Privacy and security
Your records are protected at every step
Your decision letters, C-file and medical records are some of the most personal documents you own. Here is exactly how we protect them, in plain words.
Encrypted at every step
Your records travel over HTTPS, are stored with AES-256 encryption, and are processed on a server whose disk is itself encrypted.
Never sold. Never used for ads or AI training.
We don't sell records or use them for advertising. Our AI provider, OpenAI, handles records under a signed data processing agreement and a HIPAA Business Associate Agreement, the same contract hospitals require of their vendors, and your records aren't used to train its models.
You decide what stays
Delete a review from your dashboard at any time. Working copies on our processing server are deleted as soon as your report is delivered.
Built by combat Veterans
ClaimScope is Veteran-owned and independent of the VA. We built it for our own community, and we treat your records the way we'd want ours treated.
How we protect your records
- Secure sign-in
- Sessions expire after 30 days. Two-step verification is available for your account and required for every ClaimScope staff account. Repeated sign-in attempts are rate limited.
- Your files stay yours
- Every request for a file is checked against the account that owns it, so one account can't open another's records.
- Uploads are checked
- Files are checked to confirm they are what they claim to be and scanned for malware before anything reads them.
- A locked-down processing server
- Administrative access is limited to one administrator from one approved network. Records on it sit on an encrypted volume and are deleted on a fixed schedule.
- Only what the review needs
- We send the AI model only the text a review requires, with response storage turned off. OpenAI may keep it up to 30 days for abuse monitoring.
- Payments kept separate
- Checkout is hosted by our payment processors. Card numbers never reach our servers, and records are never sent to them.
Your control
You choose whether to upload records, and you can permanently delete a review from your dashboard. Deleting removes it from our active systems right away; database backups roll off within 30 days. The full schedule is under how long we keep information below.
No online service can promise perfect security. We test these safeguards, keep improving them, and will notify you as the law requires if an incident affects your records.
Privacy notice
How we handle your information
Effective October 19, 2026
The short version
- We use your records only to prepare the review you ask for, unless you choose to let us use de-identified results to improve our reviews. We don't sell them, use them for advertising, or let anyone train AI models on them.
- Your records go to only two outside services: our hosting provider, which stores them, and our AI analysis provider, which reads the text to prepare your review. Sign-in, payment, email and website-measurement services never receive them.
- You can delete a review, or your whole account, yourself at any time. The table below says how long everything else is kept.
- Health information gets extra protection. See our Consumer Health Data Privacy Policy.
Who we are
ClaimScope LLC (“ClaimScope”) runs claimscopeveterans.com, servicerecordveterans.com and ruckreadyvets.com (ServiceRecord and Ruck Ready are trade names of ClaimScope LLC; the same company, systems and this notice apply on all three) and provides self-service, educational review tools. ClaimScopeLaw LLC provides separately retained attorney services. Using ClaimScope, asking about attorney help, or paying for a review does not make ClaimScopeLaw your lawyer. That happens only after conflicts and eligibility review, written acceptance, and a signed engagement agreement.
What we collect
- Account details: your email address, the name on your account, your sign-in method, and, if you turn it on, two-step sign-in.
- Records you upload: VA decision letters, claims files (C-files), medical and service records, and anything else you choose to upload, plus file names and sizes.
- What we produce from them: the issues found, ratings and dates, estimates, draft forms and letters, and the report.
- Answers you give us: household answers (marital status, children, dependent parents, whether your spouse needs daily help), answers to form questions, TDIU and statement questions, and the number of documents you expect.
- Requests and messages: sponsored-review requests and any note you add, Founding Veterans claims, choices and survey answers, call bookings, attorney intake and consult requests, reviews you write about ClaimScope, and support messages.
- Purchases: what you bought, when, and the amount. Card numbers go straight to our payment processor; we never see them.
- Attorney engagements: for an accepted attorney matter, the engagement and VA representation documents, including your Social Security number where a VA form requires it, and each signature's name, email, time, IP address and browser.
- Technical and security information: sign-in events, IP address, browser type, and records of who opened what (including when a founder opens a matter to support you).
- Free-preview link requests: when you upload a letter and ask for a sign-in link on the free-preview page, we hold the letter for up to 48 hours, keyed to your email, until you open the link (nothing is analyzed before then), and we save your email address, the time, the first page you visited, and how you found us: the campaign tags (utm_source, utm_medium, utm_campaign, utm_content) and any Google ad-click ID (gclid, gbraid or wbraid) in the link you arrived on. If you declined measurement with the Privacy button or your browser sends a Global Privacy Control signal, we save only your email address and the time. We use this to see which ads and pages bring people to the free review and to follow up on your own request. We don't use it for marketing emails or ad audiences, we don't share it with Google or any other ad platform, and we delete it after 90 days.
- “Email me a link to finish later”: if you ask for this on the free-preview page, we send one email with a link back to the upload page. We keep your address only in our email delivery log, as we do for every email we send, and we don't add it to a mailing list or send follow-ups.
- Website visits: on public pages only, and only as described under “Website measurement” below.
