Privacy Policy

Effective Date: June 3, 2026 | Last Revised: June 3, 2026

Veteran Analytics LLC, Lakewood Ranch, Florida · contact@veterananalytics.com

What This Policy Covers

This Privacy Policy describes how Veteran Analytics LLC (“Veteran Analytics,” “we,” “us,” or “our”) collects, uses, and handles information when you visit askvalor.ai (the VALOR AI product surface) or veterananalytics.com (the Veteran Analytics LLC corporate site), or interact with any Veteran Analytics service, including the VALOR AI research interface and forthcoming features such as the Forms Assistant and the VA Combined Ratings Calculator.

Scope: U.S. users only. The Services are designed for users in the United States only and are not intended for users located outside the United States. If you access the Services from outside the United States, you do so on your own initiative and at your own risk, and you are responsible for compliance with any applicable local laws. We do not direct, market, or design the Services for users in the European Union, the United Kingdom, the European Economic Area, or any other jurisdiction outside the United States.

This policy works alongside the Beta Access Agreement you accept when you sign in to use private-beta features. Where the two documents address the same topic, the Beta Access Agreement governs your specific beta-access conditions; this Privacy Policy governs how we handle information about you.

About the Company

Veteran Analytics LLC built and operates VALOR AI. The founder — a federal employee and Army veteran with nearly two decades inside the federal benefits system as both customer and employee — built it on personal time, with personal equipment, using only public information. He was tired of watching veterans and their families struggle to access what should be accessible.

VALOR AI is not affiliated with, endorsed by, or operated by the Department of Veterans Affairs, the Secretary, or the United States Government. Nothing you enter is shared until you take action to share it. VALOR AI is a research tool — verify anything important against primary sources before acting on it.

Veteran Analytics LLC does not compete with government agencies or veteran service organizations. By closing the access gap between veterans and the institutions built to serve them, the company aims to make those institutions more effective at their mission.

Information We Collect

Authentication and User Accounts

Access to the Site’s research and analysis features requires you to sign in with a Google account. When you authenticate, we receive from Google’s OAuth service:

Your email address and basic identity claims (openid + email scopes) — used to identify your account and contact you about service-essential matters.
Your basic profile (your name and profile picture if you have one on your Google account, via the profile scope) — used to personalize the in-product experience (greeting, account display).
Per-file Google Drive access (drive.file scope) — used solely for the in-product workspace feature that lets you bring specific Drive documents into the VALOR AI research interface to reference while asking questions. We can ONLY access files you explicitly hand us through Google’s Drive picker. We CANNOT browse, list, search, or enumerate your Drive contents. We do not retain copies of selected files server-side beyond the active session.

We do not receive or store your Google password, refresh tokens beyond what is necessary for active session operation, or any other Google account data.

Your email address is stored in a server-side session record used to manage your authenticated session and conversation history (see “Search Queries and Conversation History” below). Session records are automatically deleted 24 hours after your last interaction.

During our beta program, we maintain a record of invited beta testers (email address, invitation date, and access status) to manage platform access. This record is stored securely in our cloud infrastructure and retained for the duration of the beta program. At the end of the beta program, beta-tester records will either be deleted or migrated to general user records with renewed consent — you will be notified of the transition. You may request removal at any time by emailing contact@veterananalytics.com. Outside of the beta tester access list, we do not maintain long-term user profiles, preference databases, or marketing records tied to your authenticated identity.

Email Signup

If you submit your email address through the Site’s signup form, we collect and store it to notify you when Veteran Analytics services become available. Submitted emails are recorded in a Google Sheets spreadsheet along with a timestamp and the source of the submission. You will not receive unsolicited commercial email. Every notification email includes an unsubscribe link.

Web Server Log Data

The Site automatically collects standard log information, including your browser type, referring URL, and pages visited. Server logs are retained for 30 days and then automatically deleted. This data is used for site administration and security only and is not linked to your identity. We do not log IP addresses in application-level logs, though Google Cloud Platform infrastructure may record IP addresses in its own access logs as part of standard service operation.

Search Queries and Conversation History

When you submit a query to the VALOR AI research interface, that query is transmitted to our backend infrastructure for processing. Query text is processed by our search infrastructure and our hosting infrastructure as part of delivering search results.

Conversation history is stored server-side. When you use the VALOR AI research interface, your conversation history (queries and responses) is stored in our database to provide session continuity. This data is keyed to an anonymous session identifier, not to your email address or Google account. Conversation records are automatically deleted 24 hours after your last interaction via an automatic expiration policy. You may clear your conversation history at any time by logging out.

By default, query text is not retained in application logs beyond the conversation record described above. If diagnostic logging is temporarily enabled, internal-scope queries are never logged regardless. We do not build user profiles from query content or use it for advertising purposes. However, if you include personal information (such as your name, Social Security number, VA claim number, or other identifying details) in a search query, that information will be present in the conversation record until it expires.

Do not enter personal identifying information into the VALOR AI research interface. This tool is designed to answer questions about laws, regulations, policies, and benefits programs, not to process individual claims data. You do not need to identify yourself to use it.

Forms Assistant (Coming Soon)

When the Forms Assistant launches, it will operate entirely within your browser. All data you enter to complete VA forms (including your name, Social Security number, date of birth, bank account information, service dates, and disability descriptions) will be processed locally in your browser using JavaScript and the pdf-lib library. This data is used to fill PDF form fields and generate a downloadable file on your device.

None of this information will be transmitted to our servers. The only server interaction is a proxy request to fetch blank PDF form templates from VA.gov (to bypass cross-origin restrictions). The proxy transmits no veteran data. It retrieves an empty form and returns it to your browser. Your completed form data never leaves your device unless you choose to download, print, or share the filled PDF yourself.

Calculator (Coming Soon)

When the VA Combined Ratings Calculator launches, it will operate entirely within your browser. No data you enter into the calculator will be transmitted to our servers or stored anywhere. It is purely local computation.

What We Do Not Collect

We do not collect your name (beyond what your Google account profile provides at sign-in), VA claim information, Social Security number, disability rating, military service records, or any other personally identifiable information unless you provide it directly and explicitly (e.g., by entering your email in the signup form, or by handing us a specific Drive document via the Google Picker). We do not have access to VA systems, your VA profile, or your claims file. We do not collect this information and we have no way to retrieve it.

Categories of Personal Information We Collect (CCPA-Defined)

For California residents and as a structural reference, the categories of personal information we collect and the categories of sources are:

Identifiers (name from Google account profile, email address, anonymous session identifier) — from you and from Google OAuth
Internet or other electronic network activity (browser type, referring URL, pages visited, conversation interaction patterns) — collected automatically
Geolocation data — none collected at the application level (Google Cloud infrastructure may log IP-derived geolocation in its standard access logs)
Inferences — none drawn from your data
Sensitive personal information — we do not collect sensitive personal information server-side. The Forms Assistant (when launched) processes SSN, biometric or health-adjacent disability data, and bank account information ENTIRELY in your browser; this data is never transmitted to our servers.

We collect personal information for the following business purposes: providing the Services you request, maintaining your authenticated session, sending you service-essential communications, complying with legal obligations, and protecting the security of our Services and our users.

How We Use Your Information

Email addresses collected through signup are used solely to notify you when Veteran Analytics services become available and to send service-related announcements you have opted into. We do not use email addresses for advertising, profiling, or any commercial purpose unrelated to the services you requested.

Email addresses and basic profile information received through Google authentication are used to manage your authenticated session and personalize the in-product experience. They are stored in the server-side session record for the duration of your session (up to 24 hours) and are not added to any mailing list, marketing database, or long-term user profile.

The drive.file Google Drive scope is used solely to retrieve and display files you explicitly pick through Google’s Drive picker, for use as reference material in the VALOR AI research interface during your session. We do not retain copies of these files server-side beyond your active session.

Server log data is used for site administration, security monitoring, and debugging. It is not used for advertising or user profiling.

Query data is used to process your search request and return results. We do not use query content to build user profiles or for advertising purposes.

Sale or Sharing of Personal Information

We do not sell or share personal information (as those terms are defined under the California Consumer Privacy Act). We have not sold or shared personal information in the preceding 12 months. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.

Third-Party Infrastructure

Veteran Analytics uses the following third-party infrastructure to operate its services. Each provider maintains its own data governance and security practices:

Google Cloud Platform — hosts askvalor.ai and veterananalytics.com and all backend services, including our application hosting infrastructure (Cloud Run), our search infrastructure (Vertex AI Search and retrieval), our database (Firestore — server-side session and conversation storage with automatic 24-hour expiration), our secret storage (Secret Manager — encrypted credential storage), and server logs (retained 30 days, then automatically deleted). We do not log request bodies or personally identifiable information in application-level server logs. Processing is governed by Google’s Cloud Data Processing Addendum.

