Privacy Policy

• Contact information: your name and email address, provided when you request an audit.
• Uploaded documents: the contract and/or invoice files you submit for analysis, including any information contained in them. You may optionally redact certain fields (name, address, account number, invoice number) before submission.
• Payment information: processed by our third-party payment provider (Stripe). We do not store your full card number.
• Usage data: basic technical information (such as IP address and browser type) collected automatically for security and service operation.

We use the information you provide to:

• Generate your audit report and any associated materials
• Communicate with you about your report (e.g. delivery, verification codes)
• Process payment for the full report
• Improve and maintain the Service
• Comply with legal obligations

We do not sell your personal information or your document content to third parties.

Your uploaded documents are encrypted and used solely to generate your report. We do not share your documents with your waste hauler, any competitor, or any other third party.

Uploaded contract and invoice files are retained for 24 months from the date of submission, after which they are automatically and permanently deleted. Your generated report and its findings are retained and are not affected by this deletion — only the original uploaded source files are removed.

We use third-party providers to operate the Service, including:

• Railway, Vercel, and Supabase — hosting and database infrastructure
• Stripe — payment processing
• Resend — transactional email delivery
• Anthropic (Claude API) — automated document analysis

These providers process data solely to perform services on our behalf and are contractually or by policy restricted from using it for other purposes.

You may request that we delete your account information and uploaded documents by contacting us at hello@commercialwastereview.com. Depending on your location, you may have additional rights under applicable law (such as the California Consumer Privacy Act) to access, correct, or delete your personal information, or to opt out of certain uses.

Consistent with the Children’s Online Privacy Protection Act (COPPA), enforced by the Federal Trade Commission, we do not knowingly collect personal information from children under 13 years of age. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information promptly from our records.

Uploaded contract and invoice files are retained for 24 months from the date of submission and then automatically deleted. Your generated report, its findings, and your account/submission information are retained beyond that point unless you request deletion under Section 5 above.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above.

Questions about this Privacy Policy can be sent to hello@commercialwastereview.com.