Privacy Policy
Last updated: April 2026
Plain English Summary
CoverageShield helps SMBs understand and manage their insurance coverage. We collect your business and insurance data to power our platform. We never sell your data. We never share it with insurance carriers or brokers. Your data belongs to you.
1. Who We Are
CoverageShield, LLC is a Texas limited liability company operating the platform at coverageshield.ai. We provide AI-powered risk management and insurance intelligence tools for SMBs.
Contact: don@coverageshield.ai
2. Information We Collect
Information you provide directly:
- Account information: your name, email address, and password when you create an account
- Business information: company name, industry, state of operation, employee count, and revenue range
- Insurance data: policy documents you upload, including carrier names, policy numbers, coverage limits, deductibles, and expiration dates
- Contract documents: contracts you upload for compliance scanning
- Communications: messages you send to our support team
Information collected automatically:
- Usage data: which features you use, how often, and when
- Log data: IP address, browser type, pages visited, and time spent on the platform
- Device information: operating system and browser version
Visitor identification data:
When you visit coverageshield.ai, we use RB2B to identify the company or individual associated with your visit based on publicly available information. This is standard practice in B2B software and applies to website visitors, not authenticated platform users.
Information from third parties:
Payment status from Stripe (we never receive your card number — Stripe processes all payments).
3. How We Use Your Information
We use your information to:
- Operate and improve the CoverageShield platform
- Analyze your insurance policies and identify coverage gaps
- Scan contracts for insurance compliance requirements
- Send you policy expiration alerts and platform notifications
- Process your subscription payments through Stripe
- Respond to your support requests
- Monitor platform security and prevent fraud
- Identify prospective customers who visit our website
- Generate anonymized, aggregated industry benchmarks (your data is never individually identifiable in benchmarks)
We do not use your data to train AI models.
Your policy documents and business data are analyzed using the Anthropic Claude API and are not retained by Anthropic beyond the API request.
4. How We Share Your Information
We do not sell your data. Ever.
We do not share your data with insurance carriers, brokers, agents, or any insurance industry participants. CoverageShield has no financial relationships with any carrier or broker that would give us an incentive to share your data with them. This independence is fundamental to what we are.
We share data only in these limited circumstances:
Service providers: We use third-party services to operate the platform. Each receives only the data necessary to perform their function:
- Supabase: database hosting and authentication
- Vercel: application hosting
- Anthropic: AI analysis of your documents (not retained beyond the request)
- Stripe: payment processing (they never share your card data with us)
- Resend: transactional email delivery
- HubSpot: pre-signup customer relationship management only
- PostHog: anonymized product analytics
- Firecrawl: web scraping for market intelligence (no customer data shared)
- RB2B: website visitor identification for prospecting purposes (website visitors only, not platform users)
Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of CoverageShield, our users, or the public.
Business transfers: If CoverageShield is acquired or merges with another company, your data may transfer to the new entity. We will notify you before this occurs and your rights under this policy will be maintained.
5. How We Protect Your Information
Database-level isolation: Every customer’s data is protected by Row Level Security (RLS) enforced at the PostgreSQL database level. This means your data is isolated from every other customer’s data at the database engine level, not just the application level. Even a bug in our application cannot expose your data to another customer.
Encryption: All data is encrypted in transit using TLS and encrypted at rest using AES-256.
Automated security monitoring: We run automated weekly security checks including penetration testing of our data isolation, sensitive data scanning, and authentication auditing.
Infrastructure: Our infrastructure providers (Supabase, Vercel, Anthropic, Stripe, Resend) are all SOC 2 Type II certified.
6. Data Retention
We retain your data for as long as your account is active. When you cancel your subscription:
- Your account data is retained for 30 days to allow reactivation
- After 30 days you may request complete deletion of your data by emailing don@coverageshield.ai
- We will confirm deletion within 14 business days
- Anonymized aggregate data (not attributable to you) may be retained for platform improvement
7. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
- Objection: Object to certain uses of your data
To exercise any of these rights, email don@coverageshield.ai. We will respond within 30 days.
9. Children’s Privacy
CoverageShield is intended for business use only. We do not knowingly collect data from individuals under 18 years of age.
10. Changes to This Policy
We will notify you by email at least 30 days before making material changes to this policy. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
11. Contact
CoverageShield, LLC
Email: don@coverageshield.ai
Web: coverageshield.ai