Legal
Privacy Policy
After is a product owned and operated by Inside Charleston, LLC. This policy explains what we collect when you use afterapp.app, why, who we share it with, how long we keep it, and what choices you have.
Last updated: September 1, 2026. Effective: September 1, 2026.
1. Who we are
After is a product owned and operated by Inside Charleston, LLC, a South Carolina limited liability company. After is a registered trade name of Inside Charleston, LLC. In this policy, “we,” “us,” and “our” mean Inside Charleston, LLC. We are the controller of the personal information described here.
Contact: concierge@insidecharleston.com
2. A note about what you upload
After is used at a bad moment. People upload insurance policies, letters from their carrier, photographs of damaged homes, receipts, and estimates. Those documents can contain your name, address, policy number, claim number, adjuster names, the details of a loss, and financial information.
We treat that material as sensitive. We do not sell it, and we do not use the contents of your documents to train any model of our own. Reading a document requires sending its text to a third-party model provider, Google, through our hosting provider’s AI gateway. We send that text only to answer your request, and we have not agreed to any use of it for model training. We cannot independently verify how long Google retains the text of a request on its own systems, so we do not promise on their behalf that it is never retained. Their handling of that text is governed by their own terms.
3. Information we collect
Information you give us
- Documents you upload: insurance policies, endorsements, declarations pages, carrier correspondence such as coverage or denial letters, estimates, invoices, receipts.
- Photographs and files you add as evidence of damage.
- Records you create: expenses, notes, visits, communications, timeline entries.
- Account information where an account exists: email address and authentication data.
- Messages you send us, including support requests.
Information collected automatically
- Usage and device information: pages viewed, actions taken in the product, approximate location derived from IP address, browser and device type, referring page, timestamps.
- Cookies and similar technologies, including advertising and analytics identifiers. See Section 7.
Information from third parties
- Payment status and transaction metadata from Stripe. We do not receive or store your full payment card number.
- Advertising click identifiers, such as a Google click identifier, when you arrive from an advertisement.
4. How we use information
- To provide the Service: read and analyze the documents you upload, generate reports and summaries, organize your evidence, expenses, and timeline, and produce anything you ask us to produce.
- To process payments and provide receipts and refunds.
- To communicate with you about your account, your purchase, and support requests.
- To operate, secure, debug, and improve the Service, including diagnosing errors and preventing abuse and fraud.
- To measure how the Service is found and used in aggregate, including which pages and advertisements bring people to the site.
- To comply with law and to establish, exercise, or defend legal claims.
We do not use your documents to make automated decisions that produce legal or similarly significant effects about you. The Service describes what your documents say; it does not decide anything about your insurance.
5. Who we share information with
We do not sell personal information. We do not share it for cross-context behavioral advertising.
We share information with service providers who process it on our behalf, under contract, only for the purposes we specify:
| Provider | What it processes | Why |
|---|---|---|
| Lovable Cloud | Application data, saved plans, shared photographs, account data | Hosting, storage, database |
| Google Gemini (via our AI gateway) | Text extracted from documents and prompts, for the duration of a request | Document reading and analysis |
| Stripe | Payment and transaction data | Payments, refunds |
| Lovable Cloud email (sending domain afterapp.app) | Your email address and the sign-in link sent to it | Sign-in emails |
| Google Ads | Page views, the fact that a purchase happened and its amount, and advertising click identifiers | Advertising measurement |
We may also disclose information:
- to comply with law, legal process, or a lawful government request
- to enforce our Terms, or to protect the rights, property, or safety of Inside Charleston, our users, or the public
- in connection with a merger, acquisition, financing, or sale of assets, in which case we will take reasonable steps to ensure the recipient honors this policy
Sharing you control. If you generate a share link, anyone holding that link can open it without signing in, so treat it like a key. That disclosure is your choice, not ours. A link carries the recipient you named, the loss date, the kind of loss, and the photographs you selected. Findings, your document list, and your expense ledger are each off unless you turn them on, and a share never carries your policy number or claim number. The link stops working 14 days after you create it, and you can revoke it sooner from the share list, which takes effect immediately.
6. Legal bases (where applicable)
Where the law requires a legal basis for processing, we rely on: performance of a contract with you, to provide the Service you request; our legitimate interests, to secure and improve the Service and to understand how it is found and used; your consent, for advertising and non-essential cookies where consent is required; and compliance with legal obligations.
7. Cookies, analytics, and advertising
We use storage on your device that is strictly necessary to operate the Service — your report, your documents’ text, and your checklist are kept there rather than on our servers unless you save them. Beyond that, one advertising technology is loaded: the Google Ads tag, which records page views and, when you buy a report, that a purchase happened and its amount. If you arrive from an advertisement, we also keep the click identifier Google adds to the address.
Google Analytics is not installed, and no Meta pixel is loaded. If we add either, we will update this policy before doing so.
We also record our own usage events — pages viewed and actions taken — under a random identifier generated in your browser, not your name.
These may set identifiers that allow measurement of advertising performance. You can control cookies through your browser settings, and you can opt out of certain Google advertising features at adssettings.google.com.
8. How long we keep information
- Documents and claim records you create: if you use the Service without an account, your report, your documents’ text, your photos, and your checklist live in your browser’s storage on your device, and stay until you clear them or clear your browser data. If you save your plan with your email, a copy is stored under your email so you can open it on another device, and is kept until you ask for it to be deleted.
- Insurance letters submitted for a single read: a letter is read once. Its text is sent to the model provider for that one request, the result is returned to your browser, and we do not store the pages, the text, or the result on our servers. The letter is not logged, not sent to our internal alerting, and not shown to anyone at Inside Charleston. If that changes, this policy will change with it.
- Payment records: retained as required for tax, accounting, and dispute purposes, typically seven years. Stripe keeps its own record under its own retention terms.
- Usage events we record: pages viewed and actions taken, stored under a random browser identifier in our own database. We do not currently expire these automatically; they are kept while they remain useful for understanding how the Service is found and used, and you can ask us to delete the records tied to your identifier or email.
- Advertising data at Google: the Google Ads tag sends page views and purchase conversions to Google, which retains them under Google’s own advertising data policies. We do not operate a Google Analytics property, so there is no analytics retention setting of ours to report.
- Sign-in emails: our email provider keeps delivery records — address, timestamp, and delivery outcome — for 14 days.
- Anonymous session records: the identifier your browser generates and anything stored with it on your device stays until you clear your browser data. It is not tied to your name unless you save your plan with your email.
- Account data: your email address and saved plan are kept for as long as the account exists, and are deleted when you ask us to delete them, except records we must keep for law, tax, or dispute purposes.
- Backups: our database is backed up by our hosting provider on a rolling schedule, so deleted data can persist in a backup until that backup rotates out. We do not run point-in-time recovery on the current plan.
9. Security
We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit, access controls that restrict document access to the account that owns it, restricted administrative access, and logging of administrative actions.
No system is perfectly secure. We cannot guarantee the security of information you transmit to us, and you share information at your own risk. If we become aware of a breach affecting your personal information, we will notify you as required by law.
10. Your choices and rights
You may:
- Access and correct. Ask for a copy of the personal information we hold about you, or ask us to correct it.
- Delete. Ask us to delete your documents and account. We will do so unless we must keep records to comply with law, resolve disputes, or enforce agreements.
- Withdraw consent. Where we rely on consent, withdraw it at any time.
- Opt out of marketing email. Use the unsubscribe link, or contact us. We will still send transactional messages about your purchase or account.
If you are a California resident, you have rights under the CCPA as amended, including the right to know, delete, correct, and to opt out of sale or sharing, and the right not to be discriminated against for exercising them. We do not sell your personal information.
Other states. Residents of states with comprehensive privacy laws may have similar rights. Contact us and we will honor rights the law gives you.
The Service is offered in the United States only and is not directed to residents of the European Economic Area or the United Kingdom.
To exercise any right, contact concierge@insidecharleston.com. We may need to verify your identity before acting, particularly for deletion, because the documents involved are sensitive.
11. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact concierge@insidecharleston.com and we will delete it.
12. Changes to this policy
We may update this policy. If we make a material change, we will update the “Last updated” date and take reasonable steps to notify you. Continued use after a change takes effect means you accept the updated policy.
13. Contact
Inside Charleston, LLC
concierge@insidecharleston.com