Privacy Policy

Effective: June 17, 2026

1. Information We Collect

When you sign up for Broker Copilot, we collect:

• Account information: Your name, email address, and agency name.
• Usage data: Queries you run, documents you upload, and feature interactions.
• Document content: Policy documents and carrier guidelines you upload for AI analysis.
• Payment information: Handled entirely by Stripe. We store only your subscription status and billing cycle count — never card numbers or billing details.

2. How We Use Your Information

We use collected information to:

• Provide AI-powered research responses to your queries
• Manage your account and subscription
• Process document analysis (RAG-based search over your uploaded materials)
• Send service-related notifications (billing, account changes)
• Improve product performance and reliability

3. Document Storage & RAG Processing

Documents you upload are stored securely and processed to enable AI-powered search. Your documents are:

• Stored with carrier-specific metadata for community knowledge base features
• Processed using OpenAI for embedding and retrieval
• Never shared with other brokers without your explicit consent

You can delete your account and all associated data at any time by contacting us at support@boundflow.polsia.app.

4. Information Sharing

We do not sell, rent, or trade your personal information to third parties. Limited sharing occurs only for:

• Service providers: Stripe (payments), OpenAI (AI processing), and our hosting provider (infrastructure). Each is contractually bound to protect your data.
• Legal obligations: If required by law, such as a valid subpoena or court order.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we delete or anonymize your data within 30 days, except where retention is required by law.

6. Security

We use industry-standard encryption (TLS/HTTPS) for all data in transit. Sensitive data at rest is protected using database-level encryption. Passwords are stored as SHA-256 hashes — we cannot see or recover your plaintext password.

7. Cookies & Tracking

We use minimal cookies solely for session authentication (cookie-based, 7-day expiry). We do not use third-party tracking pixels, advertising cookies, or analytics trackers. Your browsing behavior within Broker Copilot is not tracked or profiled.