Privacy Policy

1. Who We Are

Aprepa ("we," "our," or "the Service") is an AI-powered preparation tool for individuals attending asylum hearings in the United States. We are not a law firm and do not provide legal advice. Our registered operator is an individual developer ("Operator") located in the United States.

2. What Information We Collect

Account data: Email address and optionally full name when you register.

Case data: Information you voluntarily provide to generate preparation questions — country of origin, entry method, persecution type, and a description of your situation. This data is stored in our database and associated with your account.

Uploaded documents: If you upload PDF or Word documents, we parse their text content on our servers. We do not permanently store the raw file — only the extracted text is retained as part of your case record.

Usage data: Basic server logs including IP address, browser type, pages visited, and timestamps. We use these only for security and stability monitoring.

Payment data: If you subscribe, payment is processed by our payment provider. We never store raw card numbers. We receive a customer ID and subscription status only.

3. How We Use Your Information

We use your data to: create and maintain your account; generate AI-powered preparation questions tailored to your case; send transactional emails (account confirmation, password reset); process subscription payments and manage your plan; detect and prevent abuse, fraud, or security incidents; comply with applicable laws.

We do not sell your personal data to third parties. We do not use your case information for advertising.

4. AI Processing and Third-Party Services

We use Anthropic's Claude API to generate questions and parse documents. When you submit case information or upload a document, relevant portions of that data are sent to Anthropic's servers for processing. Please review Anthropic's Privacy Policy at anthropic.com/legal/privacy.

We use Supabase for database and authentication infrastructure, and Stripe for payment processing. Each of these providers has their own privacy policy and security practices.

5. Data Retention

We retain your account and case data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including encrypted connections (TLS), Row Level Security in our database ensuring users can only access their own data, and prompt injection defenses in our AI pipeline. However, no system is perfectly secure. Do not store information on this platform that you cannot afford to have exposed.

7. Sensitive Information

The information you provide (persecution descriptions, country of origin, legal history) may be sensitive. We treat it with care and use it only to generate your preparation questions. We strongly recommend you avoid including the full names of witnesses, specific informants, or information that could endanger third parties.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. We will respond within 30 days.

9. Children

This Service is not directed to children under 13. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you by updating the "Last updated" date and, for material changes, by email. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy questions or data requests, contact us at: privacy@aprepa.xyz