Privacy Policy

Account information: when you sign up, we collect your email address, your password (stored by our authentication provider in hashed form, never in plain text), and an optional company name.

Dispute data: information you enter or upload while using the product, including order details, dispute reasons, deadlines, evidence files (such as receipts, photos, and screenshots), checklist status, timeline notes, and draft response text.

Feedback: if you use the in-app feedback form, we collect what you write, an optional rating, the page you were on, and whether you're open to being contacted, linked to your account email and company name.

Contact form submissions: if you use the contact form, we collect the name, email, topic, and message you provide.

Usage and technical information: our hosting provider collects basic page-view analytics (such as pages visited, referring site, approximate country, and browser/device type) without advertising cookies. If an error occurs, our error-monitoring provider receives a technical report (such as the page, browser type, and error details) so we can fix it.

The dispute data you upload often includes personal information about your own customers — for example names, email and shipping addresses, IP addresses, order history, and messages. We process that information only on your behalf and only to provide the service to you. We don't contact your customers, sell their information, or use it for any other purpose.

You're responsible for having a lawful basis to share your customers' information with us and for any notices your customers are owed. Please don't upload full card numbers, card security codes, bank account numbers, government ID numbers, or health information (see our Terms of Service).

We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not use your dispute data for advertising or to train AI models.

• To provide and operate the service, including authenticating you, storing your disputes and files, and generating evidence packets.
• To respond to support requests, contact-form messages, and feedback.
• To understand, at an aggregate level, how the product is used so we can improve it.
• To detect, investigate, and fix errors, abuse, and security issues.
• To send you service-related emails, such as account confirmation, password resets, and notice of material changes to our terms or this policy.

We share information only with service providers that help us run Disputivo, and only as needed for them to do that work:

• Supabase — database, file storage, and authentication. Stores your account, dispute data, and uploaded evidence files.
• Vercel — website hosting and page-view analytics.
• Sentry — error monitoring. Receives technical error reports.
• Google (Gmail) — business email we use to correspond with you.

We may disclose information if required by law, subpoena, or other legal process; to protect the rights, safety, or security of Disputivo, our users, or others; or as part of a sale, merger, or reorganization of the business, in which case this policy will continue to apply to your information.

Disputivo does not yet connect to Stripe, PayPal, Shopify, or other payment or store platforms. If we add those connections, we'll update this policy before they're turned on to describe what's shared and why.

We use essential cookies to keep you signed in (session cookies managed by our authentication provider). Our analytics do not use advertising or cross-site tracking cookies.

Data is sent over encrypted connections (HTTPS). Database-level access rules restrict your disputes and files so only your account can read or change them, and evidence files are private and served only through short-lived links. No system is perfectly secure, and we can't guarantee absolute security. If we learn of a security breach affecting your personal information, we'll notify you as required by law.

We keep your account and dispute data for as long as your account is active. When you delete a dispute in the dashboard, its record and uploaded files are deleted. To delete your entire account, contact us and we'll delete it and its data.

During the current beta we do not keep backups of your data, so deleted data cannot be recovered, and data could be lost if a technical failure occurs. Keep your own copies of important evidence and packets.

Contact-form messages and feedback are kept as long as needed to respond and improve the product, and then deleted.

We'll respond to requests within the time required by applicable law, and we won't treat you differently for making one. We may need to verify your identity before acting on a request.

• View and correct your dispute data directly in the dashboard.
• Delete disputes and evidence files from within the dashboard at any time.
• Request a copy of your personal information, a correction, or full account deletion by emailing trydisputivo@gmail.com.
• If one of your customers asks you to access or delete their information, you can do so in the dashboard, or contact us for help.

We may email businesses at their publicly listed business email addresses to tell them about Disputivo. For this we keep the business's name, website, public business email, and notes about publicly available information about the business. You can opt out at any time by replying "no thanks" or emailing trydisputivo@gmail.com, and we won't contact you again.

Disputivo is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 16.

We may update this policy as the product changes. We'll update the "Last updated" date above, and if a change is material we'll notify account holders by email or in the dashboard before it takes effect.

Questions about this policy or your data? Email trydisputivo@gmail.com, write to us at 3801 Franklin Ave, Fullerton, CA 92833, or use the contact page.