Privacy Policy
Effective date: March 31, 2026
1. What We Collect
DepositHawk collects a minimal amount of information to operate the Service:
- Email address — collected via Stripe checkout when you purchase a paid plan. We use this to deliver your documents and provide transactional support.
- State selection — the state you select when using the rights checker or document generator.
- Deduction descriptions — the deduction line items you enter are used solely to generate your demand letter and are not retained after generation.
2. What We Don't Collect
In v1 of DepositHawk, we do not collect the following:
- No user accounts or passwords.
- No persistent server-side storage of dispute details or deduction data.
- No social login or third-party identity data.
- No behavioral tracking or advertising profiles.
We do not sell, rent, trade, or otherwise transfer your personal information to third parties for marketing purposes. Ever.
3. Payment Processing
All payment processing is handled entirely by Stripe, Inc. DepositHawk never sees, receives, or stores your payment card number, CVV, or full billing address. When you complete a purchase, your card data goes directly to Stripe’s servers over an encrypted connection.
Stripe’s privacy practices are governed by the Stripe Privacy Policy.
4. Email Communications
Transactional emails (purchase confirmations, document delivery) are sent via SendGrid using the email address you provide at checkout. These emails are necessary to deliver the service you paid for.
We do not send marketing or promotional emails without your explicit consent. You will not be added to any mailing list as a result of purchasing from DepositHawk.
5. No Data Sold
DepositHawk does not sell, license, or share your personal information with any third party for commercial or advertising purposes. This applies now and in the future.
6. Cookies
In v1, DepositHawk uses only essential cookies required for the Service to function (e.g., session state during checkout). We do not use tracking cookies, advertising cookies, or third-party analytics cookies that build behavioral profiles.
Essential cookies are strictly necessary and cannot be disabled without breaking the Service.
7. Data Retention
Dispute data — including deduction descriptions, state selections, and letter inputs — is not stored server-side in v1. Letters are generated on-demand and are not retained by DepositHawk after generation.
Your email address (collected via Stripe) is retained only as long as necessary to fulfill your purchase and comply with legal obligations (e.g., financial recordkeeping requirements). We do not retain your email for marketing purposes.
8. Your Rights (CCPA / GDPR)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). These rights include the right to access, correct, or delete any personal data we hold about you.
Because DepositHawk retains only your email address (and only for transactional purposes), a deletion request typically means removing your email from our records. To exercise any data rights, contact us at support@deposithawk.com. We will respond within 30 days.
9. Contact
Questions about this Privacy Policy or how your data is handled? Email us at support@deposithawk.com.