Privacy Policy

IGOTCHU LLC operates the website igotchuapp.com and the IGOTCHU document analysis service. When this policy says “IGOTCHU,” “we,” “us,” or “our,” it refers to IGOTCHU LLC.

Privacy questions: privacy@igotchuapp.com

We collect information in three ways:

• To complete and deliver your requested analysis
• To send transactional emails: acknowledgment of receipt, delivery of your analysis, and a follow-up satisfaction check
• To operate your subscriber dashboard and maintain your analysis history (subscribers only)
• To process your payment and manage your subscription
• To respond to your support requests
• To improve our service, fix bugs, and develop new features, using aggregate and anonymized data only
• To comply with legal obligations, enforce our Terms of Service, and protect our rights

We do not use your information for targeted advertising. We do not sell your information to data brokers. We do not share your personal information with third parties for their marketing purposes.

Because the documents you submit may contain sensitive personal and financial information, we apply additional protections:

• Purpose limitation: Your documents are used only to generate your analysis. Full stop.
• No AI training: We do not use your submitted documents or analysis content to train, fine-tune, or improve any AI model.
• No third-party sharing: We do not share your documents with any third party, except the AI provider (Anthropic) that processes them to generate your analysis, and cloud storage (Supabase) where they are temporarily stored. Both operate under strict data processing agreements.
• Deletion: Uploaded documents are permanently deleted 30 days after your analysis is delivered. If you have a subscriber account, analysis text may be retained in your dashboard history until you delete it or close your account.
• Encryption: Documents are encrypted in transit (TLS) and at rest.

We work with the following trusted service providers. Each processes your data only as needed to provide their service to us:

• Uploaded documents: Deleted 30 days after analysis delivery
• Analysis text: Retained for subscriber dashboard history; deleted when you close your account or request deletion
• Email address and name: Retained while you have an active account or active subscription; deleted upon account closure and written deletion request
• Payment records: Retained as required by tax and accounting law (typically 7 years), in the form of Stripe transaction records, not card data
• Anonymous analytics: Retained indefinitely in aggregate form with no personal identifiers

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data. We will process deletion requests within 30 days. Note that some data may be retained to comply with legal obligations.
• Portability: Request your data in a machine-readable format
• Opt-out of non-transactional emails: Unsubscribe from any marketing or follow-up emails at any time using the unsubscribe link in any email

To exercise any of these rights, email privacy@igotchuapp.com. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, email privacy@igotchuapp.com with “CCPA Request” in the subject line.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws. Our legal bases for processing your data are: performance of a contract (delivering the analysis you purchased), legitimate interest (improving and securing the service), and consent (any non-transactional communication, which you may withdraw at any time).

In addition to the rights listed above, you have the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority. To exercise any GDPR right, email privacy@igotchuapp.com with “GDPR Request” in the subject line. We will respond within 30 days.

IGOTCHU is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

We implement industry-standard security measures including TLS encryption for all data in transit, encryption at rest for stored documents, access controls limiting which personnel can access user data, and regular security reviews. No security system is perfect. If you discover a security vulnerability, please report it to security@igotchuapp.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have an account) and by updating the date at the top of this page. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Privacy questions, data requests, or concerns:

IGOTCHU LLC
Email: privacy@igotchuapp.com
Response time: within 30 days for data requests, within 2 business days for general questions