Privacy Notice

Effective date: July 22, 2026

1. Who We Are and What This Notice Covers

CoverageCard is operated by CoverageCard ("CoverageCard," "we," "us"), based in Ohio, USA. CoverageCard is an educational tool that analyzes insurance declarations pages you upload (auto, home, renters, or auto+home bundles) and returns a letter grade and plain-English summary of your coverage. It is not an insurance company, agency, or licensed insurance producer, and it does not provide insurance advice.

This Privacy Notice describes what information we collect, how we use it, who we share it with, and the choices you have. It applies to our website at https://coveragecard.ai (also currently available at https://coveragecard-site.pages.dev) and the services offered there. Our services are intended for U.S. residents age 18 and older.

2. Information We Collect

Account Information (optional)

You can scan documents without an account. An account is required only to save cards. If you create an account, we collect through our authentication provider (Supabase):

Your email address;
A password, stored only in hashed form (if you choose email + password sign-up), or nothing further if you sign in with a one-time email link;
A timestamp recording your acceptance of our Terms — recorded when you accept at email-and-password sign-up or at your first sign-in by email link — stored in your account metadata.

Uploaded Documents (processed transiently — never stored)

When you upload declarations pages (PDFs or images, up to 5 files / 9 MB), the document contents are processed in memory only. They are never written to disk, never written to our logs, and are not retained after your analysis is returned. Once your results are delivered, the uploaded files themselves are gone from our servers. Specific data points extracted from your documents may be retained as described in the two sections below (de-identified analytics for all users; saved cards for signed-in users). Our servers log only metadata about the request: IP address, file count, file sizes, line of business, and the resulting grade — never document contents.

Declarations pages sometimes include additional details such as driver's license numbers or other identifiers. By uploading a document, you direct us to process everything it contains solely to perform your analysis. Any such details are processed in memory only, are never stored, are not on the analytics whitelist described below, and are never saved to cards.

Derived, De-Identified Coverage Analytics

After each analysis, we store a de-identified analytics record in our database to improve our grading rubric. We use a whitelist: only the following fields are stored, and everything else in your document is discarded.

What is kept: line of business (auto/home/renters), U.S. state, insurance carrier name, the grade(s) assigned, coverage limits, deductibles, coverage statuses, premium amounts, and the model/prompt versions used for the analysis.
What is stripped and never stored: your name, your address, vehicle identifiers (such as VIN, year/make/model), policy dates, policy numbers, and any other field or free-form text not on the whitelist.

We publicly commit that we will not attempt to re-identify this de-identified data, and we do not disclose it to any recipient except our database hosting provider, which is contractually prohibited from using the data for any other purpose or attempting to re-identify it.

Saved Cards (signed-in users only)

If you are signed in when you run a scan, a card is automatically saved to your account. Unlike the de-identified analytics above, a saved card is linked to your account and contains:

Your letter grade and subgrades;
The coverage breakdown (covered items, coverage gaps, key numbers);
Your insurance carrier;
A short vehicle or address display line (for example, the vehicle or property the policy covers);
Your premium; and
Your policy expiration date.

This means that for signed-in users, "documents and personal details are deleted after analysis" applies to the uploaded document itself — but the card fields listed above persist in your account until you delete them. You can delete any card at any time in the app (see Section 9).

Sharing. If you use the share feature, we generate a share version of your card with the personal-details strip removed before sharing. Review your shared card before you send it: anyone you give the shared card to can see everything it displays. A shared card is not an official rating.

Preferences

Your compare-to-previous-scan setting;
Your renewal-reminder email opt-in status. If you opt in, we record the date and time of your opt-in. No reminder emails are sent today. This is a planned feature: if you opt in, we would send a single reminder roughly 30 days before your policy expiration, with an unsubscribe option in the email.

Technical Information

IP address: used in memory to enforce a per-IP daily scan limit, and separately recorded in our metadata-only server logs, which are retained as described in Section 7.
Sign-in session: your browser's localStorage holds your sign-in session token. We do not use advertising trackers, analytics pixels, or marketing cookies.

3. How We Use Each Category of Information

Account information: to create and secure your account, sign you in, record your acceptance of the Terms, and send service-related (non-marketing) messages such as sign-in links, security notices, and notices of material changes to our Terms or this notice. We will not send marketing email without a separate opt-in.
Uploaded documents: solely to perform the analysis you requested, during the analysis only.
De-identified coverage analytics: to evaluate and improve our grading rubric and methodology.
Saved cards: to provide the saved-card feature — showing you your grades and coverage details when you return, and (if enabled) comparing a new scan to a previous one.
Preferences: to operate the features you have turned on, including the planned renewal-reminder email if you opt in.
Technical information: to enforce rate limits, prevent abuse, maintain security, and troubleshoot problems.

We do not use any of this information for advertising, and we do not build marketing profiles about you.

4. AI Processing Disclosure

CoverageCard's analysis is automated. When you upload a document, its contents are sent server-side to our AI service provider, Anthropic, whose Claude models extract policy facts and generate the analysis; our own server code then applies our grading rules. This processing happens under Anthropic's commercial API terms, which contractually restrict Anthropic's use of the data. We do not use your documents or personal information to train AI models, and under our commercial API terms Anthropic does not use your documents to train its models. Your documents are transmitted to Anthropic solely to perform your analysis; Anthropic handles and retains them only as permitted by its commercial API terms, which limit retention to short-term operational and safety purposes.

The analysis is generated by an automated AI system and reflects CoverageCard's own methodology; it may contain errors and is not a substitute for review by a licensed insurance producer. Your insurer's actual policy documents control in the event of any conflict with our analysis.

5. Service Providers

We share information only with the service providers below, only as needed to run the service. Each is bound by its terms of service or a data processing agreement.

