Privacy Policy

Effective August 16, 2026 · Written to be read, not skimmed past.

The short version

No account? Nothing leaves your device. The entire wizard — names, finances, elections — runs in your browser and saves to your browser's local storage. We never see it.
With an account, your progress syncs — encrypted on your device first. Your financial details are sealed with a key derived from your password before upload. We store ciphertext we cannot read.
We never see your card. Payments are handled entirely by Stripe, a PCI DSS Level 1 processor.
Delete means delete. One button in the app permanently erases your account and synced data.
We do not sell, share, or advertise with your data. Ever.

What we store, exactly

Data	When	How it's held	For how long
Your agreement answers & financial disclosures	Always	Your own browser (local storage)	Until you clear it
Synced copy of the above	Only if you create an account	Encrypted on your device (AES-256-GCM, key derived from your password), then stored on Cloudflare's network. We hold ciphertext only.	Until you delete your account
Email + password	Account holders	Password is never stored — only a salted PBKDF2-SHA256 hash (100,000 iterations)	Until you delete your account
Sign-in sessions	Account holders	Random token in a secure, HttpOnly cookie	30 days, then auto-expires
Purchase records	Buyers	Email, product, amount — never card numbers (those stay with Stripe)	Kept as required for accounting
IP address	Sign-in and AI-intake requests	Abuse-rate counters only	Auto-deleted after 1 hour
Documents you upload to AI intake	If you use that feature	Processed in memory to extract fields, sent to Anthropic's API for reading; not saved by us afterwards	Not retained

What "encrypted on your device" means for you

When you create an account, your browser derives an encryption key from your password and seals your synced data before it leaves your device. Our servers store the sealed version. Nobody with access to our systems — including us — can open it.

The honest trade-off: because your password is the key, resetting a forgotten password clears the synced copy (it cannot be decrypted without the old password). The copy on your own device is untouched, and re-syncs the next time you sign in there.

Who touches your data

Cloudflare — hosts the site and stores the (encrypted) synced data.
Stripe — processes payments. Card details go directly to Stripe and never touch our servers.
Anthropic — powers the optional AI document reader. Uploaded statements are sent for field extraction and are not used to train models per Anthropic's API terms.
Resend — delivers password-reset emails.

That is the complete list. No analytics trackers, no ad networks, no data brokers.

Your rights (California and everywhere else)

California residents have the right under the CCPA/CPRA to know what personal information we hold, to delete it, and to not have it sold — we sell nothing, so that last one is automatic. We extend the same rights to everyone regardless of state:

Delete: the "Delete" button next to your account in the app erases your account, synced data, and session permanently — no email required, no waiting period.
Access: the "Export my data" button in the app downloads everything as JSON.
Questions or requests: use the Talk to an attorney booking on any page, or the chat assistant in the corner. Formal privacy requests are honored within 30 days.

The fine print, briefly

We may update this policy; material changes will be dated at the top of this page. This site is a self-help document platform, not a law firm — communications with it are not privileged. If we are legally compelled to produce records, encrypted data remains encrypted (we cannot decrypt it). Post Nup Clarity is operated in partnership between Chatila Law and Endurance AI Labs.