Privacy Policy
The short version:your denial is your business. This site is built to minimize collection, keep the appeal builder local-first, and make the optional workspace’s encryption choices explicit.
Anonymous and local-first by default.The public research tools, denial explainer, appeal builder, and local workspace can be used without an account. Wizard answers are saved in your browser (localStorage), not in a Coverage Rights database. You can clear them from the product or by clearing this site’s browser storage.
What rides with your payment. When you check out, only your structured routing selections — plan/program, insurer, regulating state, denial category, employer and funding type, drug benefit channel, regulator marker and source, appeal stage, current care status, expedited flag, and any filing deadline you enter — are included in the secure Stripe checkout session, so we can recover your purchase if your browser loses its data. Medical narrative, records, and the generated letter are not attached to the payment.
The sensitive details you type stay with you. The specific service that was denied, your prior treatment history, whether your doctor supports the treatment, and your personal impact statement stay in your browser and are sent only to generate your letter. They are never attached to your payment. Coverage Rights processes the generation request in memory and does not persist the generated letter on its servers.
Denial text, letter generation, and AI processing.If you paste denial-letter text for automatic reading, that text is sent to our AI provider, Anthropic, for the request. If you buy and generate an appeal, the private narrative you enter and the sourced route context are also sent to Anthropic to draft the letter. Coverage Rights processes the responses in memory and does not persist the pasted text or generated letter on its servers. If automatic reading is unavailable, pasted text does not leave the page. Review Anthropic’s service terms for its role as the processing provider.
Optional workspace sync. An anonymous workspace stays in the local browser. If you sign in and turn on sync, the matter is copied to Coverage Rights in encrypted form so it can be opened on another device. In Standard mode, Coverage Rights holds the key needed to reopen the matter and can technically decrypt it to operate the service. In Extra-private mode, the key comes from a passphrase that Coverage Rights does not receive or retain; we cannot read or recover that matter if the passphrase is lost.
Attached documents stay on this device.Document attachment is live today. File bytes are encrypted in the browser and stored in that browser’s IndexedDB; filenames and related metadata are also encrypted locally. Attached files are not uploaded or included in workspace sync. Clearing browser storage or losing the device can remove the only copy, so keep the originals elsewhere.
What we do keep. We use Google Analytics on our public content pages for aggregate traffic (which denial reasons and plan types people look up) so we know what to build next. Google sets a cookie and processes your IP address and the public page URL, so this is pseudonymous rather than fully anonymous. We deliberately do not load analytics on the appeal builder, letter page, or private workspace, and we switch analytics collection off for as long as you are on those pages, so the details you enter there are not exposed to that script. We do not send names, diagnoses, document contents, or generated letter text to analytics.
Payments. Stripe processes payments; we never see your card number. Payment records are kept as required for accounting and refunds.
Email. If you request a route summary, its email contains the coverage program and route, denial category, insurer if selected, deadline, filing recipient, appeal grounds, and public source links. It does not include your medical narrative, diagnosis, denied-service description, records, or generated letter. We use your address for the requested message and any reminders you explicitly choose. Unsubscribe anytime.
Questions or deletion requests: privacy@coverage-rights.com
EFFECTIVE JULY 2026 · LAST UPDATED AUGUST 4, 2026