Privacy Policy

1. Introduction

Duty To Assist ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at dutytoassist.com. We are not affiliated with the U.S. Department of Veterans Affairs (VA).

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and applicable state privacy laws including Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).

2. Information We Collect

2.1 Personal Information

• Name and contact information (email, phone)
• Account credentials (encrypted passwords)
• Service history and military information (optional)
• Medical conditions and claim details (optional)
• Uploaded documents and files
• Payment information (processed securely via Stripe)

2.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Operating system
• Usage patterns and analytics
• Cookies and similar technologies

3. How We Use Your Information

We use your information to:

• Provide and improve our services
• Generate VA forms and documents
• Track claim progress (for registered users)
• Send notifications and updates
• Process payments for premium services
• Comply with legal obligations
• Prevent fraud and abuse

4. Data Security

We implement industry-standard security measures including:

• 256-bit SSL/TLS encryption for all data transmission
• AES-256 encryption for stored data
• Secure cloud storage with Firebase/Google Cloud
• Regular security audits and penetration testing
• Multi-factor authentication (MFA) for accounts
• Role-based access controls

5. Your Privacy Rights

Depending on your location, you have the following rights:

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Account data: Retained until you delete your account or 2 years of inactivity
• Claim information: Retained for 7 years for legal compliance
• Payment records: Retained for 7 years per tax requirements
• Usage logs: Retained for 12 months for security purposes

7. Children's Privacy

Our services are intended for U.S. military veterans aged 18 and older. We do not knowingly collect information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately.

8. International Data Transfers

Your data is stored and processed in the United States. If you are accessing our services from outside the U.S., you consent to the transfer of your information to the U.S., which may have different data protection laws than your country.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our platform. The "Last Updated" date at the top of this page indicates when this policy was last revised.