Privacy policy

Last updated September 2, 2026. This policy explains what CoverClerk (“we”) collects and how it is used. It is written to be read, not skimmed. If anything is unclear, email support@coverclerk.com.

What we collect

Account information: your email address, name and company name. Workspace data you enter: projects, vendors, vendor contact details and insurance requirements. Files you or your vendors upload: certificates of insurance and related documents, plus the structured data we extract from them. Usage and technical data: server logs including IP address, browser type and pages requested, kept for security and debugging. Billing data is handled by Stripe; we store only your Stripe customer and subscription identifiers, never card numbers.

How we use it

To provide the service: reading certificates, evaluating compliance, sending reminder emails to vendors on your behalf, and sending you notifications. To support you and to improve the product. To bill you. We do not sell personal data and we do not use your documents to train AI models.

AI processing

Uploaded certificates are sent to Anthropic's API to extract their contents. Anthropic processes this data under its commercial terms, which prohibit using API inputs to train models. Extracted data is shown to you for review; you remain responsible for confirming it.

Vendors and third parties

When you add a vendor, we store their business contact details and may email them on your behalf with upload links and renewal reminders. Every such email identifies your company as the sender and includes a way to contact you. Vendors can ask us to stop emailing them at any time.

Service providers

We use hosting and database providers (Vercel, Neon), file storage (Cloudflare R2), email delivery (Resend), payments (Stripe) and AI extraction (Anthropic). Each processes data only to provide its service to us.

Retention and deletion

Workspace data is kept while your account is active and for 90 days after cancellation, then deleted. You can export your audit log at any time and can request full deletion by emailing support@coverclerk.com; we complete deletion within 30 days.

Security

Data is encrypted in transit and at rest. Vendor upload links can only add files, never view them. Access to production systems is limited to the people who operate the service.

Your rights

You can access, correct or delete your personal data by contacting us. If you are in a jurisdiction with specific privacy rights (for example the EU, UK or California), those rights apply and we will honour them.

Changes

We will email account owners about material changes to this policy before they take effect.