Privacy Policy

1. Zero-Tracking Declaration

Privacy Resolve does not use tracking pixels, session recording tools, browser fingerprinting, or third-party analytics on this website. We do not use Google Analytics, Meta Pixel, Hotjar, FullStory, Mixpanel, or any similar third-party tracking service. We do not load fonts, scripts, or stylesheets from external CDNs. All assets are self-hosted. This website makes zero requests to third-party tracking domains.

2. Information We Collect

Privacy Resolve collects the following categories of information, each for a specific and limited purpose:

• Name -- Collected for case identification and correspondence. Provided by you when registering or communicating through the portal.
• Email address -- Collected for case identification, communication, and document delivery. Provided by you during registration or contact.
• Chat messages -- Messages sent through the portal chat feature are stored for case communication and record-keeping purposes.
• IP address -- Logged automatically by our server infrastructure for security purposes, abuse prevention, and system integrity. IP addresses are not used for tracking, advertising, or profiling.

3. Cookies

This website uses a single functional session cookie (portal_access) for authenticated portal access. This cookie is strictly necessary for the portal to function and is exempt from consent requirements under the ePrivacy Directive Article 5(3).

Cookie attributes:

• Name: portal_access
• Purpose: Authenticated session management
• HttpOnly: Yes
• Secure: Yes
• SameSite: Strict
• Duration: 8 hours

No tracking cookies, advertising cookies, or third-party cookies are used on this website. No cookie consent banner is displayed because no non-essential cookies exist.

4. How We Use Information

• Handle case resolution and correspondence
• Provide case-related customer service
• Process settlement agreements and payments
• Comply with legal obligations and record-keeping requirements
• Prevent abuse and maintain system security

5. Third-Party Data Sharing

We do not sell, rent, or share personal data with third parties for marketing or advertising purposes. We share data only with the following service providers, solely for the purposes described:

• Stripe (api.stripe.com, js.stripe.com) -- Payment processing for settlement payments
• DocuSeal (docuseal.com, api.docuseal.com) -- Electronic document signing for settlement agreements

These are the only third-party domains this website connects to. No other third-party services receive your data.

6. Data Retention

• Chat messages and case data: Retained for 7 years consistent with legal record-keeping requirements.
• Security logs (including IP addresses): Retained for 90 days, then automatically purged.
• Contact form submissions: Retained for the duration necessary to respond and resolve the inquiry, then deleted.

7. Data Security

We implement the following technical and organizational measures to protect your data:

• Encryption in transit: All data is transmitted over TLS 1.2 or higher (HTTPS).
• Encryption at rest: Database storage uses AES-256 encryption via Supabase.
• Access controls: Role-based access controls limit data access to authorized personnel.
• Security headers: Content Security Policy, HSTS, and other security headers are enforced on all responses.
• Regular security reviews: Security configurations and dependencies are reviewed regularly.

8. SMS Communications

When you text our business number, you consent to receive SMS replies related to your inquiry. Reply STOP at any time to opt out. Reply HELP for assistance. Message and data rates may apply. Message frequency varies based on your inquiries.

9. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at contact@privacyresolve.com. We will respond to all requests within 45 days.

10. California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of personal information we have collected, subject to legal record-keeping exceptions.
• Right to Opt Out of Sale: We do not sell your personal information. We have never sold personal information and have no plans to do so.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different service quality or pricing for making a rights request.

Categories of personal information collected:

• Identifiers (name, email address)
• Internet activity (IP address, chat messages)
• Professional information (case-related business data)

To exercise your rights, email contact@privacyresolve.com with the subject "CCPA Request." We will verify your identity by confirming the email address associated with your account before processing your request.

11. Do Not Sell My Personal Information

Privacy Resolve does not sell, rent, or trade your personal information to any third party for monetary or other valuable consideration. This applies to all users regardless of geographic location.

If you have questions about this policy or wish to confirm that your data is not being sold, contact us at contact@privacyresolve.com.

12. European Economic Area Visitors (GDPR)

If you are visiting from the European Union or European Economic Area, the following additional disclosures apply:

• Data Controller: Privacy Resolve, operated by Mario Costanz. Contact: contact@privacyresolve.com
• Legal Basis for Processing: Legitimate interest (case resolution and legal compliance) and consent (portal registration and communication).
• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to our processing of your personal data based on legitimate interest.
• Cross-Border Transfers: Your data is processed in the United States. By using this website, you acknowledge that your data will be transferred to and processed in the United States.

To exercise any GDPR rights, email contact@privacyresolve.com with the subject "GDPR Request."

13. Contact Us

For privacy inquiries, data requests, or questions about this policy, contact us at:

• Email: contact@privacyresolve.com
• Phone/Text: (888) 649-4500

14. Changes to This Policy

We may update this privacy policy from time to time. Changes take effect when posted on this page with an updated effective date.