Privacy Policy
Last updated: April 24, 2026
This Policy describes what information the Recover Unpaid Commissions System ("the Service") collects, how it is processed, where it is stored, and your rights as a user. We keep this policy plain and short on purpose — the Service does not operate a database, and most of your data lives in your own browser.
1. What we collect
When you sign up via the intake form, you provide:
- First name, last name
- Email address
- Phone number
- State (US state or DC)
- Employer / company name
- Role (W-2 employee or 1099 contractor)
- Approximate commission amount owed
- A free-text description of your situation in your own words
When you use the chat, the Service additionally processes:
- The full text of your conversation with the AI assistant
- Any documents you upload (PDFs, photos of contracts, 1099s, screenshots) — these are sent to the AI for analysis as part of the same request
- Your IP address (used only for rate-limiting; never stored alongside conversation content)
The Service does not collect financial information beyond what's needed to issue a refund. Payment is processed by Stripe; we never see your card details.
2. How information flows
Here is the exact path your data takes:
- You submit the intake form → Formspree captures the fields and emails you a personalized link to start the assistant.
- You click the link → your browser loads app.recoverunpaidcommissions.com, served by Cloudflare's global edge network.
- You chat → each message is sent to a Cloudflare Pages Function (
/api/vra-chat) running on Cloudflare's edge. The function adds the system prompt and forwards the message to Anthropic's API for AI processing.
- The AI response comes back through the same Pages Function and is rendered in your browser.
- Each round-trip is automatically saved to your browser's
localStorage so you can resume your case if you close the tab.
We do not operate a database, log conversation contents on our servers, or persist your chat anywhere outside your own browser.
3. Where information is stored
| Data | Where it lives | How long |
|---|
| Intake form fields | Formspree (operator's dashboard) | Until manually deleted by operator |
| Conversation history | Your browser's localStorage only | Until you clear it (capped at ~5 MB) |
| Uploaded files | Sent in-request to Anthropic; never stored on our servers | Lifetime of the single API request |
| IP address (rate-limit only) | Cloudflare KV namespace vra-rl, key <ip>:<YYYYMMDD> | Auto-expires 24 hours after first request of the day |
| Daily spend tracker (no PII) | Cloudflare KV, key spend:<YYYYMMDD> | Same — auto-expires |
| Anthropic API logs | Subject to Anthropic's privacy policy | Per Anthropic's retention rules |
4. Third-party services
The Service relies on these third parties to function. Each has its own privacy policy, which applies to whatever data flows through them:
- Formspree — captures the intake form. privacy policy
- Anthropic — processes the AI conversation and any uploaded documents. privacy policy
- Cloudflare — serves all static pages and runs the API proxy. privacy policy
- Stripe — processes the $97 purchase. privacy policy
- cdnjs (Cloudflare CDN) — serves the jsPDF and heic2any libraries to your browser. privacy policy
- api.qrserver.com (GoQR) — generates the QR code shown when you tap "Continue on phone." We send the URL of your case page (which contains your intake parameters) to this service so it can render the QR code image. documentation
5. Cookies and analytics
The Service does not currently use cookies or any third-party analytics. There are no Google Analytics tags, no advertising pixels, and no tracking scripts. If we add analytics in the future, we will update this Policy and notify you via the email address on file.
The only browser storage we use is localStorage, used solely to save your case so you can resume from where you left off. You can clear it at any time from your browser settings.
6. Your rights
- Access — you can see your full conversation in the chat UI; scroll back through everything you've said and the assistant has said.
- Deletion (browser side) — clear your browser's localStorage to remove your conversation immediately. This is a complete deletion on your device.
- Deletion (operator side) — email support@recoverunpaidcommissions.com to confirm we don't retain anything on our side. We can also delete your intake form record from Formspree on request.
- Portability — every Phase 5 deliverable is a downloadable PDF you can save and use independently of the Service.
- Objection — if you object to AI processing of your information, the only option is to stop using the Service; AI processing is the core function.
7. Children's privacy
The Service is intended for adults (18+) only. We do not knowingly collect information from anyone under 18. If we learn that a minor has used the Service, we will delete their information.
8. Security
We follow standard practices for the volume and sensitivity of data involved:
- All traffic is over HTTPS (TLS 1.2+) with a Google-issued certificate.
- The Anthropic API key is stored as a Cloudflare Pages secret (encrypted at rest, never exposed to the client).
- The system prompt source-of-truth has SHA-256 drift protection — production must match the file in version control.
- We do not maintain any server-side database that could be breached.
We do not recommend uploading documents containing Social Security numbers, full bank account numbers, or other high-sensitivity PII unless redacted. The AI does not need them to build your case.
9. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted with a new "Last updated" date and, where required by law, sent to the email address on file.
10. Contact
Questions about this Policy or your data: support@recoverunpaidcommissions.com