Privacy Policy

Data we collect

• Account data: name, email, organization, phone, role.
• Claim data: crop photos, narrative text, GPS, EXIF, capture time.
• Identity-verification data: government-issued ID image, selfie, liveness video frames, OCR-extracted fields.
• Usage data: actions taken in the dashboard, claim decision history, IP address, user-agent, timestamps.

How we use data

• Provide and operate the Service (assess claims, file with insurer).
• Detect and prevent fraud (perceptual hashing, similarity search).
• Improve our AI models in aggregate, never on identifiable individuals.
• Comply with legal obligations.

Storage and security

Photos and PDFs are stored in Alibaba OSS with server-side encryption and signed-URL access only. Identity documents are stored in a separate, more restricted bucket with shorter signed-URL TTL and stricter access logging. Vectors live in Alibaba DashVector. All communication with our APIs is over HTTPS.

Sharing

We share claim data with your designated insurer for the sole purpose of filing claims. We use the following sub-processors: Alibaba Cloud (compute, storage, vector DB), Qwen Cloud (AI inference), Twilio / Bird / Telegram (messaging), Persona / Veriff / Onfido (configurable identity verification), Paddle / LemonSqueezy / Razorpay (configurable payments). A current sub-processor list is maintained at /legal/subprocessors.

Your rights

You may request access to, correction of, or deletion of your data by emailing privacy@claimfarm.dev. We respond within 30 days. You also have the right to data portability and to object to certain processing.

Retention

Claim photos are retained for 7 years (default insurance regulatory window). Identity documents are retained for 5 years after account closure and then deleted, or sooner upon request unless retention is required by law. Audit logs are retained for 3 years.

Contact

privacy@claimfarm.dev