This Privacy Policy describes how Disclosure Navigator LLC ("we," "us," or "our") collects, uses, and shares information about you when you use Disclosure Navigator (the "Service") at app.disclosurenavigator.com. By using the Service, you agree to the practices described here.

1. Information We Collect

Account information. When you register, we collect your email address and (optionally) your name via our authentication provider, Clerk. We may also receive profile information from Google if you sign in with Google OAuth.

Usage data. We collect information about how you interact with the Service: pages visited, features used, search queries, documents viewed, and AI queries submitted. This data is collected through PostHog (analytics) and is used to improve the Service.

Payment information. If you purchase a subscription or token bundle, payment details (card number, billing address) are collected and processed directly by Stripe, Inc. We do not store full payment card information on our servers. We receive a Stripe customer ID and subscription status.

AI queries. Queries submitted to the Ask AI feature are processed by Anthropic (Claude API). These queries may be used to improve AI models as described in Anthropic's usage policies. We store query content in our database to provide session context and improve response grounding.

Technical data. We collect IP addresses, browser type, device information, and error logs through Sentry (error tracking). This data is used solely for diagnosing and fixing technical issues.

2. How We Use Your Information

• To create and manage your account
• To process payments and manage your subscription
• To provide, maintain, and improve the Service
• To send transactional emails (account confirmation, trial expiration notices, billing receipts) via Resend
• To analyze usage patterns and improve product features (PostHog)
• To diagnose and fix errors (Sentry)
• To communicate with you about your account or policy changes
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Third-Party Services

We use the following sub-processors. Each operates under their own privacy policy:

Service	Purpose	Privacy Policy
Clerk	Authentication, account management	clerk.com/privacy
Stripe	Payment processing, subscriptions	stripe.com/privacy
PostHog	Product analytics	posthog.com/privacy
Sentry	Error tracking	sentry.io/privacy
Anthropic	AI language model (Ask AI feature)	anthropic.com/privacy
Resend	Transactional email delivery	resend.com/privacy
Cloudflare	CDN, media storage (R2)	cloudflare.com/privacypolicy
Vercel	Hosting and serverless infrastructure	vercel.com/legal/privacy-policy
Neon	User database (serverless Postgres)	neon.tech/privacy-policy

4. Cookies and Tracking

The Service uses cookies and similar technologies for the following purposes:

• Authentication cookies — set by Clerk to maintain your signed-in session. Strictly necessary; cannot be disabled without logging out.
• Analytics cookies — set by PostHog to track usage patterns. Used in aggregate; no cross-site tracking.
• Preference storage — we store your theme preference (light/dark mode) in your browser's localStorage. No personal data is involved.

We do not use advertising cookies or third-party tracking networks.

5. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal information within 90 days, except where retention is required by law (e.g., billing records retained for 7 years for tax purposes). Anonymized usage analytics may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a portable format
• Objection — object to certain processing (e.g., analytics)

To exercise any of these rights, email hello@disclosurenavigator.com. We will respond within 30 days.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of sale. We do not sell personal information.

EU/EEA residents (GDPR): Our legal basis for processing is: (a) contract performance for account and subscription management; (b) legitimate interests for analytics and error tracking; (c) consent for optional cookies. You may lodge a complaint with your local supervisory authority.

7. Data Security

We use industry-standard security measures including HTTPS encryption in transit, access controls on our database, and security-focused infrastructure providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will delete their account and data promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users by email before material changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Service constitutes acceptance of the updated policy.

10. Contact

For privacy questions, data requests, or concerns, contact: