How VALOR Console collects, uses, protects, retains, and shares information, including sensitive health-related data, and the limits we observe.

Privacy Policy

Last updated: September 16, 2026. This Privacy Policy describes how Valor Hart LLC ("Valor Hart," "we," "us," or "our") collects, uses, protects, and shares information through VALOR Console.

1. Information We Collect

We collect the following categories of information:

- Account Information: name, email address, professional credentials, and contact details provided during registration.

- Billing Information: payment method details processed through our third-party payment processor (Stripe). We do not store full payment card numbers on our servers.

- Uploaded Records: medical records, litigation documents, and other files you upload to the Service for review and analysis. These are processed solely to provide the Service to you.

- Usage Data: log data, device information, IP addresses, browser type, pages visited, and feature usage patterns collected automatically when you use the Service.

- Communications: correspondence you send to us, including support requests and feedback.

2. How We Use Your Information

We use collected information to:

- Provide, maintain, and improve the Service.

- Process transactions and send billing-related communications.

- Respond to your requests and provide customer support.

- Monitor for security threats and prevent fraud.

- Comply with legal obligations.

- Generate de-identified, aggregate analytics to improve the Service (no individual records or personally identifiable information are used for this purpose).

3. No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties. We do not share your information for third-party marketing purposes. We do not use your uploaded records for any purpose other than providing the Service to you.

4. Sensitive and Health-Related Data

We recognize that the records you upload may contain sensitive health information. We apply the following protections regardless of whether HIPAA applies to your specific use:

- Data minimization: we process only the data necessary to provide the Service.

- Access controls: uploaded records are accessible only to you and authorized members of your organization.

- Encryption: all data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

- Audit logging: all access to uploaded records is logged for accountability.

- No secondary use: uploaded records are never used for marketing, analytics, model training, or any purpose other than providing the Service to you.

5. AI and Automated Processing

The Service may use AI-assisted tools to generate draft documents, summaries, or analyses based on the records you upload. These AI-generated outputs are drafts for your review and are never treated as final clinical opinions. You, the licensed provider, retain full control over and responsibility for all final work product. AI processing occurs within our secured infrastructure and is subject to the same data protection controls as all other Service functions.

6. Data Retention and Destruction

We retain your data only as long as necessary to provide the Service and comply with legal obligations. Upon account termination, you may request export of your data for thirty (30) days. After the retention period, data is securely destroyed using methods consistent with NIST SP 800-88 guidelines. Legal hold requirements may extend retention where required by law.

7. Security

We implement administrative, technical, and physical safeguards to protect your information, including:

- Encryption in transit and at rest.

- Role-based access controls with row-level security.

- Regular security assessments and monitoring.

- Incident response procedures.

In the event of a data breach affecting your information, we will notify you in accordance with applicable state law (Alabama: 45 days; other states as required by their respective breach notification statutes).

8. Your Rights

Depending on your state of residence, you may have rights to:

- Access the personal information we hold about you.

- Request deletion of your personal information.

- Request correction of inaccurate personal information.

- Opt out of certain data processing activities.

- Receive a copy of your data in a portable format.

To exercise these rights, contact us at support@valorhartllc.com. We will respond within the timeframe required by applicable law.

9. Third-Party Services

We use the following categories of third-party services:

- Payment processing (Stripe).

- Cloud hosting and infrastructure (Vercel, Supabase).

- Analytics (aggregate, de-identified usage data only).

Each third-party provider is bound by contractual obligations to protect your information and use it only for the purposes we specify.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. We will re-prompt acceptance when the policy version changes.

12. Contact

For privacy-related questions or requests:

Valor Hart LLC

Email: support@valorhartllc.com

Website: https://valor.valorhartllc.com