Privacy Policy

1. Introduction

Mighty Process Server LLC (“we,” “us,” or “the Company”) operates the Mighty Process Server platform (“the Platform”), a software-as-a-service application accessible at mightyprocessserver.net and through associated mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully. By using the Platform, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, business name, mailing address, and profile photo when you create an account.
• Payment Information: Billing details processed through Stripe. We do not store complete credit card numbers on our servers.
• Legal Documents: Court documents, summonses, subpoenas, and related legal papers you upload for job creation and processing.
• Professional Information: Licensing details, certifications, affiliations, service areas, and years of experience for process server profiles.
• Communications: Messages sent through the Platform's messaging system, community posts, and support requests.
• AI Interactions: Questions and conversations with MightyAutomationAI, including feedback (thumbs up/down) on AI responses.

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, timestamps, click patterns, and session duration.
• Location Data: Approximate location based on IP address. Precise GPS location only when you explicitly enable location services for field operations.
• Cookies & Similar Technologies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform and its features
• Process your subscription payments and platform fees
• Facilitate job creation, dispatching, and process server matching
• Generate affidavits, field sheets, and proof-of-service documents
• Power MightyAutomationAI document extraction and chat features
• Send you transactional notifications (job updates, payment confirmations, bid requests)
• Display your process server profile in our public directory (if applicable)
• Improve the Platform through analytics and usage patterns
• Enforce our Terms of Service and protect against fraud or abuse
• Respond to your inquiries and provide customer support

4. AI & Document Processing

MightyAutomationAI uses third-party AI services (currently OpenAI) to analyze legal documents and provide chat-based assistance. When you upload documents or interact with the AI:

• Documents are sent to AI providers solely for the purpose of extracting case information for your use.
• We do not use your legal documents to train general-purpose AI models.
• AI chat conversations are stored in your account for your reference and may be used to improve the accuracy of our FAQ system.
• Flagged AI responses (via thumbs-down feedback) may be reviewed by administrators to improve response quality.
• The embeddable widget processes anonymous conversations; no personally identifiable information is collected from widget users.

5. Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Other Users: Your professional profile (name, company, city, state, rating, certifications) is visible to other Platform users and in the public directory. Legal document details are shared only with parties involved in a specific job (client, assigned process server, dispatching member).
• Service Providers: We use trusted third-party services for payment processing (Stripe), email delivery, AI processing (OpenAI), cloud hosting (Vercel, Supabase), and analytics. These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose information if required by law, court order, or government request, or if necessary to protect the rights, property, or safety of Mighty Process Server LLC, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your account information for as long as your account is active. Upon account deletion, we retain your data for 30 days to allow for recovery, after which it is permanently deleted. Legal documents and job records may be retained for a longer period as required by applicable record-keeping laws. Anonymous analytics data and aggregated usage statistics may be retained indefinitely.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security (RLS) ensuring users can only access their own data
• Secure authentication via Supabase Auth with email verification
• Regular security audits and monitoring
• Stripe PCI-compliant payment processing (we never store full card numbers)

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format.
• Opt-Out: Unsubscribe from marketing communications at any time via account settings.
• Push Notifications: You can enable or disable push notifications in your browser settings and account preferences.

To exercise any of these rights, contact us at support@mightyprocessserver.net. We will respond within 30 days of receiving your request.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us using the information below.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.

11. Third-Party Links & Services

The Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Platform. Your continued use of the Platform after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us: