Privacy Policy

1. Introduction

Welcome to ZeroClaims ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zeroclaims.io and use our services.

By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

2. Information We Collect

We collect information that you provide directly to us when you use our services:

• Account Information: When you sign up, we collect your email address and name via our authentication provider, Supabase.
• User Content: We store the files you upload (PDF estimates), the reports generated from these files, and the chat messages you exchange with our AI.
• Usage Data: We automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Service, and other technical information.
• Payment Information: All payments are processed by Stripe. We do not store your full credit card details on our servers; we only retain subscription status and transaction history.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our services.
• To improve, personalize, and expand our platform.
• To understand and analyze how you use our services.
• To develop new products, services, features, and functionality.
• To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.
• To process your transactions and manage your subscription.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

We use Google Analytics to analyze the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://policies.google.com/privacy.

5. Data Retention and Deletion

We believe you should have full control over your data. We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

• Default Retention: By default, we retain your data (PDFs, reports, and chat logs) for 180 days.
• User-Configurable Retention: You can configure your data retention settings directly in your user profile. We provide a setting that allows you to automatically delete data older than a specific number of days (from 1 to 180 days).
• Deletion: Once data reaches your configured retention limit, it is automatically and permanently deleted from our servers. You can also manually delete files and reports at any time through your dashboard.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with trusted third-party service providers solely for the purpose of operating our business. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

• Stripe: We use Stripe for payment processing. Their Privacy Policy can be viewed at https://stripe.com/privacy.
• Supabase: We use Supabase for database and authentication services. Supabase is SOC 2 Type 2 compliant and encrypts data at rest and in transit. Their Privacy Policy can be viewed at https://supabase.com/privacy.
• Google Analytics: We use Google Analytics for website usage analysis. You can learn more about how Google uses your data at https://www.google.com/policies/privacy/partners/.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

7. Security

The security of your data is important to us. We use administrative, technical, and physical security measures to help protect your personal information.

• Encryption: Your data is encrypted in transit using TLS (Transport Layer Security) and at rest using industry-standard AES-256 encryption.
• Access Control: We implement strict access controls and authentication mechanisms to ensure that only authorized users can access your data.
• Infrastructure: Our infrastructure is hosted on secure cloud providers that adhere to high security standards (SOC 2, HIPAA, etc.).

However, please remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

8. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@zeroclaims.io