Where it comes from
From you or someone you authorize, from the files you upload, from your browser and account, from our payment and email providers (payment status, delivery status), and from the analysis you ask us to run. We don't get records from VA directly.
How we use it
To sign you in; to see which ads and pages bring people to the free review; to store, read and analyze your files and prepare the results you ask for; to send emails about your review; to run calls you book; to screen attorney requests; to process payments and signatures; to answer support requests; to keep the service secure and fix problems; to keep records the law requires; and to understand, in general, which pages and products people use.
We never use your records or answers for advertising, never sell them, and never use them to train AI models. Founders open a Veteran's matter only to support that Veteran, check a result for quality, or handle a request, and each time is logged and shown on the matter.
Founding Veterans. If you claim a founding review, we use your survey answers to improve the service and our prices. If you also check the optional box, we use your results with your name and identifying details removed to test and improve our reviews and as anonymous examples. That box is never a condition of a free review, you can withdraw it at any time with a privacy request or an email, and it never trains AI models. A review you let us publish says you received a free review.
AI analysis
We use automated tools and an AI model provider (OpenAI) to read the text of your records and prepare your review. We send only what the review needs, with response storage turned off. Under OpenAI's business terms this data isn't used to train its models; OpenAI may keep it for up to 30 days to monitor for abuse. Automated results can be incomplete or wrong. They aren't legal advice or a medical opinion, and no one at ClaimScope reviews your individual result before it's released.
Who receives information
| Provider | What it does | What it can receive |
|---|---|---|
| Cloudflare | Hosts the website, the account database and file storage | Everything stored in your account, including uploaded files (encrypted in transit and at rest) |
| DigitalOcean | Our dedicated processing server | Working copies of your records and the text read from them, deleted as described below |
| OpenAI | AI analysis | Record text needed for your review, and the analysis returned |
| Supabase | Sign-in | Your email address, password (stored as a one-way hash), sign-in sessions and two-step sign-in settings. Never your records |
| Stripe | Payments for reviews and Claim Watch | Your email, billing name and payment details. Never your records |
| LawPay | Attorney fee payments for ClaimScopeLaw (to its client trust account) | Your name, email and payment details. Never your records |
| Resend | Sends our emails | Your email address and the email itself. Records are never attached |
| Website measurement (Analytics and Ads) | Visits to public pages only, as described below |
Electronic signatures are built into ClaimScope; no outside signature service receives your documents.
ClaimScopeLaw receives your information only when you ask for attorney help. Since October 15, 2026, that request includes a separate box you must check before ClaimScope shares anything with it. Your county veterans office or VSO never receives anything about you from us, even if you came through its referral link.
We may also disclose information when the law requires it, to protect people or the service, to investigate fraud or a security incident, or as part of a merger or sale under confidentiality protections, in which case this notice keeps applying to the information we hold.
Website measurement
On public pages, we use Google Analytics and Google Ads measurement to see general site use and whether an ad led to a purchase. Where consent is required, it stays off until you allow it; elsewhere you can turn it off with the Privacy button, and a Global Privacy Control signal turns it off automatically. It never loads on sign-in, account, upload, results or attorney pages. We send page paths and fixed events (like “started a free preview” or “purchase”) and never names, emails, records, conditions or claim details. Ad personalization, remarketing, Customer Match and health-based audiences are off.
Cookies and browser storage
- Sign-in cookies keep you signed in.
- Your measurement choice is saved in your browser.
- How you found us: the campaign tags, Google ad-click ID and first page of your visit are kept in your browser tab until you close it. They reach us only if you ask for a free-preview sign-in link, and they aren't kept at all if you declined measurement or your browser sends a Global Privacy Control signal.
- Referral cookie: if you arrive through a county office or VSO link, we save that office's code in your browser for 90 days so your results can offer that office's sponsored review.
- Form details: names and addresses you type into a draft VA form are saved in your browser, for that review only, so you don't retype them. They aren't sent to us unless you submit the form. Clearing your browser data removes them.
Emails
We send emails you need (sign-in links, “your review is ready,” receipts, reminders you set up, Claim Watch notices). Optional emails (updates, a request to review us, follow-ups after a free preview) go out only if you opted in, and each has an unsubscribe link.
Security
Files travel and are stored encrypted, are kept separate by account, are scanned before analysis, and are handled only by authenticated services. Founder accounts require two-step sign-in, and you can turn it on for yours. No online service can promise perfect security. Please don't put a Social Security number or full VA file number in a review title or a note.
