Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information generated automatically when you use our Services, and information from third-party sources where applicable.

Information You Provide

• — Name, email address, job title, and company name when you request a demo or contact us
• — Account credentials and profile information for platform users
• — Claims data, billing records, and related healthcare information you upload or connect through integrations
• — Communications you send to us, including support requests and feedback

Automatically Collected Information

• — Log data: IP address, browser type and version, pages visited, time and date of visits, and time spent on pages
• — Device identifiers and operating system information
• — Cookies and similar tracking technologies (see Section 5)
• — Usage patterns and feature interaction data within the platform

2. How We Use Your Information

We use the information we collect to:

• — Provide, operate, and improve the Services
• — Process and analyze claims data on your behalf as a service provider
• — Communicate with you about your account, updates, and support requests
• — Send product updates and marketing communications (you may opt out at any time)
• — Monitor and analyze usage trends to improve user experience
• — Detect, investigate, and prevent fraudulent or unauthorized activity
• — Comply with legal obligations and enforce our agreements

3. HIPAA and Healthcare Data

Crunch Claims operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when processing Protected Health Information (PHI) on behalf of our clients. In those contexts:

• — PHI is used solely to provide the contracted services and as permitted by applicable Business Associate Agreements (BAAs)
• — We maintain administrative, physical, and technical safeguards consistent with HIPAA Security Rule requirements
• — PHI is not sold, rented, or used for marketing purposes

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• — Service Providers: Third-party vendors who assist us in operating the Services (cloud hosting, analytics, email delivery), bound by confidentiality obligations
• — Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users
• — Legal Requirements: When required by law, court order, or governmental authority
• — With Your Consent: For any other purpose with your explicit consent

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Services. These include:

• — Essential cookies: Required for the Services to function (authentication, session management)
• — Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• — Preference cookies: Remember your settings and preferences across sessions

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, maintain our business relationship with you, and comply with legal obligations. Claims data and associated records are retained in accordance with the terms of your service agreement and applicable law. Upon termination of your account, we will delete or anonymize your data within 90 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, role-based access controls, regular security audits, and SOC 2 Type II certified infrastructure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and notify us immediately if you suspect unauthorized access to your account.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• — Access and receive a copy of the information we hold about you
• — Correct inaccurate or incomplete information
• — Request deletion of your personal information, subject to legal retention requirements
• — Opt out of marketing communications at any time via the unsubscribe link in any email
• — Object to or restrict certain processing of your information

To exercise any of these rights, contact us at privacy@crunchclaims.com.

9. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide additional notice—such as an in-app notification or email—prior to the changes taking effect. Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please reach out: