Privacy notice
How local worksheets, member accounts, and optional AI requests handle your information.
Last updated October 2, 2026
VA Claim Assistance is operated by Pennsylvania Digital Solutions LLC.
What this service collects
Public worksheets process your entries in your browser. Building and editing do not send worksheet entries to our application server. Nothing saves automatically. Signed-in members can explicitly choose Save as writing project to send the title, worksheet type, current answers, and editable document to their encrypted account. The new project requires review before export. The separate Save worksheet option sends only the reviewed title and output text; it does not save input answers. Neither option calls an AI provider. Copy or download before leaving if you have not saved your work. We do not accept medical-record uploads.
Combined-rating calculator
The public calculator processes individual percentages in your browser. It does not send entered ratings to our server or an AI provider, save them to an account, or place them in a shared link. Copying or printing creates a copy you control on your device. The website does not save calculator entries; copy or print any example you want to keep.
Saved writing projects
Writing projects keep structured answers and documents together, separately from text-only drafts. When you choose Save as writing project, Create project, or Save progress, we store the project title, worksheet type, answers, question step, editable document, and review status in your account. Titles and project content, including up to 20 earlier saved versions, are encrypted in the account database. Saving a project does not send an AI request or save an assistant conversation. PDF, Word, and text exports use the reviewed document in the selected saved project.
Optional project feedback stores only your selected helpfulness rating, reason, and workflow step, associated with that project. There is no feedback comment field. We also keep daily counts of product actions to understand use of these features. These aggregate counts contain no account or project identifiers, answers, or document content and currently have no scheduled deletion date.
When accounts are enabled, we collect a display name, email address, account usage, and drafts you choose to save. If you use an email-and-password account, we also store a securely hashed password. Accounts created only through Google or Apple do not have a separate website password. A session cookie keeps you signed in. Passwords are not stored in readable form. Guest demonstrations are not saved as member drafts.
Optional Google and Apple sign-in
When available, you can choose Google or Apple to create an account or sign in. The provider shares an account identifier, a verified email address, and a name when available. Apple may provide a private relay email address. We store the provider identifier and connection details to recognize your account. We do not request access to provider passwords, contacts, inboxes, or claim records. Signing in does not verify military service, disability status, or VA eligibility.
Connecting a provider to an existing account is an explicit action in Account settings. We do not automatically combine accounts that share an email address. A temporary authentication cookie and short-lived security records protect the sign-in and connection process. You can review connected methods and export connection details from Account settings.
Google sign-in credentials are not retained after sign-in. When Apple sign-in is used, its access or refresh credential is encrypted so we can revoke the connection if you delete your account. Your local account and drafts are removed immediately on deletion. If Apple is unavailable, the encrypted revocation request can remain for up to seven days while we retry, then is removed. The request is removed after successful revocation or expiry. Backup copies may remain for the retention period below.
For accounts connected to Apple, verified notices of revoked consent or Apple account deletion cause us to sign you out and remove the stored Apple credential, while retaining your website account, saved drafts, and other connected sign-in methods.
Provider processing is described in Google’s privacy policy and Apple’s privacy policy.
Hosting and AI processing
The application and account database run on our Tower server. Editing assistant notes keeps them in the current page until you send a request; nothing saves automatically. Sending a demo message reaches our application server but does not call an AI provider. Saving a draft stores its reviewed title and text, not the conversation or intake fields. Downloading conversation and notes creates a local text file on your device.
Live AI, when available, requires sign-in and consent. Your message, recent chat history, and confirmed notes pass through OpenRouter to the selected AI providers. TypeSafe Jev receives the question, source material, and confirmed facts to help select a model. The model selects from a reviewed set of official quotations, organization steps, and follow-up questions. Our application displays that selected wording; the model cannot write new personal facts or medical conclusions into your outline. Jev checks whether the selection is relevant and within the service’s scope. Selection may use OpenAI models through Microsoft Azure, Anthropic models through Amazon Bedrock or Google Vertex AI, Google Gemini through Vertex AI, or Grok through xAI. An unsuccessful check may trigger one additional selection and another check. These checks can still select unhelpful or inappropriate guidance; review the source and your own circumstances.
Our API requests require OpenRouter routes marked for zero data retention and disallow providers that collect request data. If no qualifying route is available, the request fails. This routing setting is not a promise that no information is processed or retained anywhere: OpenRouter processes request metadata, providers have their own legal and security obligations, and in-memory caching may occur. See OpenRouter data handling, its retention-routing definition, and privacy policy. Local account deletion does not control information already processed by external providers.
Do not enter Social Security numbers, VA file numbers, dates of birth, addresses, passwords, full medical records, or identifying claim documents. Automated screening is incomplete. Public worksheets do not call an AI provider, and this service does not accept medical-record uploads or claim HIPAA compliance.
Free assistant outlines
When the live workspace is available and you choose Create an outline, the website assembles the fields you explicitly confirmed without an AI request or AI allowance charge. This sends those fields to our application server, where they are copied verbatim into the outline and returned to your page. It does not save them to your account unless you separately choose Save draft. Typing a chat message does not create or replace your outline.
Support email
Messages sent to our support address are routed through Cloudflare Email Routing to our support mailbox. These messages include the sender address, subject, and whatever you choose to write. Send account-access or website questions only; do not email medical records, sensitive identifiers, passwords, or claim documents. Provider processing is described in Cloudflare’s privacy policy.
Account emails
When account email is enabled, Resend processes your email address and account-related messages for verification, password recovery, and password-change notifications. A verification or reset message contains a temporary, single-use link. These emails do not contain saved drafts, worksheet answers, claim details, or your password. Provider processing is described in Resend’s privacy policy. Email verification and recovery are offered only when their controls are available on the sign-in and account pages.
Queued account emails are encrypted in our database while awaiting delivery. We remove them after delivery, cancellation, permanent failure, or expiry. Earlier copies may remain in backups until the retention period below ends.
Cookies, logs, and analytics
We use the authentication cookie required for account access and a temporary security cookie when you choose provider sign-in. We do not install advertising analytics or sell personal data. The application does not intentionally log prompts, facts, or draft content. Infrastructure providers may process basic request information such as IP addresses, timestamps, paths, and errors for security and operation. Avoid putting personal information into page URLs.
Your controls
Signed-in users can export their account data, delete individual saved drafts or writing projects, and delete their account in Account settings. The account export includes current project content, saved project history, and structured project feedback. Deleting a project removes its content, history, and associated feedback. Account deletion removes the account, drafts, all writing projects, their history, and their feedback from the active database. Aggregate daily product counts have no account identifiers and are retained. Local database backups are configured with retention of up to seven days. Deleted information may remain in those backups until they expire; deleting your account does not immediately erase backup copies. Backup and restore verification are ongoing, so do not rely on this service as the only copy of an important document.
Payments
When purchases are enabled, Paddle processes payment details as the merchant of record. Paddle receives the selected product and an opaque order reference; we do not send it your worksheets, chat messages, medical information, or saved documents. See Paddle’s privacy notice. We store the pack, amount, payment status and credit adjustments; we do not store card numbers or claim content in order records. Account export includes your purchase history. Account deletion removes its account link and stored receipt/checkout URLs; minimal transaction records (amounts, status, payment-provider references and a one-way owner reference) remain for accounting and payment reconciliation, with no scheduled deletion date currently set. Purchase availability and the final price are shown before checkout.
Keep your information limited
This service is not a VA record system or a healthcare portal. Use a nickname for your display name and share only the minimum information needed. The writing tools are intended for adults. For questions, use our Help & resources page.