Privacy Policy

1. Information we collect

Account and authentication information

When you create or use an account, we process your email address, optional display name, immutable account and user identifiers, account memberships and roles, trial history, session and security records, and timestamps such as account creation and last sign-in. Supabase Auth handles passwords and authentication tokens; the application does not store or log your password.

Judgment Ledger information

We process the judgment and case information you enter, including party names, case numbers, courts, dates, principal, rates, costs, payments, credits, statutory references, notes, calculation results, saved reports, supporting-document metadata, and private uploaded PDF or image files.

Subscription and transaction information

If you purchase a paid subscription, Stripe processes the payment and provides the billing portal. Payment details are entered through Stripe. CA Judgment Calculator does not receive or store full payment-card numbers. We retain account-level Stripe identifiers, the selected plan, subscription and invoice information, confirmed paid-through access, consent and policy versions, the renewal disclosure accepted, and purchase acknowledgments.

Operational and security information

We may process request timestamps, error and delivery status, security events, configuration and deployment diagnostics, and limited technical information needed to authenticate requests, prevent abuse, investigate failures, and operate the service. We do not retain an IP address or full user-agent string as part of your subscription consent record.

Limited first-party product measurement

We create a random, opaque identifier in your browser for limited first-party product measurement. It is not based on your identity, device fingerprint, IP address, or advertising identifier. We record only fixed, named events: the optional visitor survey being shown, answered, or dismissed; a calculation being completed; Save being selected; the Save signup gate being shown or dismissed; the signup form being shown, submitted, completed, or failing within a fixed error category; a locked account screen being viewed; or its ordinary upgrade link being selected.

For a new opaque visitor only, we may store a normalized first-touch acquisition category and provider from a fixed allowlist, plus a coarse mobile, tablet, or desktop category based only on viewport width. We do not store the referring URL, page URL, query string, campaign value, search term, full user-agent string, or device fingerprint. Existing visitors without a first-touch category remain unattributed; their source is not invented or overwritten.

After authentication, server-controlled account transitions may record only whether the account reached a canonical trial or verified purchase and whether it reached its first judgment, first saved ledger entry, first Smart CCP selection, first Enhanced report, or first document upload. We may also record at most one authenticated return fact on Pacific cohort Days 1, 3, 7, and 8 through 45 after the original account trial start. Private locked-screen and Matter Pass measurement, if those surfaces are eligible and available, is limited to aggregate surface, offer-email, checkout, verified-payment, expiration, full-refund authority-removal, and later annual-plan conversion counts. Browser redirects and browser events never establish paid authority.

The optional visitor survey asks only “Which best describes you?” and lets you choose Self-represented judgment creditor, Professional judgment enforcer, Registered process server, Attorney, or Other. “Other” does not request free text. You may answer, choose “Not now,” or ignore the survey. That anonymous visitor-segmentation survey does not offer a discount or require a response.

Former-trial exit survey and promotion

After an account's genuine trial has ended, an eligible former trial user may receive one account-linked invitation to complete a separate short exit survey. The survey asks the primary reason for not subscribing, the feature liked most, optional bounded feedback about frustration and desired improvement, whether price was a factor, an optional annual price in whole dollars and cents, and likelihood of using the service again. Do not provide judgment names, debtor or party information, court or case details, document contents, card information, or other case-specific information in these fields.

A random, single-use survey token associates the response with the eligible account without placing account, user, Stripe, judgment, or case identifiers on the public page. We store only a cryptographic hash of that token. Private records may include the bounded answers; survey scheduling, completion, and delivery status; minimized account and user identifiers; and reward issuance, expiration, redemption, annual plan, invoice amounts, and whole days from completion to a verified annual purchase. These records do not include judgment contents, parties, case details, uploaded documents, card details, signatures, or authentication credentials.

After the first valid completion, an eligible user may receive one customer-specific Stripe promotion code for 20% off the first year of one eligible annual subscription. The code permits one redemption, expires seven days after issuance, cannot be combined with another discount, and does not apply to Matter Pass. The normal full annual price applies at the next renewal unless automatic renewal is canceled. Stripe determines code validity and processes any resulting subscription payment; a survey response or browser confirmation alone never creates paid access.

2. Public calculator data stays local

The public calculator requires no sign-in. Its working calculation data and restored drafts stay in the browser's local storage unless you choose the account flow and save data to a private Judgment Ledger. A generated public report is created from the information in your browser.

Calculator and Judgment Ledger contents are not sent into the product-analytics dataset. Analytics does not receive calculator field values, party or case information, amounts, interest, costs, payments, notes, statutory citations, document information, reports, search terms, sensitive URL details, authentication tokens, payment details, email addresses, names, IP addresses, full user-agent strings, or device fingerprints.

3. How we use information

• Provide calculations, saved ledgers, reports, documents, account access, and customer-requested features.
• Authenticate users and enforce private ownership, roles, plan capacity, trial limits, retention, and deletion rules.
• Process subscriptions and eligible promotion codes, reconcile payments, document consent, and provide purchase acknowledgments.
• Send requested or necessary account, authentication, security, service, billing, renewal, and eligible former-trial survey communications.
• Protect the service, diagnose errors, prevent repeated trials or abuse, comply with law, and maintain accounting and security records.
• Measure the limited calculation-to-purchase funnel, fixed signup-error categories, optional visitor and former-trial survey responses, promotion issuance and redemption, normalized first-touch acquisition, coarse viewport category, named product milestones, and Day 1, 3, 7, and 8–45 return rates so we can understand product use without collecting judgment contents.