Provider	Role	What it receives
Anthropic	AI analysis of document content	The contents of your uploaded documents, to perform your analysis; not used to train models; retained by Anthropic only as permitted by its commercial API terms.
Supabase	Authentication and database hosting	Account email, password (stored only as a hash), Terms-acceptance timestamp, saved cards, preferences, and de-identified coverage analytics.
Railway	API hosting (where analysis runs)	Uploaded documents in memory during processing; metadata-only server logs (IP address, file count, file sizes, line of business, grade).
Cloudflare	Website hosting and content delivery; may also provide email routing for our domain	Technical data incident to serving the site, such as your IP address and browser information; where our API is served through Cloudflare's network, the contents of your uploads in transit (encrypted, not stored by Cloudflare); if email routing is used, emails you send to our contact addresses.
GitHub	Source-code hosting only	No user personal information.

6. No Sale of Personal Information; No Targeted Advertising; Partner Links

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so, including in the preceding 12 months. We do not use third-party advertising trackers, analytics pixels, or marketing cookies on the site.

Partner links. Our site may include links to third-party insurance quote services, and we may be paid if you get a quote through a partner link. Clicking a partner link does not transmit your documents, coverage data, grade, or any other personal information to the partner; once you leave our site, any information you provide to a partner is governed by that partner's own privacy policy. Compensation never affects your grade or our analysis. If we ever share personal information with partners, we will first update this notice, provide any legally required opt-outs, and revise our "no sale" statements.

7. Data Retention

Uploaded documents: not retained. Processed in memory and discarded when your analysis is returned; never written to disk or logs.
Server metadata logs (IP, file counts/sizes, line of business, grade): retained for no more than 90 days for security monitoring and troubleshooting, then deleted.
De-identified coverage analytics: retained in de-identified form, potentially indefinitely, to improve our grading methodology.
Account information: retained while your account exists; deleted within 30 days of account deletion. Residual copies may persist in routine encrypted backups for a short period until backup rotation completes.
Saved cards: persist until you delete them (individually, in-app) or until your account is deleted. They are not automatically expired.
Preferences: retained for the life of your account.

Your information is stored and processed in the United States.

8. Security

We use safeguards designed to protect your information, including:

Row-level security on our database, designed so that saved cards are accessible only through the account that owns them; administrative access is limited to what is needed to operate and support the service;
Encryption in transit (TLS) for connections to our site and API;
Key isolation: AI processing is performed server-side, and API credentials are never exposed to your browser;
Minimizing what we keep in the first place — in-memory document processing and whitelist-based analytics storage.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by applicable state breach-notification laws.

9. Your Choices and Rights

Delete saved cards: you can delete any individual saved card at any time in the app.
Delete your account: self-service account deletion is not yet available. To delete your account and its data (including all saved cards), email us at support@coveragecard.ai and we will complete the deletion within 45 days of verifying your request.
Renewal-reminder emails: these are strictly opt-in and are not yet being sent. If the feature launches and you have opted in, every reminder email will include an unsubscribe link, and you can also turn the setting off in the app at any time.
Access, correction, deletion, and portability: you may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it by emailing support@coveragecard.ai. We honor these requests for any U.S. resident, voluntarily, regardless of which state you live in and regardless of whether any state privacy law's coverage thresholds apply to us. Rights requests are free of charge. We will respond within 45 days of receiving a verifiable request; if we need more time, we will tell you why and respond within 90 days. We may need to verify your identity (for example, by confirming control of your account email) before acting. You may use an authorized agent to submit a request; we will require proof of the agent's authorization and may verify your identity directly. If we decline a request, we will explain why, and you may ask us to reconsider by replying to our response.

If you scanned without an account: we generally hold no information we can link to you. De-identified analytics cannot be associated with any individual, so we cannot locate or delete "your" scan, and IP metadata logs are short-lived. We will explain this in response to any such request.

California residents: California law provides rights to know, access, correct, and delete personal information, to opt out of the sale or sharing of personal information, to limit the use and disclosure of sensitive personal information, and to be free from discrimination for exercising those rights. Whether or not we meet the thresholds that make those laws applicable to us, we extend these rights to you voluntarily. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of, and we do not use or disclose sensitive personal information for purposes that would trigger a right to limit.

Residents of Virginia, Colorado, Connecticut, Texas, and other states with consumer privacy laws: your state's law may provide similar rights of access, correction, deletion, portability, and opt-out of sale, targeted advertising, or profiling. We extend the same voluntary rights described above to you, and we do not sell your personal information, use it for targeted advertising, or use it for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

10. Children's Privacy

CoverageCard is intended for adults age 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a minor has provided us personal information, contact us at support@coveragecard.ai and we will delete it.

11. Do Not Track and Global Privacy Control

We do not track visitors across third-party websites and do not permit third parties to collect personal information for advertising on our site, so there is no cross-site tracking activity for a "Do Not Track" browser signal to disable; our site behaves the same whether or not a DNT signal is present. Global Privacy Control (GPC) signals communicate an opt-out of the sale or sharing of personal information. Because we never sell personal information or share it for cross-context behavioral advertising, all visitors are already treated the way a GPC signal would require, whether or not their browser sends one.

12. Changes to This Notice

If we change our data practices, we will update this notice and revise the effective date at the top. For material changes — such as new categories of collection, new sharing, or changes to retention — we will provide advance notice through a prominent notice on the site and, for account holders, by email where appropriate, before the change takes effect. Please review this notice periodically.

13. Contact Us

CoverageCard
postal address available on request at support@coveragecard.ai
Ohio, USA
Email: support@coveragecard.ai

If you have questions about this notice, our data practices, or want to exercise any of the choices described above, email us and we will respond as promptly as we can.