Privacy Policy

1. Introduction

ReviewSeverance.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our severance agreement analysis services.

2. Information We Collect

2.1 Information You Provide Directly

• Payment Information: Processed securely through Stripe (we do not store credit card details or personal account information)
• Document Content: PDF files you upload for analysis (processed immediately and not stored)
• Communication: Messages you send to our support team, but not limited to email inquiries and feedback

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, features used, but not limited to browsing patterns and service interactions
• Device Information: Browser type, operating system, IP address, but not limited to device identifiers and network information
• Cookies: Authentication cookies for session management (temporary only)
• Log Data: Server logs, error reports, performance metrics, but not limited to security events and system diagnostics

2.3 Third-Party Information

• Stripe: Payment processing and transaction data only
• OpenAI: Document analysis processing (content is anonymized and not stored by us or OpenAI)

2.4 What We DO NOT Collect or Store

3. How We Use Your Information

3.1 Primary Services

• Analyze your severance agreements using AI technology (processing only, no storage)
• Generate personalized reports for immediate download
• Process payments securely through Stripe
• Provide tier-based access during your session

3.2 Service Improvement

• Monitor system performance and security, but not limited to error tracking and optimization
• Analyze usage patterns in aggregate (no individual tracking)
• Ensure security and prevent fraud

3.3 Communication

• Provide customer support for immediate issues
• Send payment confirmations and receipts
• Respond to your inquiries, but not limited to technical support and service questions

4. Information Sharing and Disclosure

4.2 Service Providers

We may share limited information with trusted third parties who assist in operating our services, but not limited to:

• Stripe: Payment processing only (PCI DSS compliant)
• OpenAI: Document analysis processing (content is anonymized, processed immediately, and not stored)
• Cloud Hosting: Secure infrastructure providers (for website hosting only)

4.3 Legal Requirements

We may disclose information when required by law, but not limited to:

• Compliance with legal processes or government requests
• Protection of our rights, property, or safety
• Prevention of fraud or security threats
• Enforcement of our Terms of Service

5. Data Security

5.1 Security Measures

• Encryption: All data transmitted using HTTPS/TLS
• Minimal Storage: We store minimal information, reducing security risks
• Immediate Processing: Documents are processed and deleted immediately
• Secure Infrastructure: Canadian-based secure hosting, but not limited to encrypted storage and access controls

5.2 Document Handling

6. Data Retention

6.1 Minimal Retention Policy

• Payment Records: Stripe retains payment information per their policies (we do not store payment details)
• Analysis Reports: Available for immediate download only (not stored on our servers)
• Usage Logs: Retained for 30 days for security and performance monitoring only
• No Account Data: We do not maintain accounts, so there is no account data to retain

6.2 Automatic Deletion

• Uploaded Documents: Deleted immediately after processing (within minutes)
• Session Data: Cleared when your browser session ends
• Temporary Files: Automatically purged from our systems

7. Your Rights and Choices

7.1 Data Subject Rights

Given our minimal data collection practices:

• Right to Know: This policy describes all data we collect
• Right to Delete: Most data is automatically deleted; contact us for any concerns
• Right to Access: We can provide information about our minimal data practices
• Right to Portability: Limited applicability due to minimal data storage

7.2 Practical Limitations

• No Account Data: We cannot update, correct, or delete account information we don't store
• No Document Access: We cannot provide copies of documents we don't retain
• Session-Based Service: Most data rights are automatically fulfilled through our no-storage approach

8. International Data Transfers

8.1 Canadian Operations

• Primary Operations: Based in Canada with Canadian data protection standards
• Third-Party Services: Some services (Stripe, OpenAI) may process data internationally
• Minimal Transfer: Limited data transfer due to our minimal collection practices

8.2 Cross-Border Processing

If you are located outside Canada, please note that minimal data may be processed in Canada and by our international service providers, but not limited to payment processing and AI analysis services.

9. Privacy Rights by Jurisdiction

9.1 Canadian Privacy Rights (PIPEDA)

• Minimal Collection: We collect only what is necessary for service delivery
• Consent: Your use of our service constitutes consent for described processing
• Access Rights: Limited by our minimal data storage practices

9.2 California Privacy Rights (CCPA)

If you are a California resident:

• Right to Know: Described in this policy
• Right to Delete: Mostly automatic due to our practices
• Right to Opt-Out: We don't sell personal information
• Non-Discrimination: We don't discriminate based on privacy choices

9.3 European Privacy Rights (GDPR)

If you are in the European Union:

• Lawful Basis: Legitimate interests and consent
• Data Minimization: We collect and store minimal data
• Right to be Forgotten: Largely automatic through our deletion practices

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by, but not limited to:

• Posting the updated policy on our website
• Displaying a prominent notice on our website
• Email notification if we have your contact information

11. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

12. Effective Date

This Privacy Policy is effective as of September 1st, 2025 and was last updated on September 1st, 2025.