Privacy Policy

Print / Save PDF

This Privacy Policy describes how Forseti Services LLC, doing business as Forseti Restitution Partners (“Forseti,” “we,” “us”), collects, uses, retains, and protects information when you visit makewhole.net or use our professional valuation services. Effective 1 September 2026. For privacy questions or requests, contact support@makewhole.net or (480) 266-6970.

Section 1 — Who This Policy Covers

This policy is written for purchasing attorneys and law firms. Forseti is a professional valuation service, not a law firm. We do not create, assert, or waive attorney-client privilege.

Section 2 — No Client PII Collection by Default

Forseti does not seek the vehicle owner’s Social Security number, medical records, driver’s license images, or other claimant identity documents as a condition of service. Intake fields are limited to what a report file actually needs (vehicle identifiers, accident and repair facts, and counsel contact data).

If a supporting document the attorney uploads contains extra personal information, the attorney decides what to redact. Over-redaction liability stays with automated tools; we refuse that design.

Section 3 — What We Collect

• Attorney identity for access: full name, law firm name, optional Arizona Bar number, phone, email.
• Timestamped Terms of Service agreement and Privacy acknowledgment (stored on FRP_KV).
• Engagement data after payment: VIN, vehicle description, loss facts, repair figures, claimant name as supplied by counsel, uploaded exhibits the attorney chooses to send.
• Payment metadata from Stripe (session id, amount, payer email). We do not store full card numbers.

Section 4 — How We Use It

Credential verification (Arizona Bar public directory or manual admin review), case workfile, report production, receipts, and operational notifications to support@makewhole.net. Directory lookup is performed against public member information only.

Section 5 — Data Retention, Security, and Breach Response

5.1 Data retention

Forseti retains data only for defined periods or triggers. Categories and periods:

• Attorney account and credential data: retained while the account is active, plus twenty-four (24) months after last activity.
• Report workfiles and supporting documents: retained for five (5) years from report issuance, or two (2) years after any related legal proceeding concludes — whichever is later.
• Payment records: retained as required by applicable tax and accounting law (typically seven years).
• Website analytics and server logs: retained no longer than twelve (12) months.
• Email correspondence: retained twenty-four (24) months.

Access-session cookies expire at session end or per browser settings. Consent logs remain for the same period as the related engagement record so Forseti can show when counsel agreed to terms.

5.2 Data minimization

Forseti collects only the minimum information required to deliver forensic valuation services. The attorney controls redaction decisions on all uploaded materials. Claimant or client PII is not collected as a default requirement of service, consistent with our Terms of Service posture on PII.

5.3 Breach notification

Upon discovery of a suspected security incident, Forseti begins internal assessment within seventy-two (72) hours. Affected clients are notified without unreasonable delay and no later than thirty (30) calendar days after confirmation of a breach involving their data, to the email of record on file.

Notice includes: what occurred; categories of data involved; steps Forseti has taken or is taking; and contact information at support@makewhole.net. Notification describes facts and response steps only; it does not constitute an admission of fault or liability.

5.4 Third-party processors

Forseti does not sell personal information. Processors that may receive the minimum data needed to operate include:

• Stripe — payment processing (transaction metadata; no full card numbers stored by Forseti).
• Resend — transactional email delivery.
• Cloudflare — website hosting, storage, and edge delivery.
• Vehicle-history vendors — identifiers required for valuation lookups, not marketing profiles.

Each processor is engaged to handle data only as needed for its function and consistent with this policy. Forseti does not disclose internal account identifiers or secrets in client-facing materials.

5.5 Attorney rights

Attorneys may request access to, correction of, or deletion of personal data held about them by emailing support@makewhole.net. Deletion requests are honored except where retention is legally required — including tax and accounting records, active litigation holds, or workfiles retained for methodology documentation — in which case Forseti will explain the applicable exception.

Section 6 — Contact

Privacy questions, access, or deletion requests: support@makewhole.net. Mesa / Phoenix, Arizona.

Related: Terms of Service.