Updated: 4 August 2025

ClaimKite (“ClaimKite,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our website (the “Site”), engage our audit and compliance services (the “Services”), or otherwise interact with us.

By using the Site or Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

1. Scope and Applicability

This Privacy Policy applies to all users of the Site and Services, including those located in the United States, its territories (e.g., Puerto Rico, Guam, U.S. Virgin Islands), and international jurisdictions where ClaimKite is lawfully accessible.

This Policy is intended to comply with applicable U.S. data privacy laws, including but not limited to:

• California Consumer Privacy Act (CCPA) and CPRA

• Colorado Privacy Act (CPA)

• Virginia Consumer Data Protection Act (VCDPA)

• Connecticut Data Privacy Act (CTDPA)

• Utah Consumer Privacy Act (UCPA)

• Other U.S. state laws as they come into force

If you reside outside the United States, including in the European Economic Area (EEA), United Kingdom, Canada, or other regions with data protection laws, you acknowledge and consent to the collection and processing of your personal information in the United States, which may not provide the same level of data protection as your home jurisdiction.

2. Information We Collect

We collect the following categories of personal information, depending on your interaction with us:

a. Information You Provide Directly

• Name, email address, company name, job title

• Product files, ad copy, and other materials submitted for audit

• Payment and billing details (processed via Stripe or similar providers)

• Communication preferences and contact history

b. Information Collected Automatically

• IP address, browser type, device identifiers

• Operating system, pages viewed, timestamps

• Referring URLs and usage patterns (via analytics tools such as Google Analytics)

c. Information from Third Parties

• Publicly available business data

• Files and references shared by collaborators or agents on your behalf

We do not knowingly collect personal information from individuals under 18 years of age.

3. How We Use Information

We use personal information for the following business and operational purposes:

• To deliver Services and fulfill audit engagements

• To communicate with you regarding orders, reports, and updates

• To improve our Site, Services, and user experience

• To enforce our Terms and Conditions and protect our legal rights

• To comply with legal obligations and respond to lawful requests

We do not sell personal information. We do not use your data for profiling or automated decision-making.

4. Disclosure of Information

We may disclose your personal information to the following categories of recipients:

• Service Providers: Vendors who assist with data storage, billing, client file handling, analytics, or IT infrastructure (e.g., Box.com, Stripe, Google)

• Legal Authorities: If required by applicable law, subpoena, court order, or regulatory request

• Business Transfers: In connection with a merger, acquisition, sale of assets, or similar transaction

• Authorized Agents: With your express consent or direction

We do not share personal information with third parties for cross-context behavioral advertising or marketing purposes.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Secure deletion protocols are used upon expiration of retention requirements.

6. Data Security

We implement reasonable physical, technical, and administrative safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. This includes the use of:

• Encrypted cloud storage (e.g., Box.com)

• Role-based access controls

• Secure file transfer mechanisms

• Password-protected client folders

However, no system is 100% secure. You acknowledge that transmission of information via the internet is at your own risk.

7. Your Privacy Rights

For U.S. Residents:

Depending on your state of residence, you may have the right to:

• Access or obtain a copy of your personal information

• Request deletion of your personal information

• Correct inaccurate information

• Opt out of the sharing or sale of personal data (where applicable)

• Appeal the denial of any request

You may exercise these rights by contacting us at [Insert Contact Email]. We will verify your identity before processing your request, and we will not discriminate against you for exercising your privacy rights.

For International Users:

If you are located in the EEA, UK, or another jurisdiction with data protection laws, you may have similar rights under those laws. By using the Site or Services, you consent to the processing of your personal data in the United States.

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), the following additional provisions apply in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR, respectively.

We process your personal data on one or more of the following legal bases:

• Contractual necessity: To fulfill our obligations under a contract with you or to take steps at your request prior to entering into a contract.

• Legal obligation: To comply with legal or regulatory requirements.

• Legitimate interests: For purposes such as improving our services, preventing fraud, and securing our systems—provided that these interests are not overridden by your rights and freedoms.

• Consent: Where required, we will obtain your explicit consent before processing personal data.

Your personal data may be transferred to and processed in countries outside of the EEA or UK, including the United States. When we transfer data internationally, we implement appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner’s Office

• Verification of third-party processor participation in recognized certification schemes (e.g., the EU-U.S. Data Privacy Framework, if applicable)

• Binding corporate rules (where relevant)

By using our Services, you acknowledge and consent to the transfer of your personal data to jurisdictions that may not offer the same level of data protection as your home country. To exercise any of these rights, use the homepage Contact Form to get in touch.

If you are a data subject under the GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Erase personal data (“right to be forgotten”)

• Restrict processing in certain circumstances

• Object to processing based on legitimate interests

• Port your data to another controller (where technically feasible)

• Withdraw consent at any time, where processing is based on consent

• Lodge a complaint with a supervisory authority in your country of residence

For the purposes of the GDPR, the data controller of your personal data is:

ClaimKite
155 E 34th St, NY, NY, 10016
hello@claimkite.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, analyze traffic, and improve user experience. These may include:

• Strictly necessary cookies (for site operation)

• Analytical/performance cookies (to monitor performance)

• Functional cookies (to remember preferences)

You may control cookie preferences through your browser settings or cookie banners provided on the Site.

9. Third-Party Links

Our Site may contain links to third-party websites or tools. We are not responsible for the privacy practices or content of such third parties. You are encouraged to review their privacy policies independently.

10. Children’s Privacy

The Site and Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such a collection, we will delete the information promptly.

11. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Updates will be posted to this page with a revised effective date. Your continued use of the Site or Services after such changes constitutes your acknowledgment and acceptance.

12. Contact Us

If you have questions about this Privacy Policy, or wish to submit a request regarding your personal data, you may contact us using the form on the homepage of this website.