Privacy Policy

1) Who We Are

This Privacy Policy explains how Family Media, LLC ("we", "us", "our") collects, uses, and shares information about you when you use Garrison Ledger and related sites, apps, and services (collectively, the "Services"). If you do not agree with this Policy, do not use the Services.

• Legal entity: Family Media, LLC
• Contact: support@garrisonledger.com
• Postal address: 33 Walt Whitman Rd, Suite 201e, Huntington Station, NY 11746

2) Scope & Audience

This Policy applies to end users, subscribers, site visitors, and provider directory contacts. We do not target or knowingly collect data from children under 13 (or 16 where applicable). If you believe we collected a child's data, contact us to request deletion.

3) Information We Collect

We collect information in the following categories:

• Account & Auth: name, email, auth IDs and metadata from Clerk.
• Subscription & Billing: limited Stripe metadata (customer id, status, period end). We do not store full card numbers.
• Premium Tools Data: information you provide when using our 4 premium tools:
  • LES Auditor: Pay line item codes and amounts extracted from uploaded LES PDFs (BAH, BAS, FICA, etc.). We DO NOT store SSN, name, address, bank account numbers, or other PII from your LES (see Section 8 for our zero-storage policy).
  • PCS Copilot: Move details (origin/destination bases, move dates), household goods weight, dependents count, entitlement calculations, uploaded receipts and documents, scenario comparisons.
  • Base Navigator: Base preferences, saved ZIP codes, watchlist data, search criteria (bedrooms, max rent, kids grades).
  • Ask Military Expert: Questions submitted, AI-generated responses, feedback ratings, conversation history for your account.
• Calculator Tools: Inputs and results from our 6 free calculators (TSP Allocation Modeler, SDP Strategist, House Hacking Calculator, Military Salary Calculator, PCS Planner, On-Base Savings Calculator).
• Directory Data: provider submissions (name, business details, contact info) and admin notes.
• Support & Refunds: messages and fields you submit in support/refund forms.
• Usage & Analytics: page views, events, device/browser data, timestamps, IP (short-retained), and coarse location inferred from IP.
• Cookies & Similar Tech: session, auth, preference, and analytics cookies.

4) Sources of Data

• Directly from you (forms, assessment, saved models, support)
• Automatically (cookies, logs, usage analytics)
• Processors: Clerk (auth), Supabase (database), Stripe (billing), Vercel (hosting)

5) How We Use Information

• Provide, secure, and improve the Services
• Personalize your dashboard, plan, and tools
• Process payments, manage entitlements, prevent fraud/abuse
• Respond to support requests and honor privacy rights
• Analyze aggregate usage to improve content and UX
• Send service emails; send marketing emails only with consent (opt-out anytime)
• Comply with law, enforce terms, and protect our rights

6) When We Share Information

We share limited data with service providers who help us operate the Services:

• Clerk (authentication & user management)
• Supabase (database, Row Level Security)
• Stripe (payments & subscription status)
• Vercel (hosting & CDN)
• Google APIs (Base Navigator external data: weather conditions via Google Weather API, distance calculations via Google Distance Matrix API, nearby amenities and military facilities via Google Places API - only base location data shared, no PII)
• SchoolDigger (school ratings and data for Base Navigator - only ZIP codes shared, no PII)
• Zillow via RapidAPI (housing market data for Base Navigator - only ZIP codes shared, no PII)
• Google Gemini AI (Ask Military Expert responses - questions and context sent to Google Cloud AI, responses cached locally, no PII transmitted)

We may also share when required by law, in a merger or acquisition, or with your explicit direction. We do not sell personal information, and we do not share it for cross-context behavioral advertising without your consent.

7) Retention

We keep personal data only as long as needed for the purposes in this Policy, then delete or de-identify it. You may delete your account or request deletion of assessment/saved models at any time.

8) Security

We use reasonable administrative, technical, and organizational measures, including HTTPS, access controls, database RLS, key management, and least-privilege principles. No method is 100% secure.

LES Auditor - Zero Storage Policy

When you upload your Leave and Earnings Statement (LES) to our LES Auditor tool:

1. 1. Your PDF is processed in-memory only on our secure servers
2. 2. We extract ONLY line item codes and amounts (e.g., BAH, BAS, FICA)
3. 3. Your PDF is immediately deleted after processing - we NEVER store it
4. 4. We DO NOT store: SSN, name, address, bank account, routing number, or any personally identifiable information
5. 5. Only non-sensitive pay line items are kept for your audit history

If you delete your account, all audit history (including line items) is immediately purged from our database.

9) Your Rights

Depending on where you live (EEA/UK, California, Virginia, Colorado), you may have rights to access, correct, delete, port, or restrict processing of your data; to opt-out of selling/sharing; and to appeal denials. To exercise rights, contact support@garrisonledger.com.

10) Changes to this Policy

We may update this Policy. We will post the updated version with a new "Effective" date and, when appropriate, notify you.

11) Contact

Questions or requests: support@garrisonledger.com