Privacy Policy

Introduction

Valor Rating LLC ("Valor Rating," "we," "us," or "our") operates the Valor Rating platform at valorrating.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services to prepare VA disability claim documentation.

By using Valor Rating, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please do not use our services.

Information We Collect

Collecting information is not the same as exposing it. Each item below is stored encrypted, used only to prepare your VA claim, and kept within the protections described under "Data Security" and "Third-Party Services." Where an item is collected because a VA form asks for it, we say so.

Account Information

• Full name, email address, and phone number (your name and contact details are required on every VA form; your email is also how we reach you about your claim)
• Password (stored as a secure hash, never in plaintext)

Military Service Information

Required on VA Form 21-526EZ and used to pre-fill it, so you do not have to type it twice.

• Branch of service, rank, MOS/AFSC, service dates
• DD-214 documents (uploaded so we can read your service history from them; stored in private, access-controlled storage)
• Deployment locations and combat service history
• Awards and decorations

Sensitive Personal Information

The VA requires all three of these on every claim form. They are collected for that purpose only, stored encrypted, and never sent to AI providers.

• Social Security Number (required on every VA form; encrypted with an additional AES-256-GCM layer before storage and decrypted only to fill your VA forms or to show you its last four digits on your profile)
• Date of birth (required on every VA form; stored encrypted; never sent to AI providers)
• Mailing address (required on every VA form so the VA can correspond with you; stored encrypted; never sent to AI providers)

Health and Medical Information

This is the substance of a disability claim. It is used to draft your statements, nexus letters, and exam preparation materials, and is retrieved only for your own documents — never combined with any other veteran's.

• Medical conditions and disabilities you are claiming
• Symptom descriptions and functional impact statements
• Exposure history (e.g., burn pits, Agent Orange, radiation)
• Current VA disability rating and rated conditions
• Medical records and supporting documents you upload

Buddy Statement Information

Collected only if you invite someone to provide a witness statement, and used only to send that invitation and produce the statement.

• Names and email addresses of individuals you invite to provide witness statements
• Event descriptions, dates, and locations provided for statement generation
• Digital signatures captured during the statement signing process

How We Use Your Information

We use your information to:

• Generate VA disability claim forms (21-526EZ, 21-4138) with accurate, pre-filled data
• Create AI-assisted personal statements and buddy statement drafts
• Parse your DD-214 to auto-fill service history fields
• Provide personalized guidance through our AI assistant
• Generate C&P exam preparation materials tailored to your conditions
• Send email invitations and notifications related to your claims
• Improve our services through anonymized usage analytics

We do not use your information to sell you third-party products, share it with advertisers, or build profiles for anyone outside Valor Rating.

Cookies and Tracking Technologies

We use cookies, pixels, and similar browser storage to maintain sign-in sessions, remember preferences, understand website usage and performance, and measure how visitors reach our website through campaigns and referrals. Service providers that operate features such as our support widget may also use these technologies to deliver those features.

You can block or delete cookies through your browser settings. Doing so may affect sign-in, saved preferences, or support features. Cookie settings do not subscribe you to SMS messages; texting requires the separate opt-in described in this policy.

Third-Party Services and Data Sharing

We do not sell your personal information to anyone, and we do not share it with advertisers or data brokers. The companies below are the infrastructure that runs our platform — the database that stores your account, the servers that host the site, the AI models that draft your documents, the service that delivers our emails. Each one acts as a processor under a data processing agreement: it may handle your data only to provide the listed service to us, and may not use it for any purpose of its own.

SMS / Text Message Communications

If you opt in to receive text message reminders from Valor Rating, the following terms apply:

• What we send. Transactional reminders about the status of your VA disability claim — for example, when your forms are ready to sign, when your signed packet is ready to submit, or when your draft has been inactive. We do not send marketing or promotional text messages.
• Frequency. Up to 4 messages per month per user.
• Carrier charges. Message and data rates may apply, depending on your mobile plan. Valor Rating does not charge you for the messages we send.
• Opt-out. You can opt out at any time by replying STOP to any message you receive from us. Once you reply STOP we will stop sending text messages to that number. You can also turn off text reminders in your Valor Rating account settings.
• Help. Reply HELP to any message we send for assistance, or contact support@valorrating.com.
• How we use your number. We use your mobile number solely to send the text reminders described above. We do not sell, rent, or share your phone number with third parties for their marketing purposes. Your number is shared with our SMS delivery vendor (Pingram, Inc.) only for the purpose of delivering the messages you've opted in to receive.
• Consent. Consent to receive text messages is not required as a condition of purchasing any Valor Rating product or service. You may use Valor Rating without enabling text reminders.
• Eligibility. SMS reminders are only available to users with a verified US mobile number. We do not support international SMS at this time.