Google OAuth — provides authentication for protected features. Two distinct OAuth clients are registered in our Google Cloud project:

A public-facing client used at askvalor.ai. This client requests openid + email + profile + drive.file scopes only.
An analyst-workbench client used at the private veteranintel.org analyst surface (allowlist-gated, separate product). This client requests broader Workspace scopes (Calendar, Gmail read/send, Drive read) and is not used by the public askvalor.ai product.

Google’s own privacy policy governs how Google handles authentication data on their end.

Google Sheets — stores email signup submissions (timestamp, email address, and source string only). Access is restricted to authorized Veteran Analytics personnel.

Google Fonts — serves typography assets. Standard CDN request logs apply.

Anthropic — powers the VALOR AI research interface. When you submit a query, your query text and relevant context are transmitted to Anthropic’s API for processing and response generation. Query content is subject to Anthropic’s privacy policy. We do not send your email address, authentication data, or any other personal information to Anthropic — only the query text and conversation context.

VA.gov — the Forms Assistant (when launched) will fetch blank PDF form templates from VA.gov through a server-side proxy. No veteran data is transmitted in these requests.

We do not sell, rent, trade, or transfer your personal information to third parties for commercial purposes. Full stop.

Your Rights

You may request deletion of your email address at any time. Email contact@veterananalytics.com with the subject line “Delete my information” and we will remove it within 5 business days. Every notification email includes an unsubscribe link that removes your address immediately.

You may request information about what data we hold about you. Given that session records expire automatically after 24 hours, the answer in most cases will be limited to your email address if you signed up, and your authentication email and conversation history if you have an active session. After session expiration, no conversation data or authentication email is retained.

You may also request correction of any inaccurate personal information we hold about you.

California Privacy Rights

As a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know — request the categories of personal information we have collected about you, the categories of sources, the business purposes for collecting it, the categories of third parties to whom we have disclosed it, and the specific pieces of personal information we have collected.
Right to Delete — request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct — request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing — we do not sell or share personal information, so this right is automatically honored for all users.
Right to Limit Use of Sensitive Personal Information — we do not collect sensitive personal information server-side; the right is automatically honored.
Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email contact@veterananalytics.com with the subject line corresponding to your request. We may need to verify your identity (typically via your account email address) before responding.

Other US State Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or Texas, you have rights under the applicable state privacy law that are similar in scope to the California rights above — including the rights to access, correct, delete, opt out of targeted advertising (we do not engage in this), opt out of the sale of personal data (we do not sell), and appeal a denied request. To exercise these rights, contact us at contact@veterananalytics.com.

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal data. We do not sell personal data, so this right is automatically honored.

Cookies, Session Data, and Tracking Technologies

The Site uses a session cookie containing an anonymous session identifier (UUID). This identifier links your browser to server-side session data stored in our database, including authentication state and conversation history. The cookie itself contains no personal information beyond the session identifier.

Conversation history is capped at 8 turns (16 messages) per session. Server-side session records are automatically deleted 24 hours after your last interaction. Logging out clears your session cookie and disconnects your browser from the stored session data.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Our analytics is limited to server-side log data described above. You may disable cookies in your browser settings, though this will prevent you from using features that require authentication.

Do Not Track Signals: Our Site does not currently respond to “Do Not Track” browser signals because we do not engage in cross-site tracking that would be meaningfully changed by such a signal. We will update this disclosure if our practices change.

Automated Decision-Making: We do not use automated decision-making with legal or similarly significant effects. The VALOR AI research interface provides research output, not decisions about your benefits, eligibility, or any other matter with legal effect.

Children

The Site is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has submitted information to this Site, contact us and we will delete it promptly.

Security

We implement reasonable technical measures to protect information we collect, including encrypted connections (HTTPS), ephemeral session storage, encrypted secret storage via Google Secret Manager, and automatic log deletion after 30 days. No internet transmission is perfectly secure. Do not submit sensitive personal information (including Social Security numbers, VA claim numbers, or medical information) through the VALOR AI research interface. The Forms Assistant (when launched) is designed to handle sensitive form data safely by keeping it entirely in your browser.

Changes to This Policy

We may update this Privacy Policy as our services evolve. Material changes will be noted at the top of this page with a revised date. We will also send a notification to users with active beta access via the email address on file for material changes. Continued use of the Site after a policy update constitutes acceptance of the revised terms.

Contact

Veteran Analytics LLC
Lakewood Ranch, Florida
contact@veterananalytics.com

Veteran Analytics LLC is not affiliated with, endorsed by, or operated by the U.S. Department of Veterans Affairs.

VALOR AI provides research assistance, not legal advice. Not affiliated with the U.S. Department of Veterans Affairs.