Privacy
We collect as little as we can, and never the numbers that matter most to identity thieves.
What we never collect
Social Security numbers, dates of birth, account numbers, tax transcripts or email contents. Forms refuse anything that looks like a Social Security number. If you photograph a plan letter, your phone covers those numbers before the photo is sent (see below).
What we keep
- Searches: the employer names and years you enter, the report we produce, the dates you record for letters, your feedback and, if you give it, your email address. We use these to show your report and improve results.
- Records check: your transcript files are read in your browser and never uploaded. Only the facts you approve (payer names, last four digits of the payer's ID, years, amounts and codes) are sent to produce your results.
- Estate screens: the case number, county, filing date and the decedent's employers and years.
- Payments: handled by Stripe. We never see your card number. If you buy the case manager, Stripe gives us your email address so we can tell you when it is your turn.
- Your case: the dates you mail letters, what you tell us came back, and your case manager's notes. Free-text boxes remove long numbers automatically.
- Photos of your documents: if you photograph a plan letter, your phone covers Social Security, account and ID numbers before the photo is sent. Anthropic's Claude reads the covered photo for us and does not use it to train its models. Without a case we don't keep the photo. With a case, your case manager sees it, and we delete it 30 days after the case closes (180 days at most).
- If you ask us to email you: the email you give us, kept with that report only to send its link and, if you tick the box, reminders when a plan misses a deadline. One tap in any reminder turns them off.
- Letters we mail for you: if you choose "We mail it for you", your name, mailing address and email, the exact letter you approved, and the record of your approval (time, IP address and browser, and that you typed the code we emailed you). We use them only to print, mail and track that letter and to prove you sent it. We keep them as long as we keep your report and delete them when you ask, unless a letter is part of an open dispute.
Who else handles it
Fly.io hosts the site. Airtable holds our list of searches. Stripe processes payments. PostGrid prints and mails letters you ask us to mail, and USPS delivers them. Anthropic reads document photos you choose to send, after your phone covers private numbers. We don't sell or share data for advertising, and we don't use advertising trackers.
Your choices
Email hello@attovar.com with your report link and we will delete it.
Stressline Inc, Ohio. Updated October 2026.