale or sharing of personal information (we do not sell or share personal information); (5) limit use of sensitive personal information; (6) non-discrimination for exercising these rights.

California residents also have rights under AB 853 regarding AI-generated content. All AI-generated documents on this platform are labeled as AI-generated. You have the right to request human review of any automated output by emailing support@thefightbackapp.com.

Automated Decision-Making Technology (ADMT): We use automated tools to calculate a Documentation Score. This score affects only document generation within our platform and does not constitute a legal evaluation, employment decision, credit decision, or housing decision. To opt out of this automated processing, email support@thefightbackapp.com — you may continue using the platform with manual document generation.

Data Deletion

You may request deletion of your account and all associated personal data at any time. To submit a deletion request:

• Email support@thefightbackapp.com with subject line "Data Deletion Request"
• Include the email address associated with your account
• We will confirm receipt within 5 business days
• Deletion will be completed within 30 days of confirmed identity verification
• We will notify you by email when deletion is complete

Some data may be retained where required by law (e.g., transaction records for tax purposes) or where legitimate business interests require retention (e.g., records of attorney referral consent). We will inform you of any such exceptions at the time of your request.

Data Retention

We retain your account and case data for as long as your account is active, plus 12 months following account closure to satisfy legal obligations. Payment transaction records are retained for 7 years per IRS requirements. Attorney referral consent records are retained for 5 years. Evidence files are deleted within 30 days of a verified account deletion request.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within the timeframe required by applicable state law — no later than 30 days for New Jersey residents (NJDPA), 72 hours for California residents (CCPA), and as required by other applicable state breach notification laws. Notification will be sent to the email address associated with your account and will describe the nature of the breach, data affected, steps we have taken, and steps you can take to protect yourself.

Security

We use industry-standard encryption in transit (TLS) and at rest. Our database uses Row Level Security ensuring you can only access your own data. We conduct periodic security reviews.

Contact

SIGNALFORGEIO LLC dba The Fightback App

460 Redwood Ave · Absecon, NJ 08205

Privacy questions: support@thefightbackapp.com