Privacy Policy

This policy describes how VeteransInsights handles information through the Claim Assistant website and medical-record review service. It covers veterans, representatives, organizational contacts, and website visitors. Medical records, website enquiries, and website security records follow different handling paths, described below.

Your medical records stay in an isolated AWS GovCloud environment. Only authorized representatives can access your medical records. We do not download medical-record personally identifiable information (PII) to staff devices or copy it into public website systems. Each medical record is retained for 90 days from when it is first received, then deleted.

Records are used to organize evidence, connect findings to source documents, and support readiness review. Veteran data is not sold, rented, licensed, or monetized. See Information Handling for the record workflow and Security for the safeguards.

When you contact us, we receive the details you submit, such as your name, email, optional phone number, audience or role, organization, and message. These contact details are personal information. We use these details to respond and arrange the conversation you requested. Submissions can also include the source page and browser information.

Website enquiries are stored through our website service provider, Supabase. Configured notification services may receive an enquiry so our team can respond. These public website forms are separate from the isolated medical-record environment. Please do not include medical records or sensitive identifiers.

The website uses first-party cookies to recognize a browser, maintain a visit, and support access controls. Website security records can include pages visited, IP address, browser and device information, referring page, approximate location supplied with the request, and authentication status. We use these records to monitor access and investigate misuse.

• A browser identifier cookie can last up to one year.
• A visit cookie lasts 30 minutes and refreshes as you browse.
• When the site access gate is enabled, its access cookie lasts up to 12 hours.

You can clear or block cookies through your browser. Blocking access cookies may prevent protected areas from working. The website does not use these records for advertising or cross-site tracking.

Access to medical records is restricted to authorized representatives within the isolated GovCloud environment. Website enquiries and security records are handled by authorized team members and service providers supporting those website functions. Protected sign-in areas may use an authentication provider.

Website providers may use the information they receive only to deliver the website functions described here, under appropriate access and confidentiality restrictions. Medical records must not be sent to enquiry or notification providers.

Submitting an enquiry does not authorize medical-record access. Use the appropriate representative and record-access process for that purpose.

Each medical record is retained for 90 days from when it is first received, then deleted. The period does not restart when a record is viewed or analyzed again. See the retention details. Website cookie lifetimes are listed above; a cookie’s expiry does not itself delete a stored enquiry or security record.

Website enquiries are kept only as long as needed to respond to and manage the requested conversation. Website security records are kept only as long as needed to protect access and investigate misuse. Neither is a place to retain medical-record content.

You can contact our team to ask about information held about you, request a correction or deletion, or ask about the retention of an enquiry or website security record. We may need to verify your identity or authority before discussing or changing records. Do not send sensitive identifiers through the initial contact form.

Contact VeteransInsights through our contact page with privacy questions. Changes to this policy will be shown here with an updated date.