Customer Support Text Messages

If you request a text reply through our support form, Valor Rating LLC uses your name, email address, mobile number, support question, and consent record to respond to that request through GoHighLevel / LeadConnector. These customer-support conversations are separate from the Pingram reminder program described above. Support message frequency varies with your inquiry. Message and data rates may apply.

This support request does not enroll you in marketing texts. We do not sell, rent, or share mobile information or SMS consent with third parties for their marketing or promotional purposes. Our messaging providers process it to provide this service. Please keep medical information, claim details, and documents in your secure account.

Reply STOP to the support number to stop its messages, or HELP for assistance. You can also contact support@valorrating.com. Texting is optional and is not a condition of purchase or of using Valor Rating; email and phone support remain available.

Data Security

• Encryption at rest: Everything we store — your profile, your claim, your uploaded documents — is encrypted at rest by our database and storage providers. Your Social Security Number is additionally encrypted with AES-256-GCM before it is stored, using a key held outside the database, so it is unreadable even to someone with direct database access. All database connections use SSL/TLS.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted via HTTPS.
• Access controls: Row-level security policies ensure you can only access your own data. Admin access is restricted by database flags and optional IP whitelisting.
• Audit logging: Access to sensitive data (such as SSN) is logged for security monitoring.
• Document storage: Uploaded files are stored in private, access-controlled storage buckets with signed URLs.

Infrastructure and Compliance Standards

Valor Rating is built on infrastructure providers that maintain recognized security certifications:

• Supabase (database and authentication) — SOC 2 Type II certified
• Vercel (application hosting) — SOC 2 Type II certified
• Amazon Web Services (document scanning) — SOC 2 Type II, HIPAA eligible, FedRAMP authorized
• OpenAI / Anthropic / Google Cloud (AI providers) — SOC 2 Type II certified; API usage with data processing agreements

While Valor Rating itself is not yet SOC 2 certified, we leverage the security controls and compliance certifications of our infrastructure providers and follow industry best practices for application security, including OWASP guidelines and regular security reviews. We are committed to pursuing independent security certifications as we scale.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If your account is inactive for a period of two (2) years, we may delete your account and associated personal data after providing you with reasonable advance notice via the email address on file.

You may request deletion of your account and associated data at any time by contacting us at support@valorrating.com. We will process deletion requests within forty-five (45) days of receiving a verified request. You will receive a confirmation email once deletion is complete.

When you delete a document through our platform, it is removed from both our database and file storage. We may retain certain data as required by law or for legitimate business purposes (e.g., audit logs, transaction records) for up to three (3) years after account deletion.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and personal data
• Export your data in a portable format
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us at support@valorrating.com.

Notice for Residents of Certain U.S. States

U.S. state consumer privacy laws may provide residents with additional rights regarding our use of their personal information. Residents of states including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia may have some or all of the following additional rights:

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information collected from you, subject to certain exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information — we do not sell your personal information
• Right to non-discrimination for exercising your privacy rights
• Right to data portability — receive your personal information in a portable, readily usable format
• Right to limit use of sensitive personal information to purposes necessary for providing the Service

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific rights including the right to know, delete, correct, and opt out. We do not sell or share personal information for cross-context behavioral advertising. Categories of personal information we collect are described in the "Information We Collect" section above.

Exercising Your Rights

To exercise any of these rights, contact us at support@valorrating.com. We will verify your identity before processing your request and respond within the timeframe required by applicable law (generally 45 days). You may designate an authorized agent to make a request on your behalf.

Children's Privacy

Valor Rating is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the platform after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at: