Last updated: May 2026
Data We Collect: Email address (hashed), professional profile information you enter, analysis results (encrypted at rest with AES-256-GCM). We never collect Social Security numbers, passport numbers, or financial details in readable form.
How We Use It: To provide eligibility analysis, power the AI counselor, send policy alert emails (if subscribed). We do not sell your data to third parties.
Data Retention: Petition session data is automatically deleted after 90 days. You can request immediate deletion at any time via account settings.
Your Rights (GDPR/CCPA): Right to access, right to deletion, right to portability. Email privacy@immai.app to exercise these rights, or use the self-service tools in your account settings.
Third-Party Processors: Supabase (database), Anthropic Claude (AI analysis), Resend (email), Railway (hosting). Each is bound by data processing agreements.