Draft for counsel. Not legal advice.

Privacy Policy

EberApp, LLC, Utah. Draft dated October 26, 2026. Questions: legal@disputeclerk.com or hello@disputeclerk.com.

What we store

When you install the app we store your Stripe account id, the email you give us in settings or Checkout, your product description and policy URLs, and OAuth tokens encrypted with AES-256-GCM. Dispute rows store the fact bundle, narrative, exhibit PDFs, and Stripe file ids needed to submit evidence. If you send usage events, we store the email, optional IP, time, and action you posted.

The marketing waitlist stores the email address you submit and the time you submitted it.

How long

Dispute records, exhibits, and the fact bundle are deleted 90 days after the dispute closes. Win count, loss count, and dollars recovered stay on the merchant account so the dashboard still adds up. Uninstalling the Stripe app deletes the merchant row and the dispute data with it. Waitlist emails stay until you ask us to delete them.

What we do not do

We do not sell personal information. We do not use your customers’ dispute data to train models. The default narrative writer is a template that never leaves the server. If you configure OpenAI, requests are sent with storage disabled. If you configure Anthropic, we send only the fact bundle and the writing instructions.

Cookies

The dashboard uses one HttpOnly session cookie, dc_session, for seven days. It is not used for advertising.

Processors

Stripe processes the OAuth install, dispute updates, and our own subscription checkout. Email, when configured, is sent through Resend. Hosting for this MVP is Render, with Postgres for the database. Policy snapshots may fetch the public URLs you configure.

This page is a draft for counsel. It is not legal advice and should be reviewed before the service is offered to the public.