Privacy Policy

Resolvaio, owned and operated by Nikola Innovations Limited (“we,” “us,” “our”), respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use our website and services at resolvaio.com and app.resolvaio.com.

1. Information We Collect

1.1 Account Information

When you register, we collect your email address and a hashed password. We also record your account creation date and a unique user identifier.

1.2 Case and Dispute Data

When you use the Service, we collect information about your dispute, including:

• Answers to diagnostic questions (jurisdiction, dispute type, amounts, dates)
• Case status and history
• Generated demand letters, email sequences, and filing packets
• Reported outcomes (optional, with your consent)

1.3 Uploaded Documents

You may upload documents such as lease agreements, billing statements, photos, and screenshots. Accepted formats include PDF, JPEG, PNG, HEIC, and HEIF (maximum 10 MB per file). We use AI vision to extract relevant data from these documents to generate your letters.

1.4 Payment Information

Payments are processed by Polar. We store Polar order IDs, subscription IDs, payment status, and billing period dates. We do not store your credit card number, CVV, or bank account details. That information is handled entirely by Polar. See Polar’s Privacy Policy.

1.5 Automatically Collected Information

• Authentication logs: IP address, user agent, login timestamp, and success/failure status for security purposes.
• Analytics: We use Plausible Analytics, a privacy-focused, cookie-free analytics service. Plausible collects aggregate page views and custom events (e.g., case created, letter generated) without personal identifiers. See Plausible’s Data Policy.
• Error tracking: We use Sentry to capture application errors. Error reports may include request traces and, optionally, a user identifier for debugging. See Sentry’s Privacy Policy.

2. How We Use Your Information

• Provide the Service: Generate demand letters, cancellation sequences, and filing packets based on your case information.
• Process payments: Facilitate transactions through Polar and manage subscription status.
• Send transactional emails: Deliver generated documents, account confirmations, and deadline reminders via Resend.
• Improve the Service: Analyze aggregate, anonymized usage patterns to improve reliability and user experience.
• Security and fraud prevention: Monitor for abuse, unauthorized access, and fraudulent activity.
• Legal compliance: Respond to lawful requests and comply with applicable law.

3. Third-Party Service Providers (Sub-Processors)

We share data with the following providers solely to operate the Service:

OpenAI Zero Data Retention: We have enabled zero data retention on our OpenAI API account. This means OpenAI does not store your case data or document contents after processing and does not use your data to train its models.

4. Cookies and Tracking Technologies

We use strictly necessary cookies only for authentication (Convex Auth session cookies). We do not use advertising cookies, marketing pixels, or third-party tracking cookies. Our analytics provider (Plausible) is entirely cookie-free. See our full Cookie Policy for details.

5. Data Retention

• Account data: Retained for the lifetime of your account.
• Case data and documents: Retained for the lifetime of your account. Deleted when you delete your account.
• Payment records: Transaction records are retained for 7 years for tax and regulatory compliance, even after account deletion.
• Authentication logs: Login attempt records are retained for 90 days for security purposes.
• Audit logs: System audit logs are anonymized (not deleted) upon account deletion and retained for operational integrity.
• Statute search cache: Tavily search results are cached for 30 days and contain no personal information.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of sensitive fields at rest
• HTTPS encryption for all data in transit
• Row-Level Security (RLS) ensuring users can only access their own data
• Hashed passwords (never stored in plaintext)
• Rate limiting and IP-based abuse prevention
• Webhook signature verification for payment events

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 All Users

All users have the right to:

• Access: Export a full copy of your data in JSON format via your account settings or by emailing us.
• Deletion: Permanently delete your account and all associated data (cases, documents, letters, sequences, subscriptions) via your account settings or by emailing us. Deletion is cascading and includes files stored in our cloud storage.
• Correction: Update your account information through your account settings.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, email support@resolvaio.com with the subject “CCPA Request.” We will respond within 45 days.

7.3 Other US State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others) may have similar rights to access, delete, and correct their personal data. Contact us at support@resolvaio.com to exercise these rights.

8. Do Not Sell or Share My Personal Information

We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes. Data shared with our sub-processors (listed in Section 3) is shared solely to provide the Service to you.

9. Children’s Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@resolvaio.com and we will delete it promptly.

10. International Users

The Service is designed for United States consumers. If you access the Service from outside the United States, please be aware that your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries, data export requests, or data deletion requests, contact us at:

Email: support@resolvaio.com

Subject line: “Privacy Request”

We will respond to all verified requests within 30 days.