Privacy Policy

When you request a trial or contact us, we may receive your name, email address, phone number, and the message you submit. When an agent uses PolicyVault, we process account details such as name, email address, phone number, and company name.

Agents may add insurance policyholder information, including names, contact details, dates of birth, addresses, PAN, policy and premium details, vehicle identifiers, health-family information, nominee details, and uploaded policy documents. This information can be sensitive personal information. Please only add information you are authorized to provide and use in the service.

We also process information needed to operate the service, such as policy records, extraction corrections, alert delivery logs, and basic technical/session information required for authentication, security, and troubleshooting.

We use information to provide and maintain PolicyVault; authenticate users; store and organize policy records; extract policy details from documents for the agent to review; generate reports and exports; deliver renewal reminders and monthly registers; respond to enquiries; and protect, troubleshoot, and improve the service.

AI-extracted policy details are suggestions and can be inaccurate. Agents should review and confirm the information before relying on it. PolicyVault is not an insurer and does not make coverage or claims decisions.

We use service providers to operate PolicyVault. Supabase provides authentication, database, and file storage. When document extraction is requested, the uploaded PDF is sent to Google Gemini; if that extraction fails and the PDF contains readable text, extracted text may be sent to Groq as a fallback. Resend processes service emails. Formspree processes messages submitted through the website contact form. These providers process information to provide their services under their own terms and privacy practices.

If configured by the agent, PolicyVault can send policy reminders through a WhatsApp integration to the phone number saved for a policyholder. Reminder messages contain policy information. The agent is responsible for ensuring they have permission to use that contact information and send the reminders.

We do not sell personal information. We may disclose information where required by law, to protect users or the service, or as part of a business transfer. Information may be processed in locations outside your country by us or our service providers, subject to their processing arrangements.

PolicyVault uses account-based access controls and a private storage bucket for policy documents. We use reasonable technical and organizational measures designed to protect information. No online service or transmission method can be guaranteed completely secure.

We retain information while needed to provide the service, meet operational or legal requirements, resolve disputes, and enforce agreements. Agents can manage and delete policy records in the service. To request account-level deletion or ask about retention, contact us using the details below. Backups and provider systems may retain deleted data for a limited period under their standard processes.

You can review and update information in your account and request help with access, correction, or deletion by contacting us. We may need to verify your identity before responding. If you are a policyholder whose information was entered by an insurance agent, please contact that agent first; the agent manages the policy record in PolicyVault.

You can choose not to provide information, but some service features—such as account access, policy extraction, or reminders—may then be unavailable. You may opt out of reminders by asking the agent who manages your policy to update or remove your details.

PolicyVault uses authentication cookies and browser technologies needed to keep sessions working and support the installable web app. Your browser may allow you to manage or clear these technologies; doing so may sign you out or affect app functionality.

PolicyVault is intended for insurance agents and business users, not for children to use directly. Agents should only enter family-member or other personal information when they are authorized to do so.

We may update this policy as the service or applicable requirements change. The date at the top indicates when this version was last updated. Material changes will be reflected on this page.