Signal Cover Privacy Policy

What we collect and why

We collect your email address and account details to sign you in and secure your account. If you choose to upload insurance documents, we keep the original PDFs, extracted text, policy information and summaries so you can view your cover and ask questions. We record your consent to document analysis. We process technical information needed to operate, secure and troubleshoot the service. We do not sell your personal information.

Uploading a document is optional. Without an account we cannot provide the service; without consent to analysis we cannot analyse your documents or answer policy questions.

AI analysis and international processing

We use Anthropic's Claude API to summarise your policy and answer your questions. We send extracted document text and your question to Anthropic in the United States. We use your uploaded documents to answer your questions, not information from the open internet. Our app's current analysis code replaces recognised South African ID numbers, bank account numbers and payment-card numbers before sending text for analysis; automated redaction may miss unusual formats, so please upload only documents you are comfortable having processed in this way. The original PDF and extracted text remain in your private account. Passwords used to unlock PDFs are not saved or sent to Anthropic.

Anthropic states that commercial API inputs and outputs are not used for model training by default. Its standard API retention is up to 30 days, with stated exceptions for legal and policy enforcement purposes. See Anthropic's training policy and retention policy.

Service providers and locations

Our account, database and application services run through Supabase components hosted on Railway in the United States (US West). Uploaded files are held in private storage. Database backups are stored in a private S3-compatible bucket in San Jose, United States. Resend processes your email address to deliver sign-in and account emails. Cloudflare hosts this website and routes messages sent to our signalcover.co.za email addresses. Apple processes information under its own terms when you use TestFlight or the App Store. Some processing therefore takes place outside South Africa.

Retention and deletion

We keep your account and policy content while your account is active, until you remove a document or delete your account. Deleting your account removes active account records and uploaded policy files. The app does not currently delete inactive accounts automatically. Questions and answers are kept in the current app session, rather than saved as a server-side chat history. We remove abandoned uploads through a scheduled cleanup process.

Our own database backup schedule keeps seven daily copies and five weekly copies, so deleted data can remain in those rolling backups for approximately five weeks. Provider copies, operational logs and email records may be retained separately under the provider's applicable retention and legal obligations. We do not currently promise that every backup copy is gone within 30 days. If we change that schedule, we will update this notice.

Your choices and rights

You can delete a document, a policy group or your account in the app. To request access, correction or deletion, object to processing, or withdraw consent, email privacy@signalcover.co.za. We may need to verify your identity. Withdrawing consent stops future document analysis but does not undo processing already completed; you can also delete your documents or account. We will respond in line with South African law.

If you cannot sign in to delete your account, contact support@signalcover.co.za from your account email address.

Security and questions

Policy files are stored privately, and account access is checked before policy information is returned. We use encrypted connections for data in transit. If you have a privacy concern, contact privacy@signalcover.co.za. You may also lodge a complaint with the Information Regulator of South Africa.