Privacy Policy

The Short Version (Plain-English Summary)

We collect what we need to run your fight: your account info, the documents you upload, the facts you confirm, and how you use the service.
Your documents are sensitive — we treat them that way: encrypted in transit and at rest, access-controlled, never sold.
We do not sell your personal information, we don't use your dispute data for advertising, and we never use your content to train AI models — ours or anyone else's.
We disclose data only to service providers that make the Service work — under written agreements that restrict what they can do with it.
You're in control: you can access, export, correct, and delete your data. Deleting your account deletes your data (details below).
Questions any time: privacy@beatbullies.com.

*(The summary is for convenience; the full policy below governs.)*

1. Who We Are

This policy describes how Educated Guess Ventures, LLC d/b/a BeatBullies ("BeatBullies," "we") collects, uses, discloses, and protects personal information when you use our websites and applications (the "Service"). BeatBullies is a U.S. consumer self-help software service.

2. Information We Collect

Information you provide:

Account information: name, email, phone number (if provided for reminders/2FA), password/authentication data (managed by our authentication provider).
Dispute information: the documents you upload (which may include bills, statements, letters, and correspondence), the facts you enter or confirm (dates, amounts, account numbers, party names, descriptions of what happened), letters and documents generated for you, and notes you add.
Sensitive information within your documents. Because you choose what to upload, your documents may contain sensitive personal information — including financial account details and health-related information such as medical bills. We treat all dispute documents as sensitive data (see Sections 5–7). We collect this information only because you provide it to pursue your own dispute; we use it only to provide the Service to you.
Communications: messages you send us (support, feedback) and your communication preferences.
Payment information: processed by our payment processor; we receive transaction records (amount, date, status) but do not store full card numbers.

Information collected automatically:

Usage data: pages/features used, actions taken, timestamps — used to operate and improve the Service.
Device/log data: IP address, browser/device type, and technical logs for security and reliability. Operational logs are designed to minimize personal information and are retained only as necessary for security, troubleshooting, fraud prevention, and legal compliance.
Cookies and similar technologies: see Section 3.

Information from third parties: authentication providers (sign-in), payment processors (transaction status), and mail-delivery vendors (delivery/tracking status of letters you send through the optional mailing service).

We do not knowingly collect information from children under 18. The Service is for adults.

3. Cookies and Similar Technologies

We use a small number of cookies and similar technologies:

| Category | Purpose | Examples | Retention | Can You Disable? | |---|---|---|---|---| | Essential | Authentication and session management | Login session cookie | Session / short-lived | Required for the Service | | Security | Fraud and abuse prevention | Anti-CSRF token, rate-limit identifiers | Session / short-lived | Required for the Service | | Preferences | Remembering your settings | Interface preferences | Persistent (limited) | Optional | | Analytics | Understanding Service performance and usage | First-party analytics identifiers | Persistent (limited) | Optional |

BeatBullies does not use advertising cookies or third-party behavioral advertising technologies.

4. How We Use Information

We use personal information to:

Provide the Service: process and organize your documents, extract facts for your confirmation, generate drafts, compute readiness and deadlines, and maintain your case records;
Process documents with AI: your documents and confirmed facts are processed by AI systems (including third-party AI providers acting as our service providers) solely to provide the Service to you — e.g., reading a bill you uploaded, drafting a letter for your review (see Section 6);
Send service communications: deadline reminders, letter/mailing status, security notices, and other messages that are part of the Service;
Send marketing communications only if you opt in, with unsubscribe honored promptly;
Process payments for optional paid features;
Maintain security: detect and prevent fraud, abuse, and unauthorized access; enforce our Terms;
Improve the Service: analyze usage in aggregate or de-identified form; we do not use the contents of your dispute documents for advertising or sell them to anyone;
Comply with law where required.

No AI training on your content. BeatBullies does not use customer content — including uploaded documents, generated letters, dispute histories, or personal information — to train or improve foundation models, large language models, or other machine-learning models, whether for BeatBullies or for third parties.

Automated processing disclosure. BeatBullies uses automated systems (including AI) to organize information and generate drafts *for your review and decision*. The Service does not make legal decisions for you and does not use automated decision-making to deny you services; every substantive action (approving facts, sending letters) requires your review and choice.

Privacy by design. BeatBullies designs new features using privacy-by-design principles, including data minimization, purpose limitation, and least-privilege access.

5. How We Disclose Information

We disclose personal information only:

To service providers and contractors that perform services on our behalf under written agreements restricting their use of the information to providing services for BeatBullies. These providers are prohibited from using the information for their own marketing, advertising, product development, or AI model training except as expressly authorized by us or required by law. Categories of service providers we use include: cloud hosting and infrastructure; authentication; payment processing; AI inference; analytics; email delivery; SMS delivery; document generation; print-and-mail fulfillment (only the specific letter you approved, with its addresses, when you purchase mailing); customer support; security monitoring; and error logging.
At your direction: e.g., when you instruct us to mail a letter, we transmit it to the mail vendor; documents you download and send are your own action.
For legal reasons: to comply with law or valid legal process, or to protect rights, safety, and the integrity of the Service. We review government and legal requests carefully and disclose only information we reasonably believe is legally required. Where permitted, we will notify affected users before disclosure, and we will resist overbroad requests where lawful.
In a business transfer: if BeatBullies is involved in a merger, acquisition, or asset sale, personal information may transfer subject to this policy's protections, with notice to you.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Subprocessors. BeatBullies maintains an up-to-date list of the categories of subprocessors used to operate the Service. Material changes to subprocessors may be reflected in this Privacy Policy or on a dedicated vendor page at beatbullies.com/privacy/vendors.

