Privacy Statement
This statement describes how ClaimStation collects, uses, and protects your data.
Data we collect and use
We collect and process data necessary to provide the service:
- Account data — Email, display name, and authentication details (e.g. when you sign up or sign in). We use this to manage your account and secure access.
- Claims and transactions — Descriptions, amounts, dates, categories, reimbursing entities, status, and links between claims and bank transactions. We use this to provide claim tracking, matching, and reports.
- Bank account information — Nicknames and masked account identifiers (e.g. last four digits) for matching imported transactions. Full account numbers are stored securely and not shown in full.
- Documents — Receipts and other files you upload and attach to claims. They are stored securely and associated with your claims.
- Household data — If you use household sharing, profile and claim data may be visible to other household members as described in Household sharing.
- Usage and support — Feedback you submit, error reports (when enabled), and similar data we use to improve the service and assist you.
We do not sell your personal data.
Where your data is stored
Your data is stored using secure cloud infrastructure (Supabase). Access is restricted by authentication and row-level security so you only see your own data (or household data where applicable).
Data retention
How long we keep your data is controlled by your data retention setting in Profile. You can choose a retention period or retain data indefinitely. When data is archived, it is removed from active use as described in the data retention guide.
AI and third-party processing
- AI-assisted matching — If you enable AI features in Settings → AI Features, anonymised transaction and claim data may be sent to third-party AI providers (e.g. OpenAI) for analysis. We do not send personally identifiable information. See AI-assisted matching for how anonymisation works and how to disable AI at any time.
- Matching Intelligence — Learning from your confirm/reject actions is stored in your account and is not sent to external services on its own. You can clear it in Settings → AI Features.
Other third parties (e.g. hosting, email delivery) may process data on our behalf under strict agreements to support the service only.
Security
We use industry-standard measures to protect your data: authentication, encryption in transit, access controls, and secure storage. API keys are stored hashed. Sensitive identifiers (e.g. bank account numbers) are masked in the interface.
Your rights
You can:
- Access and correct your data through the app (Profile, claims, transactions, etc.).
- Export your data as supported by the service.
- Delete your account and associated data.
- Opt out of AI — Disable AI features in Settings → AI Features so no data is sent to AI providers.
- Control retention — Set your data retention period in Settings → Profile.
If you have questions or want to exercise these rights, use Support → Feedback or contact us through the channels listed in the app.
Changes to this statement
We may update this Privacy Statement from time to time. We will notify you of material changes (e.g. by email or an in-app notice). The current version is always available in Help → Other → Privacy Statement.
Contact
For privacy-related questions, use Support → Feedback in the app or contact us through the channels listed in the app.