Privacy Policy

1. Who we are

ClaimMatch is a free claim assistant that helps people find class-action settlements, check the official details, and keep track of the claims they file themselves. We are not a law firm. This policy covers the ClaimMatch website and services (the “Service”).

2. What we collect

• Account details: your email address, the name you give when you sign up, and your password. Our sign-in provider stores passwords in scrambled (hashed) form, so we can’t read them.
• Answers you give us: your state and your answers to our short questions, such as whether you received a data-breach notice, own a car (and which brands), paid bank fees, bought packaged goods, use social media or streaming services, or worked an hourly or gig job.
• Details you add in Settings: your name and, if you choose, your phone number. We don’t send text messages.
• Claims you track: which settlements you’re tracking, the status you report (for example “Reported filed by you”) and any confirmation numbers you add.
• Earlier claim forms: if you used the claim forms we offered before October 2026, we kept what you entered (such as your name, email and mailing address), the name you typed to sign, and your IP address at that time.
• Referrals: if you joined through someone’s invite link, the invite code and who invited you.
• Our old email sign-up list: if you used the email form that used to be on our home page, we kept your email address (and state, if you gave it). We no longer collect addresses that way.
• Usage and device data: pages you visit, buttons you click, your browser and device type, and approximate location based on your IP address, collected through PostHog and Vercel Web Analytics. When you’re logged in, PostHog links this activity to your account id only — not your email address or name. Like most websites, our hosting provider also keeps technical logs, such as IP addresses, to keep the Service working and secure.

3. Health information

We don’t ask about your health. We used to ask whether you had taken prescription medication or used a medical device. That question is no longer asked, and we no longer collect answers to it. If you answered it before, your answer is still stored for now. We plan to delete those answers, and you can ask us to delete yours sooner.

4. How we use it

• To run your account and let you log in.
• To show you settlements and keep track of the claims you file.
• To send account emails (such as confirming your email address) and important notices about claims you track.
• To send settlement alert emails, only while you leave them turned on in Settings. These emails are paused for now.
• To understand how the Service is used, fix problems and improve it.
• To keep the Service secure, prevent abuse and follow the law.

We don’t use your information for advertising.

5. Who we share it with

We don’t sell your personal information, and we don’t share it for advertising. We share it only with the service providers that help us run ClaimMatch, and only as needed to do that:

• Supabase — Our database and sign-in provider. It stores your account, your answers and the claims you track, and sends sign-in emails such as the link to confirm your email address.
• Vercel — Hosts the website and runs Vercel Web Analytics, which counts page visits without cookies.
• PostHog — Product analytics: which pages are visited and which buttons are clicked. It uses cookies and similar browser storage. Events go through a first-party /ingest path on this site. We skip PostHog when your browser sends a Do Not Track signal.
• Resend — Sends our emails. It receives your email address and the content of the email.
• SettleSignal — A public source of settlement data that we use for our listings. We do not share any user data with SettleSignal.

We may also share information when the law requires it, or to protect the rights and safety of our users and ClaimMatch. ClaimMatch never sends your information to settlement administrators: you give it to them yourself when you file.

6. Cookies and similar technologies

• Sign-in cookies keep you logged in and your session secure. The Service can’t log you in without them.
• Analytics: PostHog stores a random ID in a cookie and in your browser’s local storage so we can count visits and see how people use the site. If your browser sends a Do Not Track signal, we do not load PostHog or set that cookie.
• Referral cookie: if you open someone’s invite link, we save their invite code in a cookie for 30 days.
• First-touch campaign cookie: if a link includes utm_source, utm_medium, utm_campaign, utm_content or ref, we save those values in a cookie for 30 days so we can attribute your signup to the first campaign you arrived from. Later links do not overwrite it.
• Vercel Web Analytics does not use cookies.
• We don’t use advertising cookies.

You can block or delete cookies in your browser settings, or send a Do Not Track signal to skip analytics. If you block sign-in cookies, you won’t be able to log in. Using the Service with analytics cookies allowed is your consent to this product-analytics use — not advertising.

7. Emails

We send account emails, such as the link to confirm your email address. We may also send important notices about claims you track, such as a correction; these come even if you turn off other emails, because they’re about your claims. Settlement alert emails are paused for now, and you can turn them off at any time in Settings.

8. How long we keep it

We keep your information while your account is open. If you ask us to delete your account, we will delete your personal information, except anything we must keep to meet legal obligations.

9. Your choices and rights

You can update your name, state and phone number, and turn alert emails on or off, in Settings. You can request a copy of the personal information we have about you, including any answers you gave to our earlier questions, and you can ask us to correct it or to delete your account and data. Depending on where you live, you may have other rights under state law.

To make a request, email us at hello@lawsuitai.org.

10. How we protect it

Your data is stored with Supabase, which encrypts stored data and data in transit. Database rules limit each account to its own records. No system is perfectly secure, but we work to protect your information and limit who can access it.

11. Children’s privacy

ClaimMatch is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, please contact us and we’ll delete it.

12. Changes to this policy

We may update this policy. When we do, we’ll change the “Last updated” date above, and we’ll tell you on the Service if a change is significant.

13. Contact us

Questions about your privacy or this policy? Email us at hello@lawsuitai.org.