Legal
Privacy Notice
Last updated: 2026-05-12 · Site: claimworksusa.com
This is the privacy notice for ClaimWorks USA, operated by the sole tradership trading as VBFactory.
What data the Operator collects
Intake data. The information you share during the conversation: your name, contact details, work history, employer information, injury details, dates, medical context, wage information, social security number if you choose to share it, and similar information needed for the attorney to evaluate your claim.
Conversation data. The full text of your conversation with the AI agent, with timestamps.
Document data. Any documents you upload (medical records, payslips, work contracts, etc.).
Technical data. IP address, browser type, timestamps, and similar operational telemetry.
Why the Operator collects it
To provide the intake service.
To share with the US-licensed attorney so they can evaluate your case.
To meet legal record-keeping obligations.
To investigate problems with the service, to detect fraud, and to prevent abuse.
Lawful basis (where Portuguese or EU law applies)
For intake data and conversation data: performance of the intake service you requested.
For technical data and security logs: legitimate interests in keeping the service running safely.
For sharing data with the attorney: the attorney needs this data to do the legal work; you provide consent to this sharing as part of starting intake.
Who the Operator shares data with
The US-licensed attorney evaluating your case. This is the core sharing. Without this, the service does not work.
Sub-processors used to run the service:
| Sub-processor | What they do |
|---|---|
| Anthropic | LLM API for the AI agent |
| Render | Application hosting and database |
| Cloudflare R2 | Encrypted document storage |
| SendGrid | Transactional email |
The Operator does not sell your data. The Operator may share data with law enforcement when legally required.
How long the Operator keeps your data
While your case is active, plus the period required by attorney record-keeping rules in the relevant US state (typically 7 years after the case closes).
After that, the data is deleted unless retention is required by Portuguese or US law.
You can ask for deletion at any time. If your case is active with the attorney, the attorney's rules on file retention will apply to the part of the data the attorney holds.
Your rights
You can:
- Ask for a copy of the data the Operator holds about you
- Ask the Operator to correct mistakes
- Ask the Operator to delete data, subject to legal retention rules and to the attorney's file
- Restrict or object to specific processing
- Withdraw any consent you gave
The Operator responds within 30 days.
If you are based in California, Texas, or another US state with specific privacy laws, you have additional rights under those laws. Ask the Operator and the Operator will help.
If you are in the EU or UK, you can complain to the Portuguese data protection authority (CNPD, www.cnpd.pt) or to the data protection authority in your country.
Security
The Operator uses encryption in transit and at rest, access controls, and logs. No system is perfect. The Operator works to keep the service secure and to investigate any incidents promptly.
Cookies
The site uses essential cookies to keep your session going. Optional analytics cookies require your consent through the banner on the site.
Contact for privacy
legal@vbfactory.co. Mark privacy requests with "Privacy" in the subject line for fastest handling.
See also the full Terms of Service.