ClaimHawk (“we,” “us,” “our”) operates claimhawk.ai and related services that help users discover and file claims in class action settlements. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using ClaimHawk, you agree to the practices described here.
Account information. Email address and authentication details (via Supabase Auth). If you sign in with Google, we receive your email and name from Google.
Profile information. Name, postal address, phone number, and ZIP code that you enter to auto-fill claim forms. These fields are encrypted at rest using AES-256-GCM before being stored.
Claim details. Information you submit while filing a claim, including claim-specific form data, uploaded documents (IDs, receipts), and eligibility answers. Documents are stored privately in Supabase Storage with per-user access controls.
Payment information. If you subscribe to a paid plan, Stripe processes your payment. We do not store your card number. We retain a Stripe customer identifier and your current subscription tier.
SMS information. If you opt in to SMS reminders, we store your mobile number and your explicit opt-in status. See Section 4 for details.
Usage information. Basic request logs (IP, path, timing) for security and debugging, and error traces via Sentry.
We do not sell your personal information, and we do not use it for third-party advertising.
We rely on the following processors to run the service. Each has its own privacy practices.
Program name: ClaimHawk Deadline Reminders. See /sms for a visual of the opt-in flow and a sample message. If you opt in to ClaimHawk SMS reminders:
We use transport-layer encryption (HTTPS) for all data in transit. Sensitive profile fields and claim form data are encrypted at rest using AES-256-GCM with a server-side key. Authentication tokens are managed by Supabase Auth. We enforce the principle of least privilege on internal access and monitor for anomalies. No system is perfectly secure — please use a strong password and notify us promptly if you suspect your account has been compromised.
We retain your account and claim information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 30 days, except where we must retain records for legal, tax, or fraud-prevention purposes. Deletion requests can be sent to admin@claimhawk.ai.
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain processing. To exercise any of these rights, email admin@claimhawk.ai. California residents: under the CCPA/CPRA, we do not sell personal information and do not offer a financial incentive in exchange for it.
ClaimHawk is not directed to children under 13, and we do not knowingly collect information from them.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice in the app before they take effect. Continued use after the effective date of an update constitutes acceptance.
Questions or requests: admin@claimhawk.ai.