Privacy Policy

1. Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Account registration data: name, email address, password
• Payment information processed securely through Stripe (we never store card numbers)
• HOA violation details, notice text, and CC&R documents you upload for AI analysis
• Messages sent through our contact form or AI chat interface
• Any other information you voluntarily provide

Information Collected Automatically

• Log data: IP address, browser type, operating system, referring URLs, pages visited, time and date of visits
• Device identifiers and usage data collected through cookies and similar tracking technologies
• Interaction data: features used, buttons clicked, time spent on pages

Information from Third Parties

• Authentication data if you sign in using Google or other OAuth providers
• Payment status and subscription data from Stripe

2. How We Use Your Information

We use collected information to:

• Create and manage your account, authenticate your identity, and maintain session state
• Process payments and manage subscription billing through Stripe
• Operate the AI violation analysis tool, including sending your submitted content to OpenAI's API for processing
• Improve, personalize, and expand our services based on usage patterns
• Communicate with you about your account, transactions, security alerts, and support requests
• Send optional marketing communications (you may opt out at any time)
• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraudulent or abusive use of our services
• Display relevant advertising through Google AdSense and related advertising networks (see Section 6)

3. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Service providers: We share data with vendors who help operate the site, including Firebase (authentication and database), Stripe (payments), OpenAI (AI processing), and Vercel (hosting). Each is bound by its own privacy and data protection commitments.
• Advertising partners: We use Google AdSense to display advertisements. Google may use cookies and device identifiers to serve personalized ads based on your browsing history. See Section 6 for details and opt-out options.
• Legal requirements: We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of our users or the public.
• Business transfers: If we merge with or are acquired by another company, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• All data is transmitted over HTTPS (TLS encryption)
• Payment card data is processed directly by Stripe and never stored on our servers
• User passwords are hashed and salted; we cannot retrieve them in plain text
• Firebase security rules restrict database access to authenticated users for their own data only
• HOA documents you upload for AI analysis are not retained beyond your active session unless you explicitly save them to your account

No method of internet transmission or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for authentication, session management, and core site functionality. These cannot be disabled without breaking the service.
• Analytics cookies: Used to understand how visitors interact with our content, which pages are most useful, and where users drop off in our conversion funnel. Data is aggregated and anonymized where possible.
• Advertising cookies: Google AdSense uses cookies to measure ad performance and serve personalized advertisements. These cookies may track your browsing behavior across sites to build a profile for ad targeting.

You can control cookie settings through your browser preferences. Disabling cookies may affect site functionality, particularly authentication and the AI chat interface.

6. Advertising and Google AdSense

This site uses Google AdSense to display advertisements. Google AdSense is a third-party advertising service operated by Google LLC. By using this site, you acknowledge that:

• Google and its partners may use cookies, web beacons, and device identifiers to serve ads based on your prior visits to this site and other sites on the internet
• Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet
• The DoubleClick cookie enables Google and its partners to serve ads based on your visits to this and other websites
• We earn revenue from ad impressions and clicks on advertisements displayed on this site

Opt-out options:

• Visit Google Ads Settings to opt out of personalized advertising
• Visit the NAI opt-out page to opt out of interest-based advertising from participating networks
• Install the Google Analytics Opt-out Browser Add-on

For more information on how Google uses data when you use our site, see Google's Privacy & Terms.

7. Your Privacy Rights

Depending on your location, you may have additional rights under applicable privacy law:

All Users

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of marketing communications at any time

California Residents (CCPA)

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information (subject to certain exceptions)
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising CCPA rights

European Economic Area / UK Residents (GDPR)

• Right of access, rectification, erasure ("right to be forgotten"), and data portability
• Right to restrict or object to processing
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@fixmyhoaviolation.com. We will respond within 30 days.

8. Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained for the life of your account. Deleted within 30 days of a verified deletion request.
• AI session data: Conversation history is retained in your account until you delete it. Unregistered session data is not stored beyond the browser session.
• Payment records: Retained for 7 years as required by financial regulations. Stripe retains transaction records independently per their policy.
• Log data: Server logs are retained for 90 days for security and debugging purposes.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@fixmyhoaviolation.com and we will delete it promptly.

10. Third-Party Links

Our site may contain links to third-party websites, including state government statute databases, legal resources, and partner services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the site. Your continued use of the site after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@fixmyhoaviolation.com
• General inquiries: support@fixmyhoaviolation.com
• Website: fixmyhoaviolation.com/contact