Privacy Policy

1. Introduction

Welcome to BoostMyCase ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at boostmycase.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you register and use our Service, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full name, date of birth, country of birth, current citizenship
• Contact Information: Email address, phone number, mailing address, current residential address
• Immigration Information: USCIS receipt numbers, petition priority dates, visa categories, case status, immigration history
• Family Information: Dependent details (spouse and children), including their personal and immigration information
• Employment Information: Current employer details, if applicable to your case
• Financial Information: Payment information processed through our payment processor (Stripe)
• Communication Records: Records of your communications with USCIS and with us
• Document Uploads: Court filings, USCIS correspondence, and other supporting documents

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information about your device and usage:

• Log Data: IP address, browser type, browser version, pages visited, time and date of visit, time spent on pages
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track activity and store certain information
• Analytics Data: We use PostHog to understand how users interact with our Service

2.3 Information from Third Parties

• Google OAuth: If you sign in using Google, we receive your name, email address, and profile picture from Google
• Payment Information: Payment processing is handled by Stripe. We do not store your full credit card information on our servers

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To generate your USCIS litigation packet, including summons forms, civil cover sheets, and related legal documents
• Account Management: To create and manage your account, authenticate your identity, and provide customer support
• Payment Processing: To process your payment and manage refund requests under our refund policy
• Communication: To send you service-related notifications, updates about your case, and respond to your inquiries
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements
• Service Improvement: To analyze usage patterns, improve our Service, develop new features, and enhance user experience
• Security: To protect against fraud, unauthorized access, and other security threats
• Marketing: With your consent, to send promotional materials and information about our services (you may opt out at any time)

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our Service:

• Stripe: Payment processing and transaction management
• Amazon Web Services (AWS): Cloud storage for documents and litigation packets
• Google: Authentication services through Google OAuth
• SendGrid: Email delivery and communication services
• PostHog: Analytics and product usage tracking
• Vercel: Website hosting and infrastructure

These service providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders or government agencies).

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure storage of documents in AWS S3 with access controls
• Database security with PostgreSQL hosted on secure servers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider in determining retention periods include:

• The duration of your relationship with us
• Legal obligations to retain data
• Statute of limitations for potential legal claims (typically 6-7 years for business records)
• Industry best practices

When we no longer need your personal information, we will securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 General Rights

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing under certain circumstances

7.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (Note: we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

7.3 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 7.1 above.

7.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@boostmycase.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Types of cookies we use:

• Essential Cookies: Required for authentication and security
• Analytics Cookies: Help us understand how users interact with our Service (PostHog)
• Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Third-Party Links

Our Service may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

11. International Data Transfers

Your information, including personal information, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification for material changes (if you have provided your email address)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: