
Data and Privacy Transparency
This page explains what we collect, how we protect it, how we share it, and how you can control it.
Plain summary
We collect only what is needed to verify eligibility and support applications. We secure data in transit and at rest. We do not sell personal information. You can request a copy or deletion of your data by contacting our privacy team.
What we collect and why
The table shows typical categories we process and the reasons.
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Identity | Full name, date of birth, government ID number when requested | Eligibility checks, fraud prevention, support | Consent and legitimate interests |
| Contact | Email, phone, mailing address | Application updates, support communication | Consent and contract performance |
| Program proof | Proof of SNAP, Medicaid, or income documents | Verify eligibility with provider rules | Consent and legal compliance |
| Technical | IP, device type, error logs | Security, abuse prevention, service reliability | Legitimate interests |
We do not knowingly collect data from children under 13.
Transport security
All forms and dashboards use HTTPS with modern TLS. We disable outdated protocols. We monitor certificates and renew on schedule.
Storage security
Sensitive files are encrypted at rest using modern ciphers. Access requires authenticated accounts with least privilege and logging.
Operational controls
- Role based access and need to know reviews
- Audit trails for downloads and changes
- Backups with retention policies and tests
- Security updates and vulnerability fixes
Third party services
When we use outside services, we select vendors that commit to strong security and privacy standards. We limit what they receive and sign data processing terms where required.
| Type | Purpose | Data shared | Opt out |
|---|---|---|---|
| Hosting and storage | Serve the site and store uploads | Files you upload, limited metadata | Not applicable for core hosting |
| Email delivery | Send status updates and support replies | Name and email, message content | Unsubscribe links for non transactional messages |
| Analytics with privacy settings | Improve pages and fix errors | Pseudonymous device data, page events | Honor browser signals where possible |
| Affiliate and provider links | Route to official offers or partners | URL parameters such as non personal referral codes | Use standard browser privacy controls |
We do not sell personal information. We do not allow third parties to use your documents for advertising.
Data retention and deletion
We keep data only as long as needed for the purpose it was collected, or as required by law or provider rules. You can request deletion when retention ends or when consent is withdrawn.
| Data type | Typical retention | Deletion method |
|---|---|---|
| Application forms and uploads | Up to 24 months after application resolution, unless law requires longer | Secure deletion from primary and backup systems |
| Support emails and chat transcripts | Up to 18 months for quality and dispute handling | Mailbox purge and log cleanup |
| Analytics events | 3 to 14 months in aggregate form | Automatic expiry and roll up |
Backups age out on a rolling schedule. Deletions propagate when backups rotate.
Your choices and rights
- Request a copy of your data
- Ask us to correct inaccurate information
- Request deletion when allowed
- Withdraw consent for optional processing
Some requests may be limited by program rules or legal requirements. We explain the reason if a request cannot be completed.
How to make a request
Include your full name, contact details, and the request type. We respond as fast as possible.
For security, we may ask you to verify your identity before we act on a request.
Children and changes
The site is for adults who manage their own benefits. If you believe we collected a child’s personal information by mistake, contact us and we will delete it.
We update this page when practices change. The last reviewed date is shown below. Significant changes are explained at the top of the page.