Last updated: 7 April 2026
Data controller: Scintillation Research and Analytics Services Pvt. Ltd. (Scintillation Research), Mohali, Punjab, India
This policy explains what personal data ClaimHit collects, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable data protection laws. We are committed to processing your data lawfully, fairly, and transparently.
ClaimHit is operated by Scintillation Research and Analytics Services Pvt. Ltd. (Scintillation Research), a company registered in India with its principal place of business in Mohali, Punjab, India ("we", "us", "our"). We are the data controller for personal data processed through claimhit.com and the ClaimHit Live application.
For privacy-related questions or to exercise your rights, contact us at: privacy@claimhit.com
When you create a ClaimHit account, we collect:
When you use ClaimHit, we collect:
When you submit an Expert Review request, we additionally collect:
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing the ClaimHit service | Account data, usage data | Contract (Art. 6(1)(b)) — necessary to deliver the service you signed up for |
| Processing expert review requests | Account data, contact data, request details | Contract (Art. 6(1)(b)) — necessary to fulfil your order |
| Processing payments | Email, transaction amounts | Contract (Art. 6(1)(b)) — necessary for billing |
| Sending service emails (alerts, monitoring updates) | Email, search results | Contract (Art. 6(1)(b)) — part of the monitoring service you purchased |
| Improving our AI models and search quality | Aggregated, anonymised search patterns | Legitimate interests (Art. 6(1)(f)) — improving service quality |
| Analytics and usage statistics | Technical data via Google Analytics | Consent (Art. 6(1)(a)) — collected only after cookie consent |
| Security and fraud prevention | IP address, session data | Legitimate interests (Art. 6(1)(f)) — protecting our platform and users |
| Legal compliance | Account data, transaction records | Legal obligation (Art. 6(1)(c)) — tax and regulatory requirements |
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Until account deletion + 30 days | Service provision |
| Search results | Until account deletion | Service feature (history access) |
| Expert review orders | 7 years after delivery | Legal obligation (tax, contract records) |
| Transaction records | 7 years | Tax and accounting requirements |
| Analytics data | 14 months (Google Analytics default) | Aggregated, anonymised |
| Security logs | 90 days | Security and fraud prevention |
We do not sell your personal data. We share data only with the processors necessary to operate the service:
| Processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Supabase Inc. | Database and authentication | US (AWS us-east-1) | Standard Contractual Clauses, DPA signed |
| Vercel Inc. | Application hosting and CDN | US / Global edge | Standard Contractual Clauses, DPA available |
| Anthropic PBC | AI inference (Claude) | US | Zero data retention policy on API calls |
| OpenAI LLC | AI inference (GPT-4o) | US | API data not used for training by default |
| Google LLC | AI inference (Gemini) + Analytics | US / Global | Standard Contractual Clauses |
| Perplexity AI Inc. | AI inference (Sonar Pro) | US | API terms apply |
| PayU India Pvt. Ltd. | Payment processing | India | PCI DSS compliant |
| Crisp IM SARL | Customer support chat | France (EU) | GDPR compliant processor |
Patent data entered into ClaimHit (patent numbers and the results returned) is transmitted to AI providers for processing. Patent numbers are public information. We do not transmit your account identity to AI providers — searches are anonymous at the API level.
We use the following cookies:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| sb-auth-token | Essential | Authentication session | Session |
| claimhit-consent | Essential | Stores your cookie consent choice | 12 months |
| _ga, _ga_* | Analytics | Google Analytics 4 usage statistics | 14 months |
| crisp-client/* | Functional | Support chat session | Session / 6 months |
Analytics and functional cookies are only set after you provide consent via our cookie banner. Essential cookies are set automatically as they are necessary for the service to function.
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights:
To exercise any of these rights, email privacy@claimhit.com. We will respond within 30 days. We may request identity verification before fulfilling a request.
ClaimHit is operated from India and uses infrastructure providers based primarily in the United States. If you are located in the EU or UK, your personal data will be transferred to countries that may not provide the same level of data protection as your home country.
We rely on the following transfer mechanisms:
We implement appropriate technical and organisational measures to protect your personal data, including:
For full details of our security practices, see our Security page.
ClaimHit is a professional tool intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, contact us at privacy@claimhit.com and we will delete it promptly.
We will update this policy from time to time as our practices change or as required by law. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page. Your continued use of ClaimHit after notification constitutes acceptance of the updated policy.
For any privacy-related questions, data subject requests, or concerns:
We aim to respond to all privacy enquiries within 5 business days and all formal data subject requests within 30 days as required by GDPR.
© 2026 Scintillation Research and Analytics Services Pvt. Ltd. (Scintillation Research)