Privacy Policy
Last updated: April 24, 2026.
We collect only what we need to help you file a VA claim: identifying information, service history, claimed conditions, evidence you upload, and communications with our AI Concierge and accredited agents. We never sell your data. Ever.
What we collect
- Account: email, name, state.
- Intake: branch, dates of service, discharge type, claimed conditions, evidence notes.
- Documents: files you upload to your encrypted evidence vault.
- Conversations: AI Concierge messages and accredited-agent secure messaging.
How we use it
Only to help you file or appeal a VA claim, improve the product in aggregate form (no personally identifying data), and communicate with you about your claim status.
Your rights under state privacy laws
California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (CDPA), Colorado Privacy Act (CPA), Connecticut CTDPA, Texas TDPSA, Utah UCPA, Iowa ICDPA, Oregon OCPA, Tennessee TIPA, Indiana CDPA, Delaware, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Rhode Island, Montana, and the upcoming Wisconsin, Pennsylvania, New York, Massachusetts, and Michigan privacy laws: you may request access, deletion, correction, and opt-out at [email protected].
HIPAA
When you upload medical records or service treatment records, we treat them as protected health information. If you authorize us to retrieve records from VHA or a private provider, we sign a Business Associate Agreement with that provider per VHA Directive 1605.05.
Security
Client-side AES-256 encryption on documents. Per-veteran key envelope. TLS 1.3 in transit. Encrypted at rest. Annual penetration testing. SOC 2 Type II audit scheduled Y2.
Contact
[email protected] or MF Automations LLC, 233 NE 27th St, Miami, FL 33137.