Last updated: July 2025 · AD Collective LLC · Cheyenne, Wyoming
Plain-language summary: We collect only the information you give us to generate your report. We use Stripe for payment, OpenAI to generate your report, Supabase to store your data, and Resend to email your report. We don't sell your information. You can ask us to delete your data at any time by emailing support@veteranbenefitsreport.com.
1. Who we are
AD Collective LLC is a Wyoming limited liability company headquartered in Cheyenne, Wyoming. We operate the website veteranbenefitsreport.com and provide AI-generated VA disability claim strategy reports. We are not affiliated with the U.S. Department of Veterans Affairs.
2. What information we collect
When you use our service, we collect:
Contact information: Your name and email address.
Service history: Branch of service, years served, and current VA disability rating.
Health-related information: Conditions you have filed claims for, symptoms you describe, and responses to our guided questionnaire. This may include sensitive information about your physical and mental health.
Payment information: Processed entirely by Stripe. We never see or store your card number, CVV, or full payment details.
Technical data: Standard server logs (IP address, browser type, pages visited). We do not use tracking pixels or behavioral ad targeting.
3. How we use your information
We use the information you provide to:
Generate your personalized VA claim strategy report using OpenAI's GPT-4o model.
Email your completed report to you via Resend.
Process your payment via Stripe.
Respond to support requests.
Maintain records as required by law and our data retention policy.
We do not use your health information for marketing, profiling, or any purpose other than generating your report.
4. Third-party processors
Your data passes through the following services:
Stripe (stripe.com) — payment processing. Stripe is PCI DSS Level 1 certified. Your card data is stored and processed entirely by Stripe under their privacy policy.
OpenAI (openai.com) — AI report generation. Your service history and symptom responses are sent to OpenAI's API to generate your report. OpenAI's API data usage policy applies.
Supabase (supabase.com) — database storage. Your submission data and generated report are stored in a Supabase-hosted PostgreSQL database.
Resend (resend.com) — transactional email delivery. Your email address and report content are transmitted via Resend to deliver your report.
We do not sell, rent, or share your personal information with any third party for their own marketing purposes.
5. Health information notice
The information you provide includes descriptions of physical and mental health conditions. AD Collective LLC is not a HIPAA-covered entity (we are not a healthcare provider, health plan, or healthcare clearinghouse), and this information is not protected health information (PHI) under HIPAA. However, we treat your health-related data with the same care and discretion we would apply to PHI. Your health information is used solely to generate your report and is not shared, sold, or disclosed except as described in Section 4 above.
6. Data retention
Paid submissions: Your submission data and generated report are retained for 24 months from the date of purchase, then automatically deleted.
Unpaid submissions: Submissions where payment was not completed are deleted after 30 days.
Payment records: Stripe retains payment records for 7 years as required by financial regulations. We cannot delete these records on request, but they contain no health information.
7. Your rights
You may request at any time:
A copy of the personal information we hold about you.
Correction of inaccurate information.
Deletion of your submission data (subject to the payment record exception above).
All data is transmitted over HTTPS. Our database is hosted by Supabase with access restricted to service-role credentials stored in Vercel's encrypted environment. We do not store payment card data. We conduct periodic reviews of our access controls and third-party integrations.
9. Children
Our service is intended for U.S. military veterans, who are adults by definition of military service eligibility. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information through our site, contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact
Questions, requests, or concerns about this Privacy Policy should be directed to: