1. Your Rights

• ✓Right to Access: request a complete copy of all personal data we hold about you.
• ✓Right to Deletion: request that we delete your account and all associated personal data.
• ✓Right to Correction: request that we correct inaccurate personal information.
• ✓Right to Portability: request your data in a machine-readable format (JSON or CSV).
• ✓Right to Opt Out: opt out of any non-essential data processing at any time.
• ✓Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.

2. How to Request Data Deletion

To delete your account and all associated data: Option 1 — In-app: Log in → Account Settings → Delete Account → Confirm deletion. Option 2 — Email: Send an email to [email protected] with the subject line 'Data Deletion Request'. Include the email address associated with your account. We will confirm receipt within 5 business days and complete the deletion within 45 days as required by CCPA.

3. What Gets Deleted

• ✓Your account and login credentials.
• ✓Your email address and profile information.
• ✓All uploaded documents and bill images.
• ✓Your scan history and analysis results.
• ✓Your dispute filing history.
• ✓Your waitlist signup record.
• ✓Any preferences or settings associated with your account.

4. What We Retain After Deletion

• ✓Anonymized, aggregated usage statistics that cannot be linked back to you.
• ✓Records required by law (e.g., transaction records for tax purposes, for the legally required retention period).
• ✓Backup copies, which are purged on our standard backup rotation schedule (maximum 90 days after deletion request).

5. How to Request Your Data

To receive a copy of your data, email [email protected] with the subject line 'Data Access Request'. We will provide a downloadable copy of your data within 45 days. The data export will include your account information, scan history, and any stored preferences.

6. California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have additional rights: • Right to know what personal information is collected, used, shared, or sold. • Right to delete personal information held by businesses. • Right to opt out of the sale of personal information (note: we do not sell personal information). • Right to non-discrimination for exercising CCPA rights. To submit a CCPA request, contact us at [email protected] or call our toll-free number (coming soon).

7. European Users (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR) including the right to erasure ('right to be forgotten'), the right to data portability, and the right to lodge a complaint with your local data protection authority. Contact [email protected] to exercise any GDPR rights.

8. Response Times

We respond to all data rights requests within 10 business days of receipt. We complete all requests within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial 45-day period.