Euclid Privacy Policy
Last Updated: July 4, 2026
Company: KnowRisk Inc. d/b/a Voltaire, operating the Euclid product ("Euclid," "Voltaire," "we," "us," or "our")
Contact: privacy@euclidqa.com
Mailing Address: 7201 W. Lake Mead Blvd., Suite 108, Las Vegas, NV 89128
This Privacy Policy explains how Euclid collects, uses, discloses, and protects personal information when you visit euclidqa.com, use the Euclid application, interact with our APIs, integrations, support, sales, or marketing, or otherwise communicate with us (collectively, the "Service").
Euclid is a Voltaire product that helps insurance teams review claim files, surface QA flags, triage issues, and maintain review workflows. Claim files may contain personal information about policyholders, insureds, claimants, witnesses, contractors, adjusters, reviewers, and other people.
1. Our Privacy Roles
Euclid handles personal information in two main roles.
1.1 Information We Process for Customers
When a customer, such as an insurer, TPA, independent adjusting firm, or other organization, uploads claim files or uses Euclid in its claims workflow, we generally process that information on behalf of the customer as a service provider, processor, or similar role under applicable privacy laws. We call this "Customer Claim Data."
If your personal information appears in a claim file, the customer using Euclid is usually the organization that decides why and how that information is processed. Please contact that organization directly to exercise privacy rights about claim handling, claim files, policy records, or coverage communications. We will assist the customer as required by our agreement and applicable law.
1.2 Information We Control
We are generally responsible for personal information we collect for our own purposes, such as website visits, account administration, product security, billing, support, sales, marketing, and business operations. We call this "Euclid Account and Business Data."
2. Personal Information We Collect
The categories of personal information we collect depend on how you interact with us.
| Category | Examples | Sources |
|---|---|---|
| Account and profile information | Name, business email, phone number, employer, role, team, login credentials, SSO identifiers, account settings | You, your employer, identity providers |
| Customer Claim Data | Claim numbers, policy numbers, names, addresses, property information, loss details, photographs, estimates, invoices, declarations pages, policy forms, endorsements, general loss reports, notes, correspondence, reviewer comments, QA dispositions, and related claim-file materials | Customers, Authorized Users, integrations, claims systems |
| Workflow and audit information | Findings, confidence grades, accept/dismiss decisions, dismissal reasons, timestamps, reviewer actions, admin actions, role permissions, activity logs | Your use of the Service, customer configurations |
| Integration information | Connected claims systems, document repositories, APIs, import/export settings, tokens, metadata, SSO configuration, webhook information | Customers, Authorized Users, third-party integrations |
| Billing and commercial information | Plan, subscription, invoice information, payment status, billing contact, tax information, transaction records | Customers, Authorized Users, payment processors |
| Support and communications | Messages, demo requests, support tickets, call notes, training requests, feedback, survey responses | You, customers, sales/support tools |
| Device, usage, and log information | IP address, browser type, device identifiers, operating system, pages viewed, referrer, timestamps, clicks, diagnostic logs, security logs, approximate location inferred from IP address | Automatically through the Service |
| Cookies and similar technologies | Session cookies, authentication cookies, preferences, analytics events | Automatically through browsers or devices |
| Marketing information | Event attendance, newsletter preferences, campaign interactions, lead source, business contact details | You, events, partners, public sources |
Customer Claim Data may include sensitive personal information, depending on the claim file. For example, a claim file may include injury details, health information, financial information, precise property location, government identifiers, photographs, or other sensitive details. Customers should upload only the information needed for their authorized use of Euclid.
3. How We Use Personal Information
We use personal information to:
- provide, operate, secure, and maintain the Service;
- create and administer accounts, roles, permissions, SSO, and integrations;
- run claim-file QA sweeps, generate Findings, confidence grades, explanations, reports, and analytics;
- support adjuster, reviewer, admin, and manager workflows;
- process dismissals, corrections, feedback, audit logs, and customer-specific configurations;
- provide onboarding, training, support, troubleshooting, and professional services;
- process subscriptions, invoices, payments, and tax records;
- monitor performance, debug errors, detect abuse, prevent fraud, and protect security;
- improve the Service, develop new features, and evaluate quality using appropriate safeguards;
- communicate about the Service, including administrative messages, security notices, updates, and support responses;
- send marketing communications where permitted and honor opt-out preferences;
- comply with law, legal process, audits, contractual obligations, and regulatory requests;
- enforce our Terms of Service and protect rights, property, and safety.
4. AI Processing and Human Review
Euclid uses automated systems, including AI-assisted analysis, to process claim-file materials and generate QA Findings, confidence grades, explanations, workflow actions, and insights.
Euclid is designed to assist human reviewers. It is not intended to make final claim, coverage, denial, payment, settlement, or legal decisions. Customers and their Authorized Users are responsible for reviewing Findings and making all professional decisions.
We do not use Customer Claim Data in identifiable form to train generalized foundation models or third-party public AI models unless the customer expressly authorizes that use in writing. We may use de-identified, aggregated, or non-identifying operational data to improve reliability, security, performance, and product quality.
We may use third-party cloud, infrastructure, analytics, security, support, and AI service providers to provide the Service. These providers are authorized to process personal information only as needed to provide services to us and are subject to contractual obligations.
Our personnel may access Customer Claim Data only as needed to provide support, troubleshoot issues, maintain security, comply with law, perform customer-authorized professional services, or as otherwise permitted by customer agreement.
5. How We Disclose Personal Information
We may disclose personal information as follows:
| Recipient | Purpose |
|---|---|
| Customer organization and Authorized Users | To provide customer workspaces, role-based access, QA workflows, reports, audit logs, and collaboration features |
| Service providers and subprocessors | Hosting, infrastructure, AI processing, storage, security, logging, support, analytics, billing, communications, and professional services |
| Customer-authorized integrations | Claims management systems, document repositories, identity providers, APIs, exports, and other connected tools |
| Professional advisors | Legal, accounting, insurance, audit, and compliance support |
| Legal and safety recipients | To comply with law, legal process, regulator requests, subpoenas, court orders, or to protect rights, safety, and security |
| Business transfer recipients | In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets |
| Affiliates | To operate, support, and improve the Service and our business |
| Others with consent or direction | When the customer, account administrator, or individual directs or authorizes disclosure |
| Aggregated or de-identified recipients | For analytics, benchmarking, product improvement, business reporting, or research, where individuals and customers are not identified |
We do not sell Customer Claim Data. We do not share Customer Claim Data for cross-context behavioral advertising.
6. Cookies and Similar Technologies
We use cookies and similar technologies to operate the website and application, keep users signed in, remember preferences, secure accounts, understand usage, and improve performance.
Types of cookies may include:
- Essential cookies: required for login, security, routing, and core functionality.
- Preference cookies: remember settings and user choices.
- Analytics cookies: help us understand website and product usage.
- Marketing cookies: may be used on public pages to measure campaigns, where permitted by law.
You can control cookies through browser settings. Disabling essential cookies may prevent the Service from working. Where legally required, we will provide additional cookie choices or consent tools.
We do not currently respond to browser "Do Not Track" signals. Where required by law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, for applicable website activities.
7. Data Retention
We retain personal information for as long as needed to provide the Service, maintain accounts, comply with contracts, resolve disputes, enforce agreements, comply with legal obligations, preserve security, and maintain legitimate business records.
Customer Claim Data is retained according to the customer's agreement, product settings, documented retention instructions, or applicable law. If no specific retention period is agreed, we may retain Customer Claim Data during the subscription term and for a limited period after termination to permit export, followed by deletion from active systems and later deletion from backups according to standard backup cycles.
We may retain audit logs, security logs, billing records, de-identified data, aggregated data, and legal records for longer periods where needed for security, compliance, accounting, dispute resolution, or legitimate business purposes.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. Safeguards may include access controls, role-based permissions, encryption, logging, monitoring, secure development practices, vendor review, and incident response procedures.
No system is perfectly secure. Customers are responsible for managing Authorized Users, roles, permissions, SSO settings, integrations, endpoint security, and the information they choose to upload.
9. International Data Transfers
We are based in the United States and may process personal information in the United States and other countries where we or our service providers operate. Those countries may have data protection laws different from those in your location.
Where required, we use appropriate safeguards for international transfers, such as contractual commitments, standard contractual clauses, data processing agreements, or other lawful mechanisms.
10. Your Privacy Choices and Rights
Depending on your location and relationship with us, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, appeal of a privacy decision, or opt out of certain processing such as sale, sharing, targeted advertising, or certain profiling.
To exercise rights for Euclid Account and Business Data, contact privacy@euclidqa.com. We may need to verify your identity and authority before responding.
If your request relates to Customer Claim Data in a claim file, we may direct you to the customer that controls the claim file, or we may forward or support your request as required by our agreement with that customer and applicable law.
We will not discriminate against you for exercising privacy rights.
11. U.S. State Privacy Notice
This section provides additional information for residents of U.S. states with comprehensive privacy laws, including California, where applicable.
11.1 Categories Collected, Used, and Disclosed
In the past 12 months, we may have collected and disclosed the following categories of personal information for the purposes described in this Policy.
| Category | Examples | Disclosed To |
|---|---|---|
| Identifiers | Name, email, phone, IP address, account ID, claim identifiers, policy identifiers | Service providers, customer organizations, integrations, legal/safety recipients |
| Customer records information | Business contact details, billing details, claim-file records, property information | Service providers, customer organizations, integrations, legal/safety recipients |
| Commercial information | Subscription details, invoices, product usage, support history | Service providers, affiliates, professional advisors |
| Internet or network activity | Logs, device data, browser data, usage events, authentication events | Service providers, security tools, analytics providers |
| Geolocation data | Approximate location from IP address; property locations in claim files | Service providers, customer organizations, integrations |
| Sensory information | Claim photographs, uploaded images, support call recordings if used | Service providers, customer organizations, integrations |
| Professional or employment information | Employer, role, permissions, team, adjuster/reviewer/admin status | Service providers, customer organizations |
| Inferences | Product analytics, workflow insights, usage trends, QA insights, confidence grades | Customer organizations, service providers |
| Sensitive personal information | Account login credentials; claim-file information that may include health, injury, financial, property, government ID, or other sensitive details | Service providers, customer organizations, integrations, legal/safety recipients |
11.2 Sale, Sharing, and Targeted Advertising
We do not sell personal information for money. We do not sell Customer Claim Data. We do not share Customer Claim Data for cross-context behavioral advertising or targeted advertising.
We do not use or disclose sensitive personal information to infer characteristics for unrelated purposes. We use sensitive personal information only to provide the Service, secure the Service, comply with law, and perform customer-authorized processing.
If our public website later uses advertising cookies or similar technologies that are considered a "sale," "sharing," or targeted advertising under applicable law, we will provide the required opt-out mechanism.
11.3 California Rights
California residents may have rights to know/access, delete, correct, obtain a copy, opt out of sale or sharing, limit certain uses of sensitive personal information, and be free from discrimination for exercising rights. To exercise rights for Euclid Account and Business Data, contact privacy@euclidqa.com.
11.4 Authorized Agents and Appeals
Where permitted by law, you may use an authorized agent to submit a request. We may require proof of authorization and identity verification. If your request is denied and your state provides an appeal right, you may appeal by replying to our response or emailing privacy@euclidqa.com with "Privacy Appeal" in the subject line.
12. EEA, UK, and Switzerland Notice
If you are in the European Economic Area, United Kingdom, or Switzerland, the following additional information may apply.
12.1 Legal Bases
For Euclid Account and Business Data, we may rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Provide the Service and administer accounts | Contract performance or legitimate interests |
| Secure, debug, and improve the Service | Legitimate interests |
| Billing and business records | Contract performance and legal obligations |
| Support, demos, and customer communications | Contract performance, legitimate interests, or consent |
| Marketing | Consent or legitimate interests, depending on context and law |
| Compliance and legal requests | Legal obligations and legitimate interests |
For Customer Claim Data, the customer generally determines the legal basis. We process that data as a processor or service provider under the customer's instructions.
12.2 Rights
You may have rights to access, rectify, erase, restrict, port, object, withdraw consent, and lodge a complaint with a supervisory authority. If your request relates to Customer Claim Data, please contact the customer responsible for the claim file.
12.3 Automated Decision-Making
Euclid generates QA Findings and workflow recommendations for human review. We do not intend for Euclid to make solely automated decisions that produce legal or similarly significant effects on individuals. Customers are responsible for ensuring that their use of the Service includes appropriate human review.
13. Canada Notice
If Canadian privacy law applies, you may have rights to request access to and correction of personal information, withdraw consent where processing is based on consent, and ask questions or make complaints about our privacy practices. Contact privacy@euclidqa.com. If your request relates to Customer Claim Data, we may direct you to the customer responsible for the claim file.
14. Sector-Specific Data
Claim files may include information subject to insurance privacy laws, GLBA, state claims regulations, litigation holds, confidentiality obligations, or other sector-specific requirements. Customers are responsible for determining whether those laws apply to their claim files and for using Euclid consistently with their obligations.
Do not submit protected health information subject to HIPAA unless the customer and Voltaire have signed a business associate agreement. If a business associate agreement, data processing addendum, or other privacy agreement applies, that agreement controls for its subject matter.
15. Children's Privacy
The Service is intended for business use and is not directed to children. We do not knowingly collect Euclid Account and Business Data directly from children under 13. Customer Claim Data may include information about minors if included in a claim file by a customer. In that case, we process the information on behalf of the customer.
16. De-Identified and Aggregated Data
We may create and use de-identified or aggregated data for analytics, benchmarking, security, product improvement, reporting, and research. We will not attempt to re-identify de-identified data except to test whether de-identification is effective or as permitted by law.
17. Changes to This Policy
We may update this Privacy Policy from time to time. The updated policy will be posted with a new "Last Updated" date. If changes are material, we will provide additional notice where required, such as through the Service or by email.
18. Contact Us
Questions or requests about this Privacy Policy may be sent to:
KnowRisk Inc. d/b/a Voltaire — Euclid Privacy
7201 W. Lake Mead Blvd., Suite 108
Las Vegas, NV 89128
privacy@euclidqa.com