How long we keep information
We delete on this schedule automatically. Deleting a review or your account removes it from our active systems right away; database backups roll off within 30 days.
| Information | How long |
|---|---|
| Uploaded files, results, answers and review details | Until you delete the review or your account |
| Working copies on the processing server | Deleted as soon as your report is delivered; if processing stops first, 30 days, then deleted |
| Analysis notes on the processing server (findings, not files) | Until you delete the review, so a rerun doesn't repeat paid work |
| A sponsored-review note | Deleted with the review. The bare decision (approved or not, and when) is kept 2 years for the one-per-year rule |
| Share links | Stop working after 14 days; the link record is deleted 30 days later |
| Reviews you write about ClaimScope | Until you delete it |
| Founding Veterans claims, choices and survey answers | Until you delete your account, or 2 years after you claim. If you delete your account after using a founding review, we keep only a scrambled (hashed) form of your email and that it was used, for 2 years, so it stays one per Veteran |
| Form details saved in your browser | In your browser only, until you clear them |
| Decision and intent-to-file reminders (email and the date you gave us) and saved plans | Until the last email is sent or you unsubscribe, then 90 days |
| Free-preview link requests (your email, and the campaign tags and ad-click ID you arrived with) | 90 days |
| A decision letter uploaded on the free-preview page before you sign in | Held, keyed to your email, until you open the sign-in link; deleted after 48 hours if you don't. Once you sign in it becomes part of your review above |
| Email delivery records | 1 year |
| Sign-in, security and access records | 3 years |
| Privacy requests and our answers | 2 years |
| A marker that your account used its free preview | Kept, so the free preview stays one per account (no records or results in it) |
| Purchase, refund and payment records | 7 years, for tax and accounting law |
| Signed attorney engagement packets | As long as ClaimScopeLaw's professional obligations require, generally 6 years after the matter closes |
| Database backups | Roll off within 30 days |
| Provider copies | OpenAI: up to 30 days for abuse monitoring. Stripe, LawPay and Supabase keep their own records under their legal obligations |
Your choices and rights
You can, at any time:
- Delete a review from your dashboard, or delete your whole account from Account and privacy.
- Download your report and results.
- Turn off website measurement and optional emails.
- Ask us for a copy of your information, to correct it, or to delete it, using our privacy request form (no sign-in needed) or support@claimscopeveterans.com.
We answer within 45 days and will tell you if we need longer. If we turn down a request, you can appeal by replying to our answer; we decide appeals within 45 days. We may need to confirm it's you, usually by email link. We don't treat you differently for using these rights. We don't sell personal information or share it for targeted advertising.
Children
ClaimScope is for adults. We don't knowingly collect information from children under 13.
Changes
If we change this notice, we'll update the effective date, and for material changes we'll tell you in your account or by email before they apply.
Contact
support@claimscopeveterans.com · (515) 344-4234 · ClaimScope LLC
Consumer health data
Consumer Health Data Privacy Policy
Effective October 15, 2026
This policy explains how ClaimScope LLC handles consumer health data. It's written for laws like Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy act, and we apply it to everyone, wherever you live. Our Privacy Notice covers everything else.
The health data we collect
- Medical, service-treatment and VA records you upload, and the text read from them.
- Conditions, diagnoses, symptoms, treatment, test results (including hearing tests), disability ratings and VA decisions found in those records or in what we produce from them.
- Answers you give that relate to health: whether your spouse needs help with daily activities, work limitations (TDIU questions), and statement answers.
- Screening results we produce, such as possible military sexual trauma (MST) markers, toxic-exposure (PACT Act) eligibility and hearing-loss results.
- Anything health-related you choose to write in a sponsored-review note or a support message.
We don't collect precise location, and we don't use location to target anyone near a health-care facility.
Where it comes from
From you (or someone you authorize) and the files you upload, and from the analysis you ask us to run on them.
Why we collect and use it
Only to provide the review you ask for: to read your records, find issues, estimate what they could be worth, prepare draft forms and letters, and explain your results, including on a call you book. We also use it to check results for quality, to keep the service secure, and to keep records the law requires. Collecting and using it this way is necessary to provide the service you request. We ask for your consent before using health data for any other purpose. The one other purpose today: if you claim a Founding Veterans review and check the optional box, we use your results with your name and identifying details removed to test and improve our reviews and as anonymous examples. It is never a condition of a review, and you can withdraw that consent at any time.
Who we share it with
- Service providers that process it for us, under contract and only to provide the service: Cloudflare (hosting and storage), DigitalOcean (processing server) and OpenAI (AI analysis, under a signed HIPAA Business Associate Agreement).
- ClaimScopeLaw LLC, only when you request attorney help (since October 15, 2026, only after you check a separate box allowing it).
- Others only when the law requires it (for example, a valid court order).
We never sell consumer health data, never share it for advertising, and never send it to Google, Meta or any other advertising or analytics service.
Your rights
- Know and access: confirm whether we have your health data, see it, and get the list of third parties and affiliates we've shared it with.
- Delete: delete it, which also deletes it from our service providers' active systems. You can delete a review or your whole account yourself, right away.
- Withdraw consent: for any use that relies on your consent.
- Appeal: if we decline a request, reply to our answer to appeal. We decide within 45 days. If we deny your appeal, you can contact your state attorney general (in Washington, through the Attorney General's online complaint form).
Use our privacy request form (no sign-in needed) or email support@claimscopeveterans.com. We answer within 45 days, and may extend once by 45 more days if we tell you why. We'll confirm it's you, usually with an email link, and won't charge you or treat you differently for asking.
How we protect it
Encryption in transit and at rest, account-separated storage, access limited to the people and services that need it, two-step sign-in for founders, and a log of every time a founder opens a matter.
Contact
support@claimscopeveterans.com · (515) 344-4234 · ClaimScope LLC