Privacy Policy

BDD Dustoff LLC is a Florida limited liability company. We provide a software platform that helps transitioning service members and veterans organize their medical records and prepare for the Benefits Delivery at Discharge (BDD) and related VA disability claim processes.

We collect the following categories of information:

• Account information: your name, email address, and phone number.
• Military service information: details you provide about your service, such as Military Occupational Specialty (MOS), deployments, and exposures.
• Medical records: documents you choose to upload, which may contain protected health information (PHI).
• Payment information: processed securely through our payment provider, Stripe. We do not store your full payment card data on our systems.

We use the information we collect to:

• provide, operate, and maintain the platform service;
• organize and structure your medical and service records;
• generate medical documentation gap analyses to help you understand your records;
• communicate with you about your account and your records; and
• comply with legal obligations and protect our rights.

We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of protected health information (PHI). PHI processing is performed under a Business Associate Agreement (BAA) with Amazon Web Services (AWS). Only authorized personnel with a legitimate need may access PHI, and such access is logged and monitored.

We share information only with trusted service providers that help us operate the platform, and only to the extent necessary to provide their service:

• Supabase — database and authentication;
• AWS — HIPAA-compliant cloud infrastructure and document processing;
• Stripe — payment processing;
• Twilio — SMS message delivery;
• Proton Mail — email delivery.

These providers are bound by their own confidentiality and security obligations. We do not sell your personal information.

When you provide your mobile phone number and consent to SMS messaging, we collect and process it solely to send you transactional and informational text messages related to your account and our service.

What we send: account and onboarding updates, records-review status notifications, appointment and deadline reminders, and important service notices.

Frequency: approximately 2–4 messages per month. Message and data rates may apply — standard messaging rates from your mobile carrier apply.

Opt-out: reply STOP to any message to unsubscribe. Reply HELP for help, or contact support@bdddustoff.com.

How we use your phone number:

• to send the SMS messages described above;
• to verify your identity during account access; and
• for service-critical communications about your account.

What we do not do:

• We do not sell, rent, share, or disclose your mobile phone number or any information you share via SMS with third parties for marketing purposes.
• We do not use your phone number for unsolicited marketing communications.
• Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

Service providers: we use Twilio Inc. as our SMS service provider, which receives and transmits the messages on our behalf. Twilio’s handling of your data is governed by Twilio’s privacy policy.

Data retention: we retain your phone number while your account is active. You may delete your phone number from your profile at any time, which will also unsubscribe you from SMS.

Your rights: you may request access to, correction of, or deletion of your phone number data at any time by contacting support@bdddustoff.com. For the full program terms, see our SMS Terms.

We retain your account and records data for the period of active use described in the Software Access Agreement, which provides for approximately 18 months of active access. We may retain certain records longer where required for audit logs, security, or to comply with applicable legal obligations.

Subject to applicable law, you may request to access, correct, or delete your personal information. Some information may be retained as required to meet legal, audit, or security obligations even after a deletion request. To exercise these rights, contact us at support@bdddustoff.com.

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, notify you by email.

This Privacy Policy is governed by the laws of the State of Florida, without regard to its conflict-of-laws principles.

If you have questions about this Privacy Policy or our privacy practices, contact us at support@bdddustoff.com.