ClaimChowder

This Privacy Policy explains how Vindica, Inc., a Delaware corporation doing business as ClaimChowder.ai ("Vindica," "ClaimChowder.ai," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you use ClaimChowder.ai, our website account features, and related services (the "Services").

ClaimChowder is designed around a local-first privacy model. Public settlement browsing does not require an account. Browser extension matching, visited URLs, claim-form answers, evidence documents, eligibility scores, and settlement matches stay on your device by default and are not uploaded to us unless a future feature clearly asks for separate consent.

Personal Information We Collect

We collect personal information you provide to us, information generated when you use account features, and limited technical information needed to operate and secure the Services. We do not intentionally collect Social Security numbers, driver's license numbers, bank account numbers, payment card numbers, full browsing history, Gmail or inbox contents, claim-form answers, or evidence documents through the current Services.

Category	Examples	Source
Identifiers and account information	Email address, account ID, authentication/session data, and Terms/Privacy acceptance records.	You, our authentication provider, and website account features.
Profile and preference information	Selected states, categories, companies, products, notification preferences, and extension-to-web sync consent flags if enabled.	You, when you create or update website account preferences.
Saved settlement activity	Settlement IDs you save or unsave, the source of the save, and timestamps.	Your account actions.
Claim URL checker submissions	When an authenticated user checks an unrecognized settlement URL, we store only the normalized host and a sanitized submitted URL such as https://example.com for review.	You, when you submit a URL to the checker.
Local and session data	Find My Cases quiz choices may be stored in your browser session storage. Extension settings, Page Watch matches, dismissed alerts, local history-scan summaries, local claim-helper answers, and local claim drafts stay on your device by default.	Your browser or extension storage.
Technical and security information	IP address, browser and device information, cookies, server logs, Turnstile verification data, and security events needed to run, secure, and debug the Services.	Your browser, our service providers, and security tools.
Communications	Messages you send us, support requests, privacy requests, and email preferences.	You.
Optional legal referral information	If we offer a future legal referral or law-firm response form, we may collect the information you choose to provide in that opt-in form so the relevant law firm can evaluate your request.	You, only after a separate opt-in action.

How We Use Personal Information

To provide the Services, including account creation, login, profile management, saved settlements, settlement discovery, and URL verification.
To personalize settlement recommendations using website account preferences you choose to save.
To keep the extension local-first by default while allowing future opt-in account sync only for the data described at the point of consent.
To review unrecognized settlement URL hosts and improve our verified settlement rule packs.
To send service messages, account notices, requested reminders, and marketing communications where permitted. You can opt out of marketing communications.
To detect, prevent, and respond to spam, abuse, fraud, security incidents, and illegal activity.
To comply with law, enforce our Terms, respond to valid legal requests, and protect the rights, safety, and property of ClaimChowder, users, and others.
To provide an optional legal referral or law-firm response feature only if you separately request it and consent to sharing the information you provide for that purpose.
To create aggregated or deidentified information. If we deidentify personal information, we will maintain and use it in deidentified form and will not attempt to reidentify it except as permitted by law.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising or use sensitive personal information for targeted advertising. If that changes, we will update this Policy and provide any required choices before doing so.

We may disclose personal information to the following categories of recipients:

Service providers that help us operate the Services, such as hosting, database, authentication, security, email, analytics, and customer support providers.
Cloudflare Turnstile, which we use to protect signup, password reset, and URL-checking flows from spam and abuse. Cloudflare's Privacy Policy applies to Turnstile.
Law firms or legal service providers, only when you take a separate opt-in action requesting that your information be shared for a legal consultation, claim evaluation, or similar purpose.
Government agencies, courts, litigants, or other parties when required by law, valid legal process, or to protect legal rights, safety, or security.
Successors or affiliates in connection with a merger, financing, acquisition, bankruptcy, reorganization, or sale of all or part of our business, subject to this Policy or a policy that provides materially similar protections.
Other third parties when you direct us or consent to the disclosure.

Cookies, Local Storage, and Turnstile

We use cookies and similar technologies for account authentication, security, preferences, and service operation. Supabase authentication may set cookies or similar session tokens so you can stay logged in. The Find My Cases quiz may store answers in browser session storage so your current session can restore your choices. The browser extension stores matching information locally by default.

We use Cloudflare Turnstile to protect parts of the Services from spam and abuse. Turnstile may collect browser, device, and interaction data for risk analysis. Use of Turnstile is subject to the Cloudflare Privacy Policy.

Your browser may let you block or delete cookies and storage. Some Services, especially login and account features, may not work properly if you disable them. We do not currently respond differently to Do Not Track signals. Where required by law, we honor recognized browser-based opt-out preference signals, such as Global Privacy Control, for activities that require opt-out rights.

Data Retention

We retain personal information for as long as needed to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud or abuse. Account profile data, preferences, and saved settlements are retained until you delete them, close your account, or ask us to delete them, subject to legal exceptions. Browser session quiz data is stored locally for the session unless your browser keeps it longer. Extension data stays local by default and can be cleared through the extension or browser controls. Sanitized unverified URL hosts may be retained for review and quality control.

Your Choices and Rights

Depending on where you live, you may have the right to request access to personal information we hold about you, request correction, request deletion, receive a portable copy, object to or restrict certain processing, withdraw consent, opt out of certain disclosures, appeal a rights decision, and avoid discrimination for exercising privacy rights.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, access, correct, delete, portability, opt out of sale or sharing, limit certain uses of sensitive personal information, and nondiscrimination. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale/share opt-out needed for the current Services.

To exercise a privacy right, appeal a decision, or ask a privacy question, email privacy@claimchowder.ai. Please include the email address associated with your account, the request you want to make, and enough information for us to verify that you are the account holder or an authorized agent. We may ask for additional information if needed to verify and process your request.

You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us. Even if you opt out of marketing messages, we may still send service, security, legal, or account-related messages.

Security

We use administrative, technical, and organizational measures designed to protect personal information. No system can be guaranteed to be completely secure, and you are responsible for keeping your account credentials confidential.

Third-Party Links

The Services link to official settlement websites, court-approved notices, claim administrators, the Chrome Web Store, and other third-party websites. Their privacy practices are governed by their own policies, not this Policy.

International Users

ClaimChowder is operated from the United States. If you use the Services from outside the United States, your personal information may be processed in the United States and other jurisdictions that may have different privacy laws than your location.

Children

The Services are not intended for users under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at privacy@claimchowder.ai and we will take appropriate steps to delete it.

Changes to This Policy

We may update this Policy from time to time. We will post changes on this page and update the effective date. If we make material changes, we will provide notice as required by law.

Contact Us

Vindica, Inc. (d/b/a ClaimChowder.ai) is the controller of personal information collected through the Services. If you have questions, requests, or complaints about this Policy or our privacy practices, contact us at privacy@claimchowder.ai.