Privacy Policy

1. Introduction

W4X Technologies LLC ("W4X," "we," "us," or "our"), a Service-Disabled Veteran-Owned Small Business (SDVOSB) headquartered in Frederick, Maryland, operates Benefits Command ("the Platform," "the App," or "the Service"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using Benefits Command, you agree to the practices described in this policy.

If you have questions, contact us at: privacy@vetvault.app

2. Information We Collect

Information You Provide Directly:

• Account information: name, email address, password, branch of military service
• Profile information: service dates, character of discharge, MOS/rate/AFSC, years of service, special qualifications
• VA benefit information: disability rating percentage, service-connected conditions, VA healthcare enrollment status
• Service history: combat service, deployment locations, era of service, toxic exposure history
• Payment information: processed by Stripe, Inc. — we do not store your credit card numbers

Information Collected Automatically:

• Login history: timestamps, device type, browser user agent
• Usage data: which features and modules you access, session duration
• Technical data: IP address, device identifiers, operating system

Information Stored Locally on Your Device:

• DD214 Profile Builder data is stored in your browser's local storage and is never transmitted to our servers

3. How We Use Your Information

• To create and manage your Benefits Command account
• To provide personalized benefit calculations, recommendations, and module results
• To process subscription payments through Stripe
• To communicate service updates, account notices, and support responses
• To improve the Platform through anonymized usage analysis
• To detect and prevent fraud, abuse, and security threats
• To comply with applicable laws and regulations

4. Artificial Intelligence and Third-Party Processing

Benefits Command uses artificial intelligence features powered by Anthropic, Inc. ("Anthropic"). When you use AI-powered modules such as C&P Exam Prep, Nexus Letter Generator, or Benefits Analysis, your inputs may be processed by Anthropic's Claude AI model. Anthropic's privacy practices govern how they handle this data. We do not transmit your name, email, or account credentials to Anthropic — only the content you enter into AI-enabled modules.

For Anthropic's privacy policy, visit: anthropic.com/privacy

5. Data Sharing and Third Parties

We do not sell your personal information. We share data only with the following service providers under confidentiality agreements:

• Supabase, Inc. — Database and authentication infrastructure. Your account data and benefit information are stored on Supabase's servers.
• Stripe, Inc. — Payment processing for Pro and Elite subscriptions. Stripe's privacy policy governs payment data.
• Anthropic, Inc. — AI processing for premium features as described above.
• Netlify, Inc. — Web hosting and serverless function infrastructure.

We may disclose your information if required by law, court order, or valid government request, or to protect the rights, property, or safety of W4X Technologies, our users, or the public.

6. Sensitive Veteran Data

Benefits Command processes information that may be sensitive in nature, including disability ratings, medical conditions, military service history, and exposure histories. We treat this information with the highest level of care. This data is:

• Used exclusively to provide you with benefit analysis and guidance
• Never sold to advertisers, data brokers, or third parties
• Never shared with the Department of Veterans Affairs, Department of Defense, or any government agency without your explicit consent or legal requirement
• Protected using industry-standard encryption in transit (TLS) and at rest

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law. Anonymized, aggregated data may be retained indefinitely for product improvement purposes.

8. Your Rights

All Users: You have the right to access, correct, or delete your personal information at any time through your account settings or by contacting us at privacy@vetvault.app.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion of your data, opt out of sale (we do not sell data), and non-discrimination for exercising your rights.

European Users (GDPR): You have rights of access, rectification, erasure, restriction, portability, and objection. Our lawful basis for processing is contract performance and legitimate interests. Contact our data protection contact at privacy@vetvault.app.

9. Children's Privacy

Benefits Command is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us immediately at privacy@vetvault.app and we will delete it.

10. Security

We implement industry-standard security measures including TLS encryption, secure password hashing, row-level security on our database, and role-based access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last Updated" date at the top of this page. Your continued use of Benefits Command after changes constitutes acceptance of the updated policy.

12. Contact Us