4. Service providers

Supabase provides authentication, the PostgreSQL database, private Storage, and server functions. Vercel hosts the static application and request functions. Supabase Auth uses Resend to send authentication messages, and Resend may also send designated service and lifecycle email, including an eligible former-trial survey invitation or reward. If you receive or use a promotion code or purchase a paid subscription, Stripe issues or validates the code, processes the payment, and provides the billing portal. These providers process information for the services they supply under their own contractual and privacy obligations.

We use our existing Supabase infrastructure for the limited product measurement described above. We do not use a separate third-party analytics service, analytics advertising pixel, or session-recording provider.

We may also disclose information when you direct us to, when reasonably necessary to protect rights and security, or when legally required. We do not provide a private judgment-data browser for administrators or customer support.

5. Security

Account data is protected by authentication, access controls, private Storage, owner and membership checks, and server-side security checks. Payment and capacity decisions are controlled by secure server systems. Browser code does not receive administrative or payment credentials.

No system is perfectly secure. Use a unique password, protect your email account and devices, sign out of devices you no longer control, and do not email passwords, recovery links, tokens, full card numbers, or unnecessary sensitive files.

6. Retention and no-backup rule

Active account data is retained to provide the service. When access locks at the trial cutoff or verified paid-through timestamp, a 45-day locked-retention period begins. If you purchase a subscription or successfully resolve a payment problem before deletion occurs, access may be restored. Judgment data becomes eligible for deletion 45 days from the exact timestamp the account becomes locked; the complete 45-day period must elapse before deletion occurs. Judgment records, entries, reports, document metadata, and uploaded files may then be permanently deleted.

We retain verification of affirmative automatic-renewal consent for at least three years after consent or one year after subscription termination, whichever is longer. The deadline uses the server-recorded acceptance timestamp and, when applicable, a verified provider termination timestamp. Browser input, scheduled cancellation, judgment deletion, judgment-data deletion after 45 days, and account-deletion requests cannot shorten it. Purchase acknowledgments and minimal transaction, accounting, fraud-prevention, legal-consent, security, and protected trial/anti-repeat records may be retained for the same required period or longer where reasonably necessary for their purpose or legally required. Provider-retained transaction or security history may follow the provider's retention rules.

The limited consent and purchase evidence does not contain judgment contents, entries, party names, case details, statutory notes, reports, uploaded documents, or stored files. Judgment information remains subject to the separate judgment-deletion and 45-day retention rules above.

Unlinked anonymous event-level product analytics is retained for no more than 90 days. If anonymous continuity is linked to an authenticated account after successful signup, linked event-level analytics and authenticated return facts are retained for no more than 12 months. Private former-trial survey and promotion records are retained for no more than 12 months, subject to limited transaction, accounting, fraud-prevention, legal-consent, security, and provider-retained records described above. Fully de-identified aggregate counts may be retained longer. Choosing “Not now” on the anonymous visitor survey stores an approximately 90-day suppression preference in your browser; answering that visitor survey stores a browser preference intended to prevent it from appearing again. Clearing browser storage may remove those preferences.

7. Judgment and account deletion

Delete This Judgment is separate from account deletion and permanently removes the selected judgment after related file and metadata cleanup. Account deletion is currently handled through support. The account owner may request identity-verified deletion by emailing support@cajudgmentcalculator.com.

An accepted account-deletion request turns off automatic renewal immediately, so you will not be charged for another term. Paid access ends when deletion is completed, with no prorated refund or credit. Account content is permanently deleted except for limited transaction, accounting, fraud-prevention, security, legal-consent, and protected trial-history records that are legally required or reasonably necessary for those limited purposes. Any active subscription must be ended before account deletion is completed. Retained consent evidence does not include judgment contents or files. Deletion does not create eligibility for another trial.

8. Your choices and requests

You can use the public calculator without an account, choose what judgment information to save, ignore an optional visitor or former-trial survey, download or print generated reports while access permits, delete individual judgments, and manage sessions and profile information in the Account Center. Completing the former-trial survey is optional; the associated promotion is available only after a first valid eligible completion under the stated restrictions. You may request access, correction, or deletion assistance by emailing support. We may need to verify that you control the account before acting.

9. No sale or targeted advertising

We do not sell personal information or analytics data, use judgment information for targeted advertising, use an advertising network, use analytics for advertising, or use session recording. The limited first-party measurement described above is not a separate third-party analytics service. Legally essential authentication, security, and service storage cannot always be disabled while an account remains active. If these practices change, this Policy and any required choices will be updated before the change applies.

10. Changes to this Policy

We may update this Policy as the service changes. The version and last-updated date identify the policy tied to subscription consent. When required, we will provide notice or obtain new consent before a material change applies.

11. Contact

For privacy questions or verified requests, use the support email above.