Privacy Policy

1. Who we are and what this covers

VETAID LLC runs this website. VETAID is a private software company and a navigator and educator for the military community: people serving now, Guard and Reserve, people getting out, veterans, family members and survivors. We are not a law firm, a VA-accredited representative, a Veterans Service Organization, a healthcare provider or a financial advisor. We do not submit claims to the VA or represent you before the VA. VETAID is not part of, affiliated with or endorsed by the U.S. Department of Veterans Affairs, the U.S. Department of Defense (the Department of War) or any military service. A reference to an agency, organization or source on the website does not mean it sponsors or endorses VETAID.

The website has these pages: Home, Platform, Use Cases, Pricing, Team, and the early access page at /early-access. The "Log in" link in the header opens a notice that access is early access only and points to the early access page. There is nothing to log in to on the website, and the website does not run Bravo. Where the website links to Bravo, the product's own terms and privacy notice apply.

2. What we collect

Early access (/early-access). When you sign up, we collect:

• Your email address. Required.
• Your name. Optional. It is filled in only when you sign up with Google or Apple sign-in and the provider gives us a name.
• Your answer to "Which best describes you?" Optional. The choices are Serving now, Guard or Reserve, Getting out soon, Veteran, Family member, Survivor. You can pick one or more after you sign up, and you can skip it.
• How you arrived. We record which page on our website sent you to the early access page (for example "home", or "direct" if you came straight to it) and whether you signed up by email, Google or Apple.
• The date and time you signed up.
• A hidden spam-trap field. People never see it or fill it in. If something fills it in, we treat the submission as automated: our Apps Script does not save it, and Formspark filters it. Formspark also processes your IP address, an approximate location worked out from it, and request details such as your browser and the referring page, to prevent spam and to run its service. Section 4 has the details.

Google or Apple sign-in on the early access page. If you press Continue with Google or Continue with Apple, the sign-in runs through Google's Firebase Authentication. Firebase creates a sign-in record in VETAID's Firebase project with your email, your name, and which provider you used. If you already have a VETAID sign-in from the earlier VETAID app, Firebase uses that same record. Google states that Firebase Authentication also logs your browser type and IP address for its own security purposes. We take your name and email from that sign-in and then sign you out of the website straight away. The website has nothing to stay signed in to. If the sign-out fails, for example because your connection drops, the sign-in can stay saved in that browser until you clear the website's browser storage. Signing you out does not delete the sign-in record; section 7 explains what happens to it. If you use Sign in with Apple, Apple may give us a private relay address instead of your real email. If so, that relay address is the one on our list, and our emails to you go through Apple's relay.

The contact form (Team page). When you write to us, we collect your first name, last name, email address, organization (optional), the topic you picked (Using VETAID, Partnership or press, Something else), your message, and the date and time. The form has the same hidden spam-trap field.

Visitor statistics. None today. If we add them, they will count page views without cookies, and we will name the service in this policy before it starts.

Server logs. The website is hosted on Railway. Like every web host, Railway keeps standard server logs: your IP address, your browser type, the page you requested, and the time. Google and Apple sign-in on the early access page passes through our own address (joinvetaid.com/__/auth), so these logs also record those sign-in requests. We use the logs for security and debugging only.

What we do not collect. The website has no password, no payment, no uploads and no chat. We do not ask for your Social Security number, date of birth, VA file or claim number, service number, medical details or bank details. Please do not put any of those in the contact form message. See section 12.

3. How we use it

• To confirm you signed up for early access. Formspark normally sends one email confirming your sign-up. If it does not arrive, check your spam folder, then write to support@joinvetaid.com and we will check that you are on the list.
• To email you when your access to VETAID's product is ready. Access opens in batches. Signing up is not a guarantee of access or of timing.
• To read and answer messages you send us from the Team page, and to learn from them what to build or fix. When we reply, we reply by email.
• To understand who has signed up, in aggregate, using the optional "Which best describes you?" answer, so we can get VETAID ready for the people on the list.
• To stop spam and abuse, and to keep the website running.
• To meet legal obligations.

We email people on the early access list about their place on it and their access. We don't use the list for advertising, and we don't sell or rent it.

4. Who we share it with

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share it only with the service providers below, who process it on our behalf, and with authorities when the law requires it.

If VETAID is ever sold, merged or closed. Your information stays under this policy. We will tell you by email before it passes to a new owner, and you can ask us to delete it first. We will not sell the early access list by itself.

