Draft, pending legal review
Privacy Policy
Accounts
You sign in with a one-time link sent to your email address. Links work once and expire after 15 minutes. We store your email address and the time of your last sign-in. We do not store passwords.
What you upload
Photos, PDFs, receipts and spreadsheets you upload are sent to an AI model to extract inventory lines. The original files are not saved as files by ClaimContents AI. We keep only the extracted item data (descriptions, quantities, prices, dates, source labels and confidence scores) inside your claim.
Connected accounts
If you connect Gmail, Facebook or a bank, the access tokens are stored encrypted (AES-GCM) and are used only to import data into the claim you connected them to. You can disconnect a connection at any time from the claim workspace. Bank connections use Plaid; we never see or store your bank or retailer passwords.
Who can see a claim
A claim is visible only to the signed-in account that owns it. Every claim request is checked on the server against your account.
Activity records
We keep an audit log of security-relevant actions (sign-ins, claim ownership changes, edits, exports and deletions) with the account, time and IP address, to protect your data and investigate misuse.
Deleting your data
You can permanently delete a claim and all of its items, sources and connections from My Claims. Backup retention period: [to be confirmed].
Contact
Questions about this policy: [contact address to be confirmed].