Privacy policy
DRAFT, for review. This document has not yet been reviewed by a lawyer. The final version will be published here before launch.
Last updated: 4 September 2026
1Who is responsible for your data
ClaimDesk is operated by Dirivian B.V. (KvK 99092727), Science Park 608, Unit A.08, 1098 XH Amsterdam, Netherlands. Dirivian B.V. is the controller of the personal data described in this policy. Contact: support@claimdesk.me (to be confirmed).
2What we collect
We keep the list short on purpose:
- Account data: your email address, your name if you sign in with Google, and sign-in session records.
- Uploaded reports: the courier and marketplace files you upload (for example a Shiprocket weight discrepancy export or an Amazon settlement report), and the rows and claims we derive from them: order and shipment identifiers such as AWB numbers and order IDs, weights, dates, and amounts.
- Payment records: what you bought, when, for how much, and the payment identifiers Dodo Payments gives us. Card and UPI details stay with Dodo Payments and never reach us.
- Usage data: product analytics events and error logs, so we can fix what breaks.
3What we deliberately never store
Provider exports sometimes include your buyers’ personal details. We do not need them and we do not want them. Buyer names and buyer addresses are dropped at ingestion and never stored, neither in your raw file’s processed rows nor in any derived record. We also do not sell personal data, and we do not use your uploaded data to train any model.
4Where your data lives
Uploaded files and derived data are stored on Google Cloud in the asia-south1 region (Mumbai, India), close to where most of our users are. The controller, Dirivian B.V., is based in the European Union. Files are stored in private storage; nothing you upload is ever publicly accessible.
5How long we keep it
Your uploaded files and everything derived from them are retained until you delete your account, so that your history (including expired claims) stays available to you.
When you use the Delete my account and all data button in settings, your account is deactivated immediately and your files, uploads, claims, and reports are hard-deleted within 24 hours. We keep only what we are legally required to keep, such as payment records for tax and accounting purposes, and a minimal log entry recording that the deletion happened.
6Who processes data for us
We use a small set of service providers, each for a specific job:
| Processor | What it does for us |
|---|---|
| Google Cloud | Hosting, database, and file storage. Your uploads and derived data are stored in the asia-south1 region (Mumbai, India). |
| Postmark | Transactional email: sign-in links, report notifications, deadline alerts, receipts, and the weekly digest. |
| PostHog (EU cloud) | Product analytics and session replay so we can see where the product confuses people. Session replay masks all inputs and data cells by default; your uploaded numbers are not visible in replays. |
| Dodo Payments | Payment processing as merchant of record. Dodo receives the details needed to take your payment; we never see or store your card or UPI credentials. |
| Anthropic | Column-name mapping only. When a file's column headers are unfamiliar, we send the headers plus at most 5 sample rows to Anthropic's API to propose which column is which. Full files are never sent, and no model output is ever used to compute an amount or a deadline. |
7Your rights
Under the EU General Data Protection Regulation (GDPR), and in the same spirit under India’s Digital Personal Data Protection Act (DPDP), you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted; the in-app deletion button is the fastest way, and it removes everything within 24 hours;
- receive a copy of your data in a usable format;
- object to or restrict certain processing.
To exercise any of these, email support@claimdesk.me (to be confirmed). If you are in the EU you can also complain to your local data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
8Cookies
We use two kinds of cookies and similar storage:
- Session cookies that keep you signed in. The service does not work without them.
- Analytics cookies (PostHog) that help us understand how the product is used and where it fails.
We do not use advertising or cross-site tracking cookies.
9Changes and contact
If we change this policy in a way that matters, we will notify you by email or in the product before the change takes effect. Questions about privacy: support@claimdesk.me (to be confirmed). See also our terms of service.