Privacy Policy

ClaimAssist AI ("we", "our", or "us") operates an AI-powered insurance claims processing platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

This policy applies to all users of our platform, including insurance professionals, policyholders, and enterprise clients.

We collect several types of information to provide and improve our services:

Personal Identification Information

• Full name, email address, phone number
• Company name and job title
• Billing address and payment details (processed via PCI-DSS compliant providers)
• Government-issued identification when required for claim verification

Claims & Insurance Data

• Claim details, incident descriptions, and supporting documents
• Policy numbers and coverage information
• Medical records and reports submitted as part of claims (with explicit consent)
• Photos, videos, and damage assessments uploaded to the platform

Technical & Usage Data

• IP address, browser type, and device identifiers
• Pages visited, features used, and session duration
• API request logs and integration activity
• Error reports and performance diagnostics

Your data is used exclusively to operate, improve, and secure our platform:

• Process, validate, and adjudicate insurance claims using AI models
• Detect fraudulent patterns and flag suspicious activity
• Communicate claim status updates, alerts, and notifications
• Personalise your dashboard and workflow recommendations
• Comply with legal obligations and regulatory requirements
• Train and improve our AI models (only with anonymised, aggregated data)
• Generate analytics reports for enterprise clients

We may share your information with trusted parties only in specific circumstances:

Service Providers

• Cloud infrastructure providers (AWS, Google Cloud) for data storage
• Payment processors for billing and subscription management
• Identity verification providers for KYC compliance

Legal Requirements

• When required by applicable law, regulation, or court order
• To protect the rights, property, or safety of ClaimAssist AI or its users
• In connection with a merger, acquisition, or sale of company assets

We retain your data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

• Active account data: Retained for the lifetime of your account
• Claim records: Retained for 7 years post-resolution (regulatory requirement)
• Usage logs: Retained for 12 months
• Deleted accounts: Fully purged within 90 days of deletion request

We implement industry-standard security controls to protect your data from unauthorised access, alteration, or disclosure.

• AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Role-based access control (RBAC) limiting data access to authorised personnel
• SOC 2 Type II certified infrastructure
• Regular third-party penetration testing and vulnerability assessments
• Multi-factor authentication enforced for all administrative access

Despite our safeguards, no system is 100% secure. We will notify affected users within 72 hours of discovering a breach that impacts their data.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Correct inaccurate or incomplete information
• Erasure — Request deletion of your personal data ('right to be forgotten')
• Portability — Receive your data in a structured, machine-readable format
• Restriction — Limit how we process your data in certain circumstances
• Objection — Opt out of specific processing activities, including AI-based decisions
• Withdraw Consent — Withdraw consent at any time without affecting prior processing

ClaimAssist AI operates globally. Your data may be transferred to and processed in countries outside your own. We ensure adequate protections are in place through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules for intra-group transfers
• Compliance with the EU-US Data Privacy Framework

Our platform is designed for insurance professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.

If you have questions, concerns, or requests related to this Privacy Policy, please reach out: