Privacy Policy

1. Information We Collect

Account Information: Name, email address, organization name, professional role, and password (hashed).

Uploaded Documents: Evidence files, PDFs, images, emails, and other documents you upload to the Platform for processing and analysis.

AI Query Logs: Prompts submitted to AI analysis features and the resulting outputs, retained for system improvement and audit purposes.

Usage Data: Login timestamps, feature usage, page views, browser type, IP address, and device information collected automatically.

Payment Information: Billing details are processed by Stripe and are not stored on Ceceron's servers. We receive only a tokenized reference and subscription status from Stripe.

2. How We Use Your Information

• To provide, maintain, and improve the Platform
• To process document analysis using AI models
• To authenticate your identity and manage your subscription
• To detect fraud, abuse, and security threats
• To generate usage analytics for service improvement (aggregated, not individually identified)
• To send transactional emails (receipts, verification, security alerts)
• To comply with legal obligations

We do not use your uploaded evidence or case data for model training without your explicit consent.

3. Data Retention

Active account data is retained while your account is active. Uploaded documents and evidence files are retained for 90 days after account cancellation, then permanently deleted. AI query logs are retained for 12 months. Audit logs are retained for 7 years for compliance purposes. You may request early deletion of your data as described in Section 7.

4. We Do Not Sell Your Data

Ceceron Consumer Recovery LLC does not sell, rent, or trade your personal information or your uploaded content to any third party for commercial purposes. We may share aggregated, de-identified statistical data that cannot be used to identify you.

5. Third-Party Services

We use the following third-party services to operate the Platform:

• Anthropic: AI analysis of uploaded documents. Data is processed under Anthropic's enterprise API terms.
• Stripe: Payment processing. Governed by Stripe's Privacy Policy.
• Neon/PostgreSQL: Database hosting. Data stored in the United States.
• Vercel: Platform hosting and CDN. Data processed in the United States.
• Resend: Transactional email delivery.

6. CCPA Compliance (California Residents)

California residents have the right under the California Consumer Privacy Act to:

• Know what personal information we collect and how it is used
• Request deletion of personal information we hold about you
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, email privacy@ceceron.com with your request.

7. Your Rights and Choices

Data Export: You may request an export of all data associated with your account at any time through the Account Settings page.

Account Deletion: You may delete your account through the Account Settings page. We will delete your personal information and uploaded content within 90 days.

Correction: You may update your profile information through the Account Settings page at any time.

Communication Preferences: You may opt out of marketing communications. Transactional emails (security, billing) cannot be opted out of while your account is active.

8. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. However, no system is perfectly secure. You are responsible for maintaining the confidentiality of your login credentials.

9. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors.

10. Contact Us

Privacy questions or requests: privacy@ceceron.com

Ceceron Consumer Recovery LLC | Dallas County, Texas