Privacy Policy

Our privacy-first commitment

ResolveMyAI is built to collect and keep as little personal data as possible (data minimization). You own your evidence. It is stored privately, scoped to your account, used only to help you with your own dispute, and deletable by you at any time. We do not sell your personal data, and we never share your evidence with the platform you are disputing unless you choose to send it yourself.

Who we are

ResolveMyAI is the controller of the personal data described here. For privacy questions or to exercise your rights, contact us at privacy-resolveai@elev8ai.org.

Information we collect

Account information

When you sign in through our authentication provider (Clerk), we receive your user identifier and email address.

Case information you enter

• The platform, charge amounts, dates, ticket/case IDs, and descriptions you provide about your dispute.
• Your logged support attempts, timeline entries, and any drafts generated for your case.

Evidence you upload

Screenshots and documents you choose to upload are stored in a private storage bucket scoped to your account. These files may contain sensitive information (for example, billing details). We treat them accordingly — see “AI processing” and “Data retention” below.

Billing information

If you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card details; we store a Stripe customer identifier and your subscription status.

Anonymized outcomes

If you choose to share the outcome of a case, we store an anonymized record (for example, platform, resolution type, win/loss, and a banded amount). These records contain no account identifier and cannot be linked back to you.

Chrome extension (ResolveMyAI – AI Refund Helper)

If you install our Chrome extension, it shows your own open cases in a side panel and, when you press Fill or Copy, puts your prepared message into the support page you are on. You always press Send yourself; the extension never submits anything.

• Stored in your browser: a connection token you create on resolvemyai.com. It is not your password, is stored hashed on our side, and you can disconnect it at any time.
• Sent to ResolveMyAI: requests for your own case data, and a record when you press Fill, Copy or "I sent it" (which case, which message, and the action), so your case timeline stays up to date.
• Never collected: the extension does not read, store or transmit the content of the support pages you visit, your browsing history, cookies, or any passwords. Blanks you type into the panel (such as your card's last 4 digits) stay in the panel and are never sent to us.
• The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell it, use it for advertising, or use it for anything other than helping you with your own case.

How we use your information

• To provide the service: organize your cases, generate drafts, analyze evidence you submit, and surface relevant guidance.
• To operate billing for paid plans.
• To secure the service and prevent abuse.
• To improve our templates and guidance using only anonymized, non-identifying outcome data.

AI processing of your information

ResolveMyAI uses Anthropic's Claude models to draft messages and analyze the information you submit. Case text you enter is processed to generate drafts and recommendations. Uploaded evidence (screenshots/documents) is processed by AI only after you give separate, explicit consent for AI analysis of evidence, which you can grant or withdraw at any time in Settings.

• Your inputs are sent to our AI processor solely to perform the task you requested.
• We do not use your evidence or case content to train AI models.
• AI processing is used to help you — it is never used to share your evidence with the platform you are disputing.

Legal bases for processing (GDPR)

• Performance of a contract: providing the core service you signed up for, including case management and AI-assisted drafting of the text you enter.
• Consent: AI analysis of uploaded evidence, and any optional features you opt into. You may withdraw consent at any time without affecting prior processing.
• Legitimate interests: securing the service, preventing abuse, and improving our templates using anonymized data — balanced against your rights.
• Legal obligation: retaining limited billing records where required by law.

Sharing and processors

We do not sell personal data. We share data only with service providers (processors) that help us run ResolveMyAI, under contracts that require them to protect it:

• Clerk — authentication.
• Supabase — database and private file storage.
• Anthropic — AI drafting and analysis of the content you submit.
• Stripe — subscription billing (only if you upgrade).

International data transfers

Our providers may process data in the United States and other countries. Where personal data is transferred out of the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent transfer mechanism.

Data retention

• Account and case data: kept while your account is active; deleted when you delete your account.
• Uploaded evidence: automatically deleted after your chosen retention window (default 30 days) unless you opt to keep it. You can change this or delete any file at any time in Settings.
• Anonymized outcomes: retained indefinitely because they contain no identifying information.
• Billing records: retained as required by applicable law.

Your rights

Depending on your location (including under GDPR and similar laws), you have rights to access, correct, delete, restrict, object to, and port your personal data, and to withdraw consent. You can exercise the core of these directly in the app:

• Access & portability: download a machine-readable export of your data from Settings.
• Erasure: delete your account and associated data from Settings, or delete individual evidence files anytime.
• Withdraw consent: turn off AI analysis of evidence in Settings.
• Other requests (rectification, restriction, objection): contact privacy-resolveai@elev8ai.org.

If you are in the UK/EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

Security

We use industry-standard measures to protect your data, including access controls and encrypted transport. Evidence files are stored in a private bucket and are accessible only through short-lived, access-checked links. No system is perfectly secure, but we work to protect your information.

Data breach procedures

If we become aware of a personal-data breach that poses a risk to you, we will act without undue delay to investigate and remediate, notify the relevant supervisory authority where required (within 72 hours where applicable under GDPR), and notify affected users where the breach is likely to result in a high risk to their rights.

Accountability: DPIA and Records of Processing

Because uploaded evidence may contain sensitive information, we have considered the need for a Data Protection Impact Assessment (DPIA) and apply safeguards such as separate consent for AI processing, default retention limits, and data minimization. We maintain Records of Processing Activities (ROPA) describing the categories of data, purposes, recipients, and retention.

Children

ResolveMyAI is not directed to children and is intended for adults. We do not knowingly collect personal data from children.

Changes to this policy

If we make material changes, we will update the version above and prompt you to review and accept the new policy where required.