Skip to content

Security & privacy

Claim files are sensitive. We treat them that way.

This page describes how Recover actually handles claim documents and contractor records today. It reflects our current practices — not a third-party certification.

Encryption in transit

All uploads and site traffic use TLS. No claim document is ever sent over an unencrypted connection.

Encryption at rest

Documents and claim records are stored with AES-256 encryption on managed cloud infrastructure (Supabase).

Isolated by design

Every claim is protected by row-level security policies enforced by the database on every single request — not just in application code.

Access is logged

Only an authenticated admin account can read claim data or download files. Every access requires sign-in; anonymous visitors cannot read a single claim back.

No model training on your data

Your claim documents are not used to train any AI model. They're used only to review and process your specific claim.

Retention you control

You can request export or deletion of any claim at any time. Deleted claims and their files are removed promptly, not archived indefinitely.

Direct accountability

Recover is currently a small, founder-operated team. There is no large support queue between you and the person responsible for your data.

Vendors

Claim data is hosted on Supabase (database and storage) and Vercel (web hosting) — both SOC 2–audited infrastructure providers. Recover itself does not hold a SOC 2 certification.

What we collect

  • Claim documents you submit — carrier estimates, roof reports, photos, policy pages.
  • Contact info — your name, company, email, and phone number.
  • Basic product usage, used only to operate and improve the intake process.

What we don’t do

  • Sell or rent your data. Ever.
  • Train AI models on your claim files.
  • Share your claim details with other contractors or carriers.
  • Claim certifications we don’t hold.

Questions or concerns

Found something concerning, or have a question about how your data is handled? Reach out directly — no support queue, no runaround.

braydenscuffham2@gmail.com

Have a security or privacy question?

We’ll answer plainly. No sales pitch, no dodging.

Read our story