PetClaim logoPetClaim.
Start an appeal

Privacy notice

Data controller: Techtenstein Services Private Limited ("Techtenstein", "we", "us"), operator of the PetClaim service at petclaim.org. We act as the data controller for personal data processed through the Service.

1. Categories of personal data we collect

  • Account data: email address, hashed password, display name.
  • Appeal data: insurer name, denial reason, claim amount, treatment details, pet profile (name, breed, age, conditions) — only what you enter.
  • Uploaded documents: denial letters, vet records, invoices you upload, stored encrypted at rest in a private bucket.
  • Support communications: messages you send via email or in-app chat.
  • Technical and usage data: IP address, device and browser identifiers, page-view and conversion metrics.
  • Payment metadata: Paddle returns a customer ID, subscription status, and last-4 / brand of card. We never see or store full card numbers.

2. How we use it (purposes)

  • Provide the Service — generate drafts, store your appeals, deliver downloads.
  • Account management and authentication.
  • Customer support — responding to your enquiries.
  • Security and fraud prevention — detecting abuse, rate-limiting, audit logs.
  • Product improvement — aggregated, de-identified usage analytics.
  • Legal and tax compliance.

3. Legal basis for processing (GDPR / UK GDPR)

  • Performance of a contract — to provide the Service you signed up for (account, appeal generation, downloads, subscriptions).
  • Legitimate interests — security, fraud prevention, service improvement, product analytics. We balance these against your rights and use the minimum data necessary.
  • Legal obligation — tax records, responding to lawful requests from authorities.
  • Consent — for optional marketing emails and non-essential cookies; you can withdraw at any time.

4. Who we share it with

  • Paddle.com Inc. (Merchant of Record) — receives the data necessary to process your purchase, manage your subscription, handle refunds, calculate sales tax/VAT, and issue invoices. Paddle is the seller of record for all transactions. See Paddle's privacy notice.
  • Hosting and database provider — Supabase (database, file storage, authentication) and Cloudflare (edge hosting, CDN), as our infrastructure subprocessors.
  • AI processing — Lovable AI Gateway processes appeal content at draft time to generate the letter; outputs are returned to your account and not retained for training.
  • Email delivery — Resend for transactional email.
  • Authorities — where required by law or to protect our rights.

We do not sell your personal data and we do not share it with insurers or marketers.

5. International transfers

Some of our subprocessors (Paddle, Cloudflare, Supabase, Lovable, Resend) process data outside India / the UK / the EEA, including in the United States. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

6. Retention

Appeal drafts and uploaded documents are kept until you delete them or close your account. Account closure permanently deletes your data within 7 days, except records we are legally required to retain (e.g. tax invoices, typically 7 years). Support emails are kept for up to 24 months.

7. Security measures

We apply appropriate technical and organisational measures to protect your data, including: TLS encryption in transit, encryption at rest for stored documents, hashed passwords, role-based access controls, Row-Level Security on our database, principle-of-least-privilege for staff access, signed audit logs, and verified webhook signatures for payment events. No system is perfectly secure; we will notify affected users and regulators of any breach as required by law.

8. Cookies and tracking

We use a small set of cookies and similar technologies:

  • Essential — authentication session, CSRF protection, checkout state. Cannot be disabled.
  • Analytics — privacy-respecting page-view and conversion metrics, aggregated and not tied to your identity.
  • Payment provider — Paddle sets cookies during checkout to process the transaction and prevent fraud.

You can manage non-essential cookies through your browser settings. We do not use advertising cookies.

9. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, India DPDP Act), you have the right to: access your data, correct it, delete it, restrict or object to processing, port it to another provider, withdraw consent, and complain to a supervisory authority. You can exercise most rights directly from your dashboard or by emailing privacy@petclaim.org. We respond within one month.

10. Contact

Techtenstein Services Private Limited — privacy@petclaim.org.

Last updated: June 2026.