Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email, phone, bar number, firm, practice areas, jurisdictions, bio, photos, and payment info. We also collect usage data (pages visited, actions taken).

2. How We Use Information

• Provide the coverage marketplace service
• Match attorneys with relevant coverage requests
• Process payments via Stripe
• Send transactional emails (confirmations, receipts, disputes)
• Send notifications (in-app, email, SMS — with your consent)
• Improve the Platform and develop new features
• Detect fraud, abuse, and violations of our Terms

3. Information Sharing

We share limited information with:

• Other attorneys: your profile info (after identity reveal)
• Stripe: payment processing
• Supabase: data storage and authentication
• Resend: transactional email delivery
• Twilio: SMS delivery
• OpenAI / Anthropic: AI-assisted hearing reports. Whatever you dictate or type into the hearing-report tool is sent to these providers to generate the structured summary. We ask you not to include client names or privileged details, and the tool warns you of this at the point of entry.
• Law enforcement: if legally required

SMS / text messaging: If you opt in to SMS notifications, you consent to receive recurring account and transactional texts (such as coverage updates, hearing reminders, payment confirmations, and verification codes) from CoverageCobra, delivered via Twilio. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help at any time. Opting out of SMS does not affect your account or your other notification channels. We do not share your mobile number with third parties for their marketing.

4. Client Confidentiality

Case details are treated as confidential. Case numbers, client names, and communications are hidden from other attorneys until a coverage request is confirmed. Platform storage does not by itself confer attorney work-product or privilege protection — do not upload documents containing privileged information without performing your own conflict checks.

5. Data Security

We use industry-standard security: encryption in transit (TLS) and at rest, row-level access controls, two-factor authentication (optional), and regular security audits. We are SOC 2 Type II pursuing certification.

6. Your Rights

You may:

• Access your data (email privacy@coveragecobra.com)
• Correct inaccurate data (via Settings)
• Delete your account (contact support)
• Export your data in CSV/JSON (contact support)
• Opt out of marketing emails (via Settings)

California residents: under CCPA you also have rights to know what we collect, request deletion, and opt out of “sales” of personal information (we do not sell).

EU residents: under GDPR you also have rights to portability, restriction of processing, and to lodge a complaint with your supervisory authority.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See Cookie Preferences.

8. Data Retention

We retain account data while your account is active. After deletion, we retain transactional records for 7 years for tax/legal compliance, and anonymized analytics indefinitely.

9. Children

The Platform is not intended for anyone under 18. We do not knowingly collect information from minors.

10. Contact

Privacy questions: privacy@coveragecobra.com