Privacy & Legal

This Privacy Policy explains how ClaimScan handles personal information when people use the scanner, reports, saved evidence dashboard, public issue pages, Verified Notice Registry, attorney-review features, ClaimScan Pro, support channels, and related services.

ClaimScan may act as an independent controller for consumer accounts and platform operations. For some ClaimScan Pro or firm-customer data, ClaimScan may process personal information as a processor, service provider, or contractor under the Data Processing Addendum and a separate agreement.

• Account information, such as name, email address, role, authentication records, communication preferences, and workspace membership.
• Scan inputs and artifacts, such as screenshots, PDFs, text, emails, URLs, domains, phone numbers, product details, medical or device timelines you choose to submit, original filenames, MIME type, size, hashes, and upload timestamps.
• Extracted facts and report data, such as sender domains, deadlines, administrator names, company names, product names, issue tags, source matches, confidence values, practical next steps, saved scans, tracking choices, reminders, and attorney-review consents.
• Attorney-review information, such as contact details, selected evidence, consent history, notes, candidate status, responsiveness, and review outcomes.
• Usage and device information, such as IP address, approximate location derived from IP, browser, device, operating system, pages viewed, logs, security events, diagnostics, and rate-limit signals.
• Communications, such as support requests, deletion requests, privacy requests, emails, and administrative messages.
• Firm or professional workspace information, such as saved searches, firm plan status, workspace users, exports, notes, and configuration choices.

ClaimScan may receive sensitive information because users choose to scan notices, breach letters, suspicious messages, product incidents, medical or device concerns, identity-theft materials, payment records, or other evidence. Submit only information that is reasonably needed for the service.

ClaimScan is not a healthcare provider, health plan, or healthcare clearinghouse. ClaimScan should not be treated as a HIPAA-covered service unless ClaimScan has signed a separate business associate agreement that expressly says so.

• Provide scanner results, source matching, extraction, OCR, report generation, evidence preservation, saved scans, issue tracking, reminders, and account features.
• Compare scans against known settlement, breach, scam, recall, lawsuit, investigation, administrator, domain, phone, and similar-report signals.
• Generate anonymized and aggregated trend signals, public issue pages, and similar-report counts after privacy thresholds and review controls are met.
• Process optional attorney-review requests, conflict checks, triage, referral, co-counsel, or follow-up workflows when you consent.
• Maintain security, prevent fraud, enforce access controls, debug errors, rate-limit abuse, audit activity, and preserve records where required.
• Improve extraction, matching, source quality, product reliability, and user experience.
• Comply with legal obligations, enforce terms, respond to lawful requests, and protect rights, safety, and integrity.

ClaimScan may use deterministic extraction, OCR, AI-assisted extraction, embeddings, classifiers, and source-matching workflows to turn user-submitted artifacts into structured facts and possible matches.

AI and automated outputs may be inaccurate or incomplete. ClaimScan stores prompt versions, model IDs when applicable, source citations, and confidence indicators where feasible so outputs can be audited and improved.

ClaimScan does not use scanner output to say that a person has a legal claim. Reports use confidence-calibrated language such as possible match, appears to match, could not verify, and similar reports.

• Service providers and subprocessors that host, store, secure, authenticate, analyze, deliver, monitor, or support the service.
• AI, OCR, database, storage, logging, email, security, and infrastructure providers when needed to operate ClaimScan.
• Participating attorneys, firms, or reviewers only when you request attorney review or otherwise consent to a permitted sharing workflow.
• Firm or workspace administrators for accounts and content associated with their authorized workspace.
• Public users only through anonymized or aggregated public pages, consumer report trends, Settlement Database records, or similar-report counts designed not to reveal personal data.
• Authorities, courts, regulators, counterparties, or advisors when reasonably necessary to comply with law, enforce terms, protect rights or safety, investigate abuse, or complete a business transaction.

ClaimScan does not sell personal information for money. ClaimScan does not use uploaded evidence for third-party targeted advertising.

If ClaimScan later uses advertising, cross-context behavioral advertising, or data-sharing practices that require opt-out rights, ClaimScan will update this policy and provide the required controls before those practices begin.

Anonymized or aggregated public reporting is separate from attorney review and is designed to avoid publishing personal data. ClaimScan may require k-anonymity thresholds, administrative review, suppression rules, and redaction before issue pages become public.

ClaimScan retains account records, artifacts, extracted text, reports, source matches, hashes, consent records, audit logs, and workspace records for as long as needed to provide the service, preserve evidence files, maintain security, comply with legal obligations, resolve disputes, or support user-requested tracking and attorney-review workflows.

You may request deletion of personal information or uploaded artifacts. ClaimScan may need to retain limited records where required for legal, security, fraud-prevention, dispute, backup, audit, or consent-history purposes. Deletion may also be delayed for records subject to legal hold or active attorney-review workflows.

Submit privacy requests to privacy@claimscan.com. ClaimScan may need to verify your identity and account authority before completing a request.

• Access, correct, delete, or export certain personal information where required by applicable law.
• Withdraw optional attorney-review consent before a participating attorney or firm relies on it, subject to legal, audit, and professional obligations.
• Change communication preferences for non-essential messages.
• Object to or opt out of certain processing, including sale, sharing, targeted advertising, or profiling where those rights apply.
• Appeal a denied privacy request where applicable law provides an appeal right.

Residents of states with consumer privacy laws, including Texas and California where applicable, may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing of personal data. ClaimScan will respond to verified requests as required by applicable law.

For Texas residents, the Texas Data Privacy and Security Act may provide rights over personal data and is enforced by the Texas Attorney General. For California residents, the CCPA/CPRA may provide additional notice, access, deletion, correction, opt-out, limitation, and non-discrimination rights if ClaimScan is subject to those laws.

ClaimScan uses administrative, technical, and organizational safeguards designed to protect personal information, including private artifact storage where configured, authenticated artifact delivery, role-based access controls, audit-sensitive consent records, and rate limiting.

No system is perfectly secure. Users should avoid uploading unnecessary sensitive information and should preserve original notices, messages, files, and official-source records outside ClaimScan as appropriate.

ClaimScan is not directed to children under 13 and does not knowingly collect personal information directly from children under 13. If you believe a child under 13 submitted information, contact ClaimScan so the information can be reviewed and deleted where appropriate.

ClaimScan is operated from the United States. If you access the service from outside the United States, your information may be processed in the United States and other locations where ClaimScan or its service providers operate.

ClaimScan may update this Privacy Policy to reflect product, legal, operational, or security changes. Material changes will be posted in the Legal Center or otherwise communicated where appropriate.

Privacy questions and requests may be sent to privacy@claimscan.com. Legal notices may be sent to legal@claimscan.com.