Privacy Policy
Last updated: March 2026
1. What We Collect
| Data | Purpose |
|---|---|
| Email address | Account identity, authentication via magic links, email delivery |
| Trip details | Coverage analysis (destinations, dates, costs, travelers) |
| Coverage sources | Gap analysis (credit cards, insurance policies you provide) |
| Conversation history | Continuity across chat sessions with our AI assistant |
| Booking confirmation emails | Automated trip extraction when forwarded to ask@wellcovered.ai |
2. How We Process Your Data
- Coverage analysis: Your trip and coverage data is processed by our AI (Anthropic Claude) and deterministic coverage engine to identify what you're covered for and what gaps exist.
- Proactive alerts: If you enroll with your email, we monitor your coverage windows and send alerts before deadlines expire.
- Chat: Conversation messages are stored so context carries across sessions. Your profile and trip data is included in chat context.
3. Data Processors
Your data is processed by these third-party services:
- Anthropic — AI analysis of trip details and chat responses
- Supabase — database storage (PostgreSQL)
- Postmark — transactional email delivery
- Upstash — session token storage (Redis)
- Langfuse — service quality monitoring and observability
- Vercel — application hosting and edge functions
4. Data Sharing
We do not sell your data. Your information is only shared with the third-party processors listed above, solely for the purpose of operating WellCovered.
If you click an affiliate link to compare insurance policies, the insurance comparison service will receive your trip parameters (dates, destination, cost) as URL parameters. This does not include your email address or personal information.
5. Cookies & Tracking
WellCovered uses a single session cookie to maintain your authenticated session. We do not use tracking cookies, analytics pixels, or third-party advertising trackers.
6. Data Retention
Your account data, trip history, and conversation history are retained as long as your account exists. Magic link tokens expire after 30 days and are automatically cleaned up.
7. Your Rights
You can request:
- Access — a copy of all data we hold about you
- Deletion — permanent removal of your account and all associated data
- Correction — updates to inaccurate information
To exercise any of these rights, email ask@wellcovered.ai.
8. Security
We protect your data with encrypted connections (TLS), secure authentication (magic links, no passwords), and access controls on our database and infrastructure. We do not store passwords because we don't use them.
9. Changes
We may update this policy as our service evolves. Material changes will be communicated via email to enrolled users.
10. Contact
Privacy questions? Email ask@wellcovered.ai.