6. AI Processing

Purpose-limited processing. AI providers process customer content solely to provide requested AI functionality on our behalf. Where available, BeatBullies configures enterprise or API services that contractually prohibit model training using customer content, limit retention, and restrict human review except where necessary for security, abuse prevention, or legal compliance.
AI processing retention. Customer content submitted to AI providers is processed only for the purpose of providing requested functionality. Where supported by the provider, BeatBullies configures zero-retention or limited-retention processing. Temporary retention may occur where necessary for abuse detection, system reliability, or legal obligations.
Ongoing verification. We periodically review provider terms and technical configurations to confirm they remain consistent with this policy.

7. How We Protect Information

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including:

encryption in transit and at rest, including encrypted backups;
role-based access controls following least-privilege principles, with logged access to user content;
multi-factor authentication for privileged accounts;
encryption key management;
documents served through short-lived, access-controlled links;
PII minimization in logs and internal notifications;
continuous monitoring, rate limiting, and abuse detection;
vulnerability management and secure software development practices;
vendor due diligence and periodic security reviews;
backup and disaster-recovery procedures; and
an audit trail on administrative access to user data.

Internal access. Access to customer content is limited to personnel with a legitimate business need and is governed by role-based permissions, logging, and periodic access reviews.

Security incidents. If we determine a security incident has compromised personal information, we will investigate promptly, mitigate the impact, and provide notifications as required by applicable law.

No system is perfectly secure; we cannot guarantee absolute security, but we treat your dispute documents as the sensitive records they are.

8. Retention and Deletion

We retain personal information according to documented retention schedules based on operational need, legal obligations, dispute resolution, and security requirements. Current retention periods by category:

| Category | Retention | |---|---| | Account information | While your account is active | | Uploaded documents | Until you delete them or your account | | Generated letters and case records | Until you delete them or your account | | Payment records | Up to seven years where required for tax and legal purposes | | Audit logs (administrative access, consent records) | Two years | | Security logs | Twelve months | | Support requests | Three years | | Backups | Up to ninety days after deletion, purged on the backup cycle |

Account deletion: when you delete your account, your personal information and uploaded documents are permanently deleted or irreversibly anonymized within 30 days, except records we must retain for legal, tax, security, or dispute-integrity purposes (such as payment records and consent/audit logs), which are retained only as long as required and then permanently deleted or irreversibly anonymized.
You may also delete individual documents or fights within your account at any time.

9. Your Rights and Choices

Depending on your state of residence, you may have rights to: know/access the personal information we hold about you; correct inaccuracies; delete your personal information; obtain a portable copy; opt out of targeted advertising, sale, or profiling (not applicable — we don't do these — but the right is yours regardless); and limit use of sensitive personal information (we already use it only to provide the Service). We honor these rights for all U.S. users regardless of state, not only where mandated.

How to exercise them: in-app (account settings: export, delete) or by emailing privacy@beatbullies.com. We verify requests to protect your data, respond within the time required by applicable law (typically 45 days), and do not discriminate against you for exercising your rights. If we deny a request, we will explain why and how to appeal (see Section 10).

Communications choices: marketing communications are opt-in and separately controlled from service communications (deadline reminders and account/security notices are part of the Service). Manage preferences in settings; unsubscribe links are honored promptly.

10. State Privacy Laws — How We Apply Them

As of 2026, twenty U.S. states have comprehensive consumer privacy laws (California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, with more taking effect). Rather than providing you different rights depending on where you live, we apply the strongest common standard to all U.S. users:

All users get the full rights in Section 9 (access, correction, deletion, portability, opt-outs, appeal) regardless of state.
Sensitive-data consent (important — please read): several state laws require your affirmative opt-in consent before we process sensitive personal information, such as the health and financial details contained in documents you upload. We obtain that consent explicitly: when you upload dispute documents, you will be asked to confirm that you choose to provide them and consent to our processing them solely to provide the Service to you. You may withdraw consent by deleting the documents or your account at any time.
We do not sell personal information or process it for targeted advertising, so the "Do Not Sell/Share" and targeted-advertising opt-outs required by state law are satisfied by default — there is nothing to opt out of. If our practices ever changed, we would provide the required opt-out mechanisms *before* the change.
Global Privacy Control (GPC): several states require honoring browser-based universal opt-out signals. Because we do not sell or share personal information for targeted advertising, a GPC signal has no additional effect on our processing — but we recognize such signals, and they will be honored automatically if our practices ever bring them into scope.
Data minimization: we collect and retain only what the Service needs, consistent with the strictest state standards, and we use sensitive information only for the purpose you provided it.
Appeals: if we decline a privacy request, you may appeal by replying to our decision or emailing privacy@beatbullies.com with "Appeal" in the subject; we will respond within the period required by your state's law (typically 45–60 days), and we will tell you how to contact your state Attorney General if you remain unsatisfied.

11. Data Location and International Transfers

The Service is operated in the United States and intended for U.S. residents; your information is stored and processed in the U.S. If information is transferred outside the United States by our service providers, we require appropriate contractual safeguards consistent with applicable law.

12. Changes to This Policy

We will post changes here with a new effective date and, for material changes, notify you (email or in-app) before they take effect. Prior versions are available on request.

13. Contact Us

Privacy questions or requests: privacy@beatbullies.com · 333 Tamiami Trl, Venice, FL 34285.