Privacy Policy

This Privacy Policy ("Policy") applies to users of the Oyster mobile app and visitors to oysterclaim.com (the "Service"). It does not apply to third-party settlement administrator websites or partner law-firm intake pages you open from the app—those sites have their own policies.

Oyster is operated by an independent sole proprietor in Alberta, Canada. Use of the Service is also governed by our Terms of Service at https://oysterclaim.com/terms.

Oyster is a local-first application. Your profile, vault, claims queue, and Gmail-derived indexes stay on your device unless you choose to submit information on an official settlement or partner intake site.

No data selling. Data stays on your device.

On your device (not uploaded to Oyster as inbox or vault blobs):

• Profile information: name, email, phone, mailing address
• Vault data: claim IDs, PINs, account numbers, VIN, and other filing details you save for autofill
• Claims queue, filing status, and payout tracking you manage in the app
• Gmail-derived indexes when enabled: settlement notice signals, purchase-receipt metadata, evidence catalog entries, and tier hints—processed on the phone, not mirrored to a centralized Oyster inbox
• Optional files you download from Gmail evidence (for example PDF notices) saved in your device storage when you tap Download

Sensitive vault and profile fields use AES-256 platform-backed secure storage on supported devices.

Website (oysterclaim.com):

We do not use third-party advertising trackers, retargeting pixels, cross-site tracking cookies, or product analytics SDKs on the public website. We do not profile visitors for marketing. Standard infrastructure and hosting (for example, your browser request reaching our servers) may create minimal server or edge logs for security and reliability only—not for ad targeting. Donations on the optional contribution page are processed by Stripe under Stripe’s own terms; we do not add separate marketing trackers to that experience.

Stripe (optional):

If you choose to donate, payment is processed by Stripe. We do not store payment card details on Oyster servers.

If you connect Google, we request read-only Gmail access (https://www.googleapis.com/auth/gmail.readonly). Gmail scanning runs on your device. Raw message bodies are not uploaded to Oyster servers for storage or resale. The OAuth refresh token is stored locally on your device.

We use Gmail access only to detect settlement-related notices, claim and notice identifiers, purchase receipts when available, payout-related emails, and similar claim-opportunity signals. We do not send, modify, or delete email. We do not use Gmail data for advertising, profiling, or machine learning. Disconnecting Gmail in the app removes Gmail-derived indexes from device storage as part of that flow.

Some builds may use a short-lived server helper only to complete Google OAuth (code exchange or token refresh). That process does not upload your mailbox to Oyster.

Google API Limited Use Disclosure: Oyster's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you use breach-check features, Oyster checks your email against data-breach records using privacy-preserving techniques (such as anonymized hashing). Your raw email address is not stored by Oyster for that purpose.

• We do not sell personal data
• We do not share data with advertisers or data brokers
• We do not use third-party marketing or advertising trackers on oysterclaim.com
• We do not store your profile, vault, or claims queue in a centralized Oyster claims database
• We do not charge a percentage of your settlement or arbitration recovery
• We do not require an account to use core app features
• We do not collect precise location data

Oyster complies with applicable privacy laws including PIPEDA (Canada) and CCPA (California), where they apply.

We share data only with:

• Stripe (if you donate on the website)
• Google (OAuth, if you connect Gmail)

Partner law firm referrals (individual lawsuits):

When you open a partner firm's intake page or an official settlement form from Oyster, we open the destination URL as published—we do not append marketing or attribution query parameters unless a partner has explicitly authorized them. We may count outbound clicks internally (source page, claim name, destination host) for operations and reconciliation; those tallies contain no personal information. Your vault, Gmail contents, and profile are not transmitted to Oyster servers for that outbound-link flow because we do not operate a centralized claims database.

When you file a claim, you submit data directly on third-party settlement or partner sites under their privacy policies. Oyster may prefill forms on your device with information you already saved locally; what you submit is your choice on those sites.

On-device data remains until you delete it in the app, clear app data, or uninstall. We do not retain server-side copies of your profile, vault, or claims queue. Optional infrastructure logs on the website are minimal and not used for ad targeting.

You may delete local data within the app, disconnect Gmail, and clear vault items at any time. For privacy inquiries or requests under applicable law, contact founder@oysterclaim.com. We will respond with reasonable verification steps where required.

Oyster is not directed at individuals under 18. We do not knowingly collect information from minors.

We will update the "Last Updated" date when this Policy changes. Continued use of the Service after changes constitutes acceptance of the revised Policy, subject to any rights you have under applicable law.

founder@oysterclaim.com

https://oysterclaim.com