Privacy Notice

Last updated: July 1, 2026

1. Who we are

DisputePacket is operated by Dr Michael Lyons PC dba DisputePacket LLC ("the Company", "we"). We are the data controller for personal information processed through the service.

2. What we collect

  • Account data: name, email address, hashed password (or federated sign-in identifier such as Google).
  • Case content you upload: receipts, emails, text messages, photos, contracts, credit-card statements, warranties, and other evidence you choose to add to a case.
  • Case metadata: merchant names, dispute type, amounts, dates, notes, generated letters and packets.
  • Support communications: messages you send us.
  • Usage & device data: IP address, browser and device identifiers, pages viewed, and basic telemetry to keep the service secure and reliable.

3. Why we use it

  • To create your account and provide the service (performance of a contract).
  • To generate the letters, complaints, and packets you request (performance of a contract).
  • To keep the service secure, prevent fraud and abuse, and enforce our terms (legitimate interests).
  • To respond to your support requests (performance of a contract / legitimate interests).
  • To improve the product — for example fixing bugs or refining templates — using aggregated or de-identified information wherever possible (legitimate interests).
  • To send transactional emails about your account and, with your consent, occasional product updates (consent).
  • To comply with legal obligations (legal obligation).

4. AI processing

To generate packets we send the relevant text and metadata from your case to trusted AI model providers acting as our processors. We do not sell your content and we do not use your case content to train third-party foundation models.

5. Who we share it with

  • Hosting & infrastructure providers — our database, storage, and application hosting subprocessors.
  • AI model providers — to generate document drafts based on the inputs you supply.
  • Paddle — our Merchant of Record for payments, subscription management, invoicing, and sales-tax compliance.
  • Email & support tooling — to deliver transactional messages and handle your support requests.
  • Professional advisers — legal, accounting, and similar, under confidentiality.
  • Authorities — where required by law, court order, or to protect the safety, rights, or property of users or the Company.

We do not sell your personal information.

6. Retention

We keep your account and case content for as long as your account is active. You can delete individual cases from the dashboard, and you can request full account deletion at any time (see Section 8). We may retain limited records (such as billing history) for the period required by law.

7. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, encrypted storage, access controls, and per-user database row-level security so that only you can access your own cases and evidence. No system is 100% secure — please use a strong, unique password.

8. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your account and data;
  • Export your data in a portable format;
  • Object to or restrict certain processing;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@disputepacket.com. We aim to respond within 30 days.

9. Cookies

We use essential cookies to keep you signed in and to keep the service secure. We may use limited analytics cookies to understand how the product is used. You can manage cookies in your browser settings; disabling essential cookies may break the service.

10. International transfers

Our subprocessors may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

11. Children

DisputePacket is not directed to children under 16 and we do not knowingly collect their personal information.

12. Changes

We may update this notice from time to time. Material changes will be announced in the product or by email.

13. Contact

Dr Michael Lyons PC dba DisputePacket LLC — privacy questions: privacy@disputepacket.com.