Google (Google Workspace: Sheets, Apps Script and Gmail)

• What it does for us: holds the early access list and the contact messages in a Google Sheet in VETAID's Google Workspace. A Google Apps Script web app receives the form posts and writes the rows. Gmail receives a copy of each contact message, with your email as the reply-to address, and the notice Formspark emails us about each early access sign-up.
• What it receives: everything in the early access and contact forms listed in section 2, plus the date and time.
• Where: Google's data centers, which may be in the United States or elsewhere.
• Privacy policy: https://policies.google.com/privacy and the Google Cloud Privacy Notice at https://cloud.google.com/terms/cloud-privacy-notice

Google (Firebase Authentication)

• What it does for us: runs Google and Apple sign-in on the early access page.
• What it receives: your email, your name, the provider you used, your browser type and your IP address.
• Where: Google states that Firebase Authentication runs only from data centers in the United States.
• Privacy policy: https://firebase.google.com/support/privacy

Formspark (Trampoline Software SRL, Belgium)

• What it does for us: keeps a second copy of early access sign-ups, so a sign-up is not lost if the Google Sheet is unavailable. It also sends the confirmation email and emails us a notice of each sign-up. If one of the two services cannot be reached when you sign up, your sign-up may be saved in only one of them, and the confirmation email may not be sent.
• What it receives: your email, your name if we have one, how you arrived, and the spam-trap field. Formspark does not receive your "Which best describes you?" answer. Like any form service, it also processes your IP address, an approximate location worked out from that address, and request details such as your browser, the referring page and its origin. It keeps submissions its spam filter rejects, for its own abuse prevention.
• Where: Formspark states that it runs from Belgium and stores data in Ireland and Germany, in the European Economic Area. Its own service providers may process data in other countries; its privacy policy lists them.
• Privacy policy: https://formspark.io/legal/privacy-policy/

Railway

• What it does for us: hosts the website.
• What it receives: standard server logs (IP address, browser type, page requested, time), including the sign-in requests that pass through joinvetaid.com/__/auth when you use Google or Apple sign-in. Railway does not receive the contents of the forms, which go to Google and Formspark directly from your browser.
• Where: United States.
• Privacy policy: https://railway.com/legal/privacy

Apple (Sign in with Apple). Only if you choose it.

• What it does for us: verifies your identity when you press Continue with Apple, and offers you a private relay email address.
• What it receives: that you signed in to VETAID with your Apple Account.
• Where: Apple's systems; see Apple's notice.
• Privacy policy: https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/ and https://www.apple.com/legal/privacy/

We will update this list if we add or change a provider, and we'll record the change in section 16.

Social media links. The footer links to VETAID's pages on LinkedIn, X and Facebook. The website sends those companies nothing. If you open a link, or comment or message us there, that company's own policy applies. Please do not send personal details there. See section 12.

5. Where your information is stored

VETAID is based in the United States. The providers in section 4 handle your information, and storage and other processing may take place in more than one country. Railway hosts the website in the United States. Google states that Firebase Authentication runs from data centers in the United States. Google Workspace locations depend on the services and settings in use, and may be outside the United States. Formspark names Ireland and Germany as its storage locations; its own service providers may process data elsewhere. If you have questions about where your information is held and how it is protected, email support@joinvetaid.com.

6. Cookies and browser storage

The website sets no advertising or tracking cookies. It uses a small amount of browser storage, on the early access page and for the demos on the Home and Use Cases pages:

Google, Apple and Formspark may set their own cookies on their own domains when you sign in or when their pages load; their policies above cover that.

7. How long we keep it

• Early access entry (Google Sheet and Formspark copy): until your access is set up, or until you ask us to remove you, whichever comes first. When we remove an entry, we delete the Sheet row, every Formspark submission for that email address, and the sign-up notice emails in our own inbox. The providers may keep related records for a time under their own rules, described below. We cannot reach into your browser, so to remove an unsent sign-up kept on your device, clear the website's browser storage.
• Firebase sign-in record: kept. When your access opens, the same record may become your VETAID account. Signing you out of the website does not delete it. If you ask us to delete your early access information before your access opens, we delete this record too, unless the same sign-in also belongs to a VETAID account you already have. In that case we will ask you first, because deleting the record closes that account. Google states that once a user is deleted, Firebase removes that user's data from live and backup systems within 180 days, and that it keeps logged IP addresses for a few weeks.
• Contact messages (the Sheet row, the Gmail copy and our email replies): kept for 24 months after our last reply.
• Unsent sign-ups on your device: kept in that browser until they are sent or until you clear the website's browser storage. Someone with access to the same device or browser profile may be able to see them.
• Server logs at Railway: kept by Railway under its own rules. Our hosting plan sets how far back we can see them, which is not the same as when Railway deletes them. Railway's privacy policy is linked in section 4.
• Formspark's own records: deleting a submission does not remove every related record at once. Formspark states that deleted submissions stay recoverable for 30 days and that it keeps server logs for 7 days. Its email delivery, spam-filter and security records have their own retention periods, set out in its privacy policy.

8. Your choices and rights

Anyone. You can ask us to show you what we hold about you, correct it, or delete it. You can ask to be taken off the early access list at any time. Email support@joinvetaid.com from the address you signed up with, or tell us which address to look for. We aim to respond within 30 days. If you signed up with a Sign in with Apple relay address, write to us from that relay address or tell us what it is.

Email. We email people on the early access list only about their place on the list and their access. If we ever send other kinds of email, each one will have a way to stop them, and this policy will say so first.

California and other privacy rights. You may ask for access to, correction of, or deletion of your information using the contact above. We may need to verify a request, and we may keep information where an applicable legal exception permits it. Where privacy law gives you additional rights, we will honor them and respond within its deadlines. Exercising a privacy right will not result in unlawful discrimination. We do not sell personal information or disclose it for cross-context behavioral advertising.

Third-party direct marketing. We do not disclose your personal information to third parties for their own direct-marketing purposes. You may contact support@joinvetaid.com with questions about this practice or to exercise any applicable California privacy rights.

Do Not Track. The website does not track you across other sites, so there is nothing for a Do Not Track signal to switch off.

9. Age

Early access sign-up and the contact form are intended for adults aged 18 or older. Please do not submit a minor's personal information. If you believe we have received a minor's information through these forms, contact support@joinvetaid.com so we can investigate and arrange appropriate removal. Anyone may read the website. Access to the product has its own eligibility rules.

10. Security

The website is served over HTTPS, and your browser sends form submissions to Google and Formspark over HTTPS. The people who run VETAID and the service providers in section 4 may need access to this information to do their work. Our Apps Script does not save a submission that fills the hidden spam-trap field, and it stores values so that a pasted formula cannot run when the Sheet is opened. No system is perfectly secure. If you believe you have found a vulnerability, email support@joinvetaid.com, and do not access other people's information or disrupt the service.

11. If something goes wrong

If a security incident affects your personal information, we will notify you without undue delay, consistent with applicable state and federal breach-notification laws, including California Civil Code §1798.82. The notice will say what happened, what information was involved, what we are doing about it and what you can do.

12. What not to send us

We know our audience. Treat anything you type into a website as something that could end up in a log somewhere. Early access sign-up needs only an email address. The contact form needs only enough to answer you. Please do not put any of these in a message:

• Social Security numbers, full dates of birth, driver's license or passport numbers.
• VA file numbers, claim numbers, service numbers or other government identifiers.
• Deployment dates, locations, unit movements or anything a unit OPSEC officer would call Critical Information.
• Controlled Unclassified Information or anything marked FOUO.
• Diagnoses, medications or other medical details.
• Bank or card numbers, or any login details.
• Personal information about someone else.

If a question needs that kind of detail, take it to VA.gov or an accredited Veterans Service Organization, not to a web form.

13. Demonstration videos and photos

The videos and product screens on the website show Bravo working for a fictional member with sample documents. No real member's information appears in them. They are demonstrations, not advice. The photos on the website are credited on the pages where they appear. Some are U.S. government works; some have been repainted for this site. We do not claim ownership of third-party material, and the copyright status and any use restrictions depend on the individual item. The orbs and dot patterns are VETAID's own. The appearance of a photo on this website does not imply endorsement of VETAID by any agency, military service, photographer or person shown.

14. A note on crisis support

The website is not a substitute for emergency services, mental-health care or clinical advice. If you are in crisis, call 988 and press 1 for the Veterans Crisis Line, text 838255, call 911, or go to the nearest emergency room. Outside the United States, these numbers may not work from an off-base phone. https://www.veteranscrisisline.net lists the number for each region and has a chat that works anywhere.

15. When your access is ready

Signing up for early access does not give you access to Bravo yet or enroll you in a plan. If you chose Google or Apple sign-in, a sign-in record exists at Firebase, as described in sections 2 and 7. Product access needs a separate step, where we will show you the terms and privacy notice for VETAID's product before you start. Those documents will explain how the product handles your information. This policy continues to cover the information collected for early access and the contact form.

16. Changes to this policy

We will post updates here with the effective date. If a change materially affects how we use information we have already collected, we will give appropriate notice before it takes effect, including direct notice where the law requires it. Where the law requires consent for a new use, we will obtain it before beginning that use. A policy update does not remove your existing privacy rights.

Changes

• November 12, 2026: the footer now links to VETAID's pages on LinkedIn, X and Facebook. Section 4 says the website sends those companies nothing.
• November 11, 2026: the waiting list is now called early access, and its page moved from /waitlist to /early-access. We also said plainly that we learn from contact messages what to build or fix, as the Terms already did. The employer page was taken down. We no longer quote the confirmation email's subject line, which had changed. You can now pick more than one answer to "Which best describes you?". Nothing else about what we collect or how we use it changed. Later the same day: we added what happens to your information if VETAID is ever sold, merged or closed.
• November 10, 2026, later the same day: we corrected statements that promised more than the website does. We also added where to find crisis line numbers outside the United States. We also listed two more browser-storage entries, used by the demos.
• November 10, 2026: first policy for the website and waiting list. This policy does not by itself change the handling of information collected through the earlier VETAID app. If you used that app, email support@joinvetaid.com about your information or an existing privacy request.

17. Contact

Questions about this policy or your information? Email support@joinvetaid.com. That address also handles privacy, security and copyright matters.

VETAID LLC
Attn: Legal
8 The Green, Ste A
Dover, DE 19901
United States