Privacy Policy

What we store

Account details (name, email, hashed password), your organization, properties, vendor contact details you enter, policy expiration dates and notes, insurance documents you or your vendors upload, reminder and activity logs, and settings.

How it is used

Only to run the service for your organization: showing your register, sending the reminders and digests you configure, and keeping an activity history. Documents are stored privately and are never sold or used for advertising.

Access

Records are scoped to your organization. Vendor upload links reveal only the vendor name and organization name. Email is sent through the provider the operator configures (for example, Resend) under that provider’s terms.

Retention and deletion

Documents are kept until an authorized user deletes them or the organization owner deletes the organization’s data in Settings. Deletion removes records and stored files from the application; copies inside provider backups expire on the provider’s schedule and cannot be purged by the app. [OWNER: state your actual backup windows here after choosing providers.]

Your choices

Organization owners can export the vendor register as CSV at any time, delete individual documents, archive vendors, and delete all organization data. For other requests, use the contact page. [OWNER: add contact address and any jurisdiction-specific rights language after legal review.]