PRIVACY POLICY

1. Our Core Privacy Pledge: Zero Monetization of Veteran or Homeowner Data

We believe that American veterans who earned service-connected disability ratings through military service should never have their medical or military status converted into commercial commodity data.

2. Ephemeral Processing Standard: No Persistent Cloud Storage of Sensitive PII/PHI

Untax is designed around the Ephemeral Data Processing Standard:

• Transient In-Memory Evaluation: When a veteran runs a statutory relief audit on Untax, information such as disability percentage, branch of service, and parcel identifiers are evaluated in-memory to calculate statutory exemption caps and savings.
• Client-Side Document Assembly: Official walk-in packets, Trustee email slips, and RESPA demand letters are compiled for immediate client download.
• Zero Cloud Retention of Sensitive Records: Untax does not maintain ongoing centralized cloud storage of military discharge papers (DD-214 Member-4 copies), full Social Security Numbers, or VA rating decision narrative letters. Once a session ends or packet is generated, sensitive inputs are purged from active memory.

3. Information We Collect and Process

To perform accurate ad valorem audits and compile court-ready petitions, Untax processes:

• Public Real Property Records: County Assessor parcel numbers, square footage, building year, property tax assessments, and deed transfers (drawn from public records).
• User-Provided Contact Info: Taxpayer name, email address, and phone number for petition header formatting and HighLevel CRM status notifications.
• Voluntary Military Service Identifiers: Branch of service, discharge characterization (Honorable), and VA disability rating percentage solely to establish statutory exemption eligibility under applicable state law.
• Mortgage Loan Details (Optional): Loan servicer name and account number solely when the homeowner requests a RESPA Section 10 escrow recalculation demand.

4. Information Sharing and Authorized Transmission

Untax transmits your information exclusively in the following two circumstances, with your explicit affirmative direction:

1. County Trustee & Board of Equalization: When you generate a digital email submission or print a Hero Hand-Carry Walk-In Packet, information is addressed strictly to your designated County Trustee or County Tax Assessor's official property tax relief desk.
2. Accredited Veterans Service Officers (VSOs): If your rating is below 100% and you request a warm referral, Untax drafts an email addressed strictly to your local County VSO or chartered veterans organization (DAV, VFW, American Legion) accredited under 38 U.S.C. Chapter 59.

5. Security Architecture & The 4-Stage Expense Hierarchy

Untax enforces rigorous defense-in-depth security standards:

• Transport Layer Security: All client connections are enforced via TLS 1.3 with HSTS.
• Cryptographic Fingerprinting: Public county assessment rolls and VA facility rosters are validated using SHA-256 cryptographic hashes.
• Automated Credential Protection: All API credentials, tokens, and encryption keys are managed through a centralized zero-knowledge secrets management architecture with automated machine authentication, least-privilege access controls, and zero repository exposure.
• The 4-Stage Expense Hierarchy: Eliminates excessive network querying through Stage 0 statutory calendar gating, Stage 1 HTTP HEAD metadata probing, Stage 2 SHA-256 content verification, and Stage 3 surgical execution with token-bucket rate limiting.

6. Zero Ad-Tracking and Analytics Hygiene

Untax operates on a zero-tracking hypermedia architecture. We do not load third-party behavioral advertising pixels (e.g. Meta Pixel, TikTok, surveillance ad tech). Our server-side Axum hypermedia delivers sub-20ms pre-rendered HTML with compile-time type-checked templates and zero invasive telemetry.

7. Your Rights: Access, Correction, and Immediate Deletion

You hold the right at any time to request access to, correction of, or immediate permanent deletion of any contact information or audit records stored in our systems.

To exercise your privacy rights, contact: