Privacy Policy

Last Updated: November 26, 2025

1. Introduction

TrueShot is a photo verification service operated by Rial Labs, Inc. ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use TrueShot to submit photos for insurance claims.

This policy applies to:

• Claimants: Individuals who receive SMS links to submit photos for insurance claims
• Insurance Adjusters: Professionals who use the TrueShot dashboard to manage photo requests

2. Information We Collect

2.1 From Claimants (Photo Submitters)

When you submit photos through a TrueShot link, we collect:

• Photos: Images you capture and submit for your insurance claim
• Photo Metadata: Date/time of capture, GPS location (if enabled on your device), and device information
• Verification Data: Cryptographic proofs that confirm when and where photos were taken

2.2 From Insurance Adjusters

When you use the TrueShot dashboard, we collect:

• Account Information: Name, email address, company affiliation
• Authentication Data: Login credentials (encrypted)
• Usage Data: Actions taken in the dashboard, photo requests created

2.3 Automatically Collected Information

• Device type and operating system
• Browser type (for web access)
• IP address
• Access timestamps

3. How We Use Your Information

3.1 Primary Purposes

• Process Claims: Deliver your photos to the insurance company handling your claim
• Verify Authenticity: Generate cryptographic proofs that photos are genuine and unaltered
• Prevent Fraud: Detect potential manipulation or tampering with submitted photos
• Provide Service: Enable adjusters to manage photo requests and review submissions

3.2 Secondary Purposes

• Improve our verification technology
• Maintain security and prevent abuse
• Comply with legal obligations
• Communicate service updates (adjusters only)

4. How We Protect Your Information

4.1 Security Measures

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Secure Storage: Photos are stored in encrypted cloud storage with access controls
• Access Limits: Only authorized insurance personnel can view your photos
• Audit Logging: All access to photos and data is logged

4.2 Zero-Knowledge Verification

Our verification system uses cryptographic techniques that can prove photo authenticity without exposing unnecessary information. This means:

• Verification data does not contain the actual image content
• Proofs can confirm authenticity without revealing personal details
• Your photos remain private to you and your insurance company

5. Who We Share Information With

5.1 Insurance Companies

Your photos and verification data are shared with the insurance company processing your claim. This is the primary purpose of the service.

5.2 Service Providers

We use trusted third parties to operate our service:

• Cloud Hosting: Google Cloud Platform (data storage and processing)
• SMS Delivery: ClickSend (to send you the photo submission link)
• Authentication: Firebase (secure login for adjusters)

5.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect rights, safety, or property.

5.4 We Do NOT

• Sell your personal information to third parties
• Use your photos for advertising
• Share your information with unrelated businesses

6. Data Retention

6.1 How Long We Keep Data

• Photos and Claims Data: Retained for 7 years (standard insurance record-keeping requirement)
• Verification Proofs: Retained for 7 years
• Adjuster Account Data: Duration of account plus 1 year
• Access Logs: 2 years

6.2 Deletion

After the retention period, data is securely deleted. You may request earlier deletion, subject to legal and regulatory requirements that may require us to retain certain records.

7. Your Rights

7.1 Access and Portability

You have the right to:

• Request a copy of the photos and data you submitted
• Know what information we have about you
• Receive your data in a portable format

7.2 Correction and Deletion

You can request:

• Correction of inaccurate information
• Deletion of your data (subject to retention requirements)

7.3 California Residents (CCPA)

California residents have additional rights:

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

7.4 European Residents (GDPR)

EU/EEA residents have additional rights under GDPR:

• Right to access, rectification, and erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

8. Children's Privacy

TrueShot is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. SMS Communications

When your insurance company creates a photo request, you will receive an SMS message with a link to submit photos. By using the link:

• You consent to receive this SMS for claim processing purposes
• Standard message and data rates from your carrier may apply
• This is a one-time message per photo request (not a subscription)

10. Cookies and Tracking

The TrueShot web interface uses:

• Essential Cookies: Required for the service to function (session management)
• Analytics: Anonymous usage statistics to improve the service

We do not use advertising cookies or cross-site tracking.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through:

• Notice on the TrueShot website
• Email notification (for registered adjusters)

Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights:

• Email: privacy@riallabs.com
• Subject Line: "TrueShot Privacy Request"

We will respond to requests within 30 days.

---