Privacy Policy

1. Who we are

Augusta Rule Packet Builder ("we," "us," "our") provides a software tool that helps users organize documentation related to IRC §280A(g) (the "Augusta Rule"). Contact information is provided in Section 12.

2. Your packet content stays on your device

The information you enter into the packet builder — including your business name, entity type, property/residence details, rental dates, comparable rental research, meeting agendas, attendees, payment records, and notes — is stored locally in your own web browser (browser localStorage on your device). We do not transmit, receive, or store your packet content on our servers. Because the data lives in your browser:

• Clearing your browser data, switching browsers, or using a different device will remove or hide your packet — we cannot recover it for you.
• Anyone with access to your device and browser profile can see your packet. Protect your device accordingly.
• You are responsible for exporting and backing up any packet you want to keep.

3. Information we do collect

• Usage and device data: standard server and analytics logs such as IP address, browser type, device identifiers, pages viewed, timestamps, and referring URL.
• Cookies and similar technologies: limited first-party cookies for site functionality and analytics. See "Cookies" below.
• Information you send us directly: if you contact us by email, phone, or mail, we receive what you choose to share (e.g., your name, email, phone number, and the content of your message).
• Payment information (if applicable): if and when paid plans are offered, payment will be processed by a third-party payment processor (e.g., Stripe). We would receive only limited billing metadata (such as last 4 digits, card brand, country, and subscription status) — never full card numbers.

4. How we use the information we collect

• Operate, maintain, secure, and improve the website and the packet builder.
• Respond to support requests and other communications you initiate.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Understand aggregate usage (which pages are visited, broad geography, device type) to improve the Service.

We do not sell or "share" (as those terms are defined under CCPA/CPRA) your personal information. We do not use your packet content to train AI models — your packet content never reaches us in the first place.

5. How we share information

We share information only with:

• Service providers (subprocessors) that help us run the website, including hosting and content delivery, analytics, email delivery, and (if applicable) payment processing. These providers are bound by contract to use the data only to provide services to us.
• Legal and safety: when required by law, subpoena, or court order, or to protect the rights, property, or safety of users or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

6. Data retention

Packet content: retained on your device by your browser until you clear it. We have no server-side copy to retain or delete. You can remove the local data at any time by using the "reset" function in the app or by clearing your browser's site data for this site.

Server logs and analytics: retained for a limited period (typically up to 12 months) for security, troubleshooting, and aggregate analytics.

Correspondence (email, phone, mail): retained for as long as reasonably necessary to respond and to comply with legal, tax, and recordkeeping obligations.

7. Security

We use industry-standard administrative, technical, and physical safeguards for the limited information we do collect, including encryption in transit (HTTPS/TLS) and access controls on our systems. Because your packet content is stored in your own browser, you are responsible for the security of your device and browser profile. No system is 100% secure; you use the Service at your own risk.

7. Your rights

Depending on where you live (including under GDPR, the UK GDPR, CCPA/CPRA, and similar U.S. state laws), you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; export a portable copy; object to or restrict certain processing; and opt out of "sale" or "sharing" (we do neither). To exercise any of these rights, contact us using the information in Section 12. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use strictly necessary first-party cookies for authentication and session management, and limited first-party analytics to understand how the service is used. You can control cookies through your browser settings; disabling them may prevent you from signing in or using parts of the service.

9. Children

This service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. International users

The service is operated from the United States. If you access it from outside the U.S., you understand your information will be transferred to, stored, and processed in the U.S. and other countries where our service providers operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new effective date and, where appropriate, communicated to you by email or in-product notice.

12. Contact

Questions about this policy or our data practices, or to exercise any of your privacy rights, contact us at: