Privacy Policy

Last updated: April 15, 2026

1. Information We Collect

We collect information you provide directly: name, email, phone, bar number, firm, practice areas, jurisdictions, bio, photos, and payment info. We also collect usage data (pages visited, actions taken).

2. How We Use Information

  • Provide the coverage marketplace service
  • Match attorneys with relevant coverage requests
  • Process payments via Stripe
  • Send transactional emails (confirmations, receipts, disputes)
  • Send notifications (in-app, email, SMS — with your consent)
  • Improve the Platform and develop new features
  • Detect fraud, abuse, and violations of our Terms

3. Information Sharing

We share limited information with:

  • Other attorneys: your profile info (after identity reveal)
  • Stripe: payment processing
  • Supabase: data storage and authentication
  • Resend: transactional email delivery
  • Twilio: SMS delivery
  • OpenAI / Anthropic: AI-assisted hearing reports (anonymized dictation only)
  • Law enforcement: if legally required

4. Client Confidentiality

Case details are protected as privileged attorney work product. Case numbers, client names, and privileged communications are hidden from other attorneys until a coverage request is confirmed. Do not upload documents containing privileged information without proper conflict checks.

5. Data Security

We use industry-standard security: encryption in transit (TLS) and at rest, row-level access controls, two-factor authentication (optional), and regular security audits. We are SOC 2 Type II pursuing certification.

6. Your Rights

You may:

  • Access your data (email privacy@coveragecobra.com)
  • Correct inaccurate data (via Settings)
  • Delete your account (contact support)
  • Export your data in CSV/JSON (contact support)
  • Opt out of marketing emails (via Settings)

California residents: under CCPA you also have rights to know what we collect, request deletion, and opt out of “sales” of personal information (we do not sell).

EU residents: under GDPR you also have rights to portability, restriction of processing, and to lodge a complaint with your supervisory authority.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See Cookie Preferences.

8. Data Retention

We retain account data while your account is active. After deletion, we retain transactional records for 7 years for tax/legal compliance, and anonymized analytics indefinitely.

9. Children

The Platform is not intended for anyone under 18. We do not knowingly collect information from minors.

10. Contact

Privacy questions: privacy@coveragecobra.com