Security and Privacy Practices
Plain-language boundaries for information handled by Veteran Tools.
No HIPAA representation
Veteran Tools is not a health care provider or health plan and does not represent that use of this service creates a HIPAA-covered relationship. Implementation of technical safeguards does not by itself establish HIPAA compliance, covered-entity status, or a business-associate agreement.
Public drafting tools
- No account or payment information is required for the personal-statement and buddy-letter tools.
- Information entered in a drafting form is sent to OpenAI to generate an editable draft.
- The generated result is temporarily held in application memory so the user can copy or print it.
- First-party funnel analytics exclude names, contact details, diagnoses, uploaded documents, and statement text.
- Users should not enter Social Security numbers and should minimize other identifiers.
Technical Safeguards
- HTTPS protects browser connections in transit.
- Authentication and role-based access controls protect non-public application functions.
- Sensitive application fields use application-level encryption where implemented.
- Security event logging is used where implemented.
- Railway hosts application, database, cache, and object-storage infrastructure.
No internet service can guarantee absolute security. Do not provide information that is unnecessary for the task.
Independent review remains necessary
Generated text may be incomplete or wrong. The veteran controls the draft and should verify every sentence. Veteran Tools does not represent claimants, submit claims, determine eligibility or ratings, or replace review by a VA-accredited representative.
Questions and requests
Review the Privacy Policy and Terms of Service. Contact privacy@veterantools.com with privacy questions or requests.