1. Scope and our role
ClaimVela provides intake, collaboration, workflow, and AI-assisted review tools to personal injury law firms. For prospective-client and matter information submitted by or for a customer firm, the firm decides why and how that information is used. ClaimVela processes it to provide the service under the firm's instructions.
The customer firm is responsible for its own privacy notices, legal basis, professional duties, conflict procedures, retention rules, and responses to people whose information it controls. ClaimVela separately determines how it uses account, billing, security, and service-administration information described here.
2. Information we process
- Account and firm information: names, business contact details, authentication identifiers, organization membership, permissions, and account settings.
- Intake and case information: contact information; incident descriptions; injury, treatment, medical-record, insurance, employment, wage-loss, damage, court, identity, signature, and representation information; communications; notes; and uploaded evidence or documents.
- Usage and security information: device and browser information, IP-derived region, timestamps, authentication and audit events, feature use, error details, and records needed to protect and operate the service.
- Billing information: Paddle customer, subscription, transaction, plan, and payment-status identifiers. Paddle processes complete payment-card details; ClaimVela does not store full card numbers.
- Support information: messages, attachments, and troubleshooting details you provide when requesting help.
3. How we use information
We use information to:
- provide, secure, support, and improve ClaimVela;
- authenticate users and enforce firm and role boundaries;
- run intake, client-portal, document, workflow, and reporting features;
- generate AI-assisted summaries, issue spotting, and follow-up suggestions when requested;
- process subscriptions and maintain billing access;
- detect abuse, diagnose failures, and maintain audit records; and
- comply with law and enforce our agreements.
ClaimVela does not sell personal information or use intake content for targeted advertising.
4. AI-assisted features
When a firm uses an AI feature, relevant intake text, conversation content, or extracted document material may be sent to OpenAI to produce the requested output. ClaimVela is designed to organize known facts and identify gaps—not to make representation decisions, provide legal advice, determine liability, or value a claim. AI output can be incomplete or wrong and must be reviewed by an authorized professional.
5. Service providers and disclosures
We disclose information only as needed to operate the service, follow customer instructions, protect rights and safety, complete a business transaction, or comply with law. Our core providers include:
- Supabase for authentication, database, and private file storage;
- Vercel for application hosting and delivery;
- OpenAI for requested AI-assisted features; and
- Paddle as merchant of record for subscriptions and payments.
A firm may also enable email delivery through Resend, SMS delivery through Twilio, or legacy billing support through Stripe. Those providers receive only the information needed for the enabled feature.
6. Cookies and similar technologies
ClaimVela uses essential cookies and local browser storage for sign-in, portal sessions, checkout continuity, preferences, fraud prevention, and security. We do not currently use third-party advertising cookies.
7. Retention and deletion
Customer firms control the primary lifecycle of their intake and case data, subject to their agreement, legal obligations, and available account controls. We retain account, billing, audit, backup, and security information only as reasonably needed for the service, legitimate business records, dispute prevention, and legal compliance. Backup deletion may occur on a delayed cycle.
8. Security
We use technical and organizational safeguards intended to protect information, including encrypted network transport, tenant-aware access controls, row-level database policies, private file storage, audit history, and restricted server credentials. No online service can guarantee absolute security. See our Security page for more detail.
9. International processing
ClaimVela and its service providers may process information in countries other than the one where it was collected. Customer firms are responsible for determining whether their use requires additional contractual safeguards or notices for international transfers.
10. Your choices and privacy requests
If you submitted information to a law firm through ClaimVela, contact that firm directly because it controls your intake record. Account users may use the support channel shown in their ClaimVela account, order confirmation, or written agreement to request account access, correction, or deletion. We may need to verify identity and preserve information where law or a customer's professional duty requires it.
11. Health information and children
ClaimVela is not represented as a HIPAA-compliant service and does not enter into a business associate agreement unless the parties separately sign one. Do not use ClaimVela for protected health information that requires a business associate agreement unless one is in effect.
ClaimVela accounts are intended for legal professionals and authorized staff, not children. A law firm may collect information about a minor only when it has authority and a lawful professional purpose to do so.
12. Changes and contact
We may update this policy as our service or legal obligations change. Material updates will be posted here and identified by a revised date. Contact ClaimVela through the support channel in your account, order confirmation, or written agreement. Billing and payment inquiries may also be handled through Paddle's buyer support.