Privacy Policy

Effective March 1, 2026

1. Information We Collect

We collect only what is necessary to provide the Service:

  • Claim details: state of residence, move-out date, deposit amount, amount returned, and related tenancy information you enter during the questionnaire.
  • Personal details: your name, landlord name, and landlord address, collected only if you purchase a demand letter.
  • Email address: collected only if you opt in to receive your letter or follow-up communications by email.
  • Payment information: processed securely by Stripe. We never see, store, or have access to your full card number.
  • Usage data: anonymous analytics such as page views, device type, and browser, collected to improve the Service.

2. How We Use Your Information

  • To analyze your security deposit claim against applicable state law.
  • To generate and deliver your personalized demand letter.
  • To process your payment securely.
  • To send transactional emails (letter delivery, follow-up reminders) if you provide your email.
  • To improve the Service and fix bugs.
  • To comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Sharing

We share data only with the service providers necessary to operate GetItBack:

  • Stripe: payment processing. Subject to Stripe's Privacy Policy.
  • Vercel: hosting and infrastructure.
  • Resend: transactional email delivery.
  • Neon: database hosting (encrypted at rest and in transit).

We may also disclose information if required by law, subpoena, or court order.

4. Data Retention

Claim data is retained for the duration of the relevant statute of limitations (typically 1–6 years depending on your state) so you can access your documents. Payment records are retained as required by applicable tax and financial regulations. You may request early deletion at any time (see Section 6).

5. Data Security

We use industry-standard security measures including HTTPS encryption in transit, encrypted databases at rest, and secure payment processing through Stripe (PCI DSS Level 1 certified). While no system is 100% secure, we take reasonable steps to protect your information from unauthorized access or disclosure.

6. Your Rights

You have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate data.
  • Deletion: request deletion of your data, subject to legal retention requirements.
  • Portability: request your data in a portable format.

To exercise any of these rights, email privacy@getitback.us. We will respond within 30 days.

7. Cookies

We use a single session cookie to maintain your progress through the questionnaire. We do not use advertising or third-party tracking cookies. Anonymous analytics may use local storage or cookies to distinguish unique visitors.

8. Children's Privacy

GetItBack is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn we have collected data from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or data requests? Reach us at privacy@getitback.us.