Privacy Policy

Last updated: June 6, 2026

CoverScore helps small businesses understand how insurable their employee handbook makes them. We collect as little as we can, and we tell you plainly what we keep and how to have it removed.

What we collect

• Your contact email — so we can send your score, your remediation memo, and (if you buy one) your review and receipt.
• Basic business details — your U.S. state, industry, and rough employee count, used to tailor the readiness score.
• Your employee handbook — uploaded to be scored. It is redacted before scoring, so personal and any health-related information is stripped out and never stored with the score.
• Your policy renewal date — optional, only if you share it, to time guidance honestly.
• Your employees’ handbook acknowledgements— if you use our attestation feature to collect employee sign-offs, we store each employee’s name and email, and an immutable record of their electronic acknowledgement (the handbook version and content hash they signed, their typed name, the timestamp, and the IP address and browser they signed from). This is the legal evidence the acknowledgement happened; the electronic-signature flow is built and run by CoverScore in-house (no third-party e-signature provider).
• Anonymous usage identifiers — random IDs and campaign tags (an anonymous ID, a session ID, marketing UTM parameters, and a Google Analytics client ID) that let us measure which channels bring people to CoverScore. These are not your name.

How we use it

To deliver your free score and memo, to provide the $199 EPLI-risk review if you choose it, to time guidance around your renewal, and to measure how people find us so we can improve. We do not sell your data.

Who processes your data (sub-processors)

We rely on a small set of trusted providers to run CoverScore. Each receives only what it needs:

• PostHog — product analytics (how the app is used).
• Google Analytics 4 (GA4) — marketing analytics (how people find us).
• Stripe — payments for the $199 review.
• Resend — sending your transactional emails.
• Neon — our database.
• Graphlit — extracting text from your uploaded handbook.
• Anthropic — the AI that scores the (redacted) handbook.
• Trigger.dev — running the background scoring jobs.
• Vercel — hosting and secure file storage for your upload.

Analytics retention & deletion

PostHog and GA4 receive anonymous identifiers (an anonymous ID and a Google Analytics client ID) and event data — never your name. We retain analytics data only as long as it is useful for measuring acquisition. When you request deletion (below), we also target your records for downstream removal: a person-delete in PostHog keyed to your anonymous ID, and a user-deletion in GA4 keyed to your Google Analytics client ID.

Your right to deletion

You can ask us to delete the personal data we hold about you — your email and the anonymous tracking identifiers tied to you (the anonymous ID, session ID, UTM parameters, and Google Analytics client ID) across your lead and purchase records. To request deletion, use our self-serve deletion page (we’ll email you a secure confirmation link), or email us at hello@coverscore.ai. Note that we keep non-identifying business and purchase records (for example, that a review was bought and later refunded) for accounting and audit integrity, with your personal identifiers removed.

No protected health information

CoverScore is not a health service and does not store protected health information (PHI). Your handbook is redacted before scoring.

Payments

To take payment for the $199 review, our payment processor (Stripe) collects and processes your email and card details directly, on its own secure checkout page and under its own privacy terms. The only information CoverScore attaches to the payment is an opaque business identifier and marketing tags — never your name or other personal details.

Employee acknowledgement records

When a business collects employee handbook acknowledgements through CoverScore, the acknowledgement record is kept as legal evidence for up to four years. If an employee asks to have their data deleted, we remove their routable identity (name, email, and phone) while keeping the non-identifying record that an acknowledgement occurred and which handbook version it covered — the integrity the record exists to prove. A business can export its acknowledgement records at any time, including after a subscription ends, within that retention window.

Questions

Email hello@coverscore.ai and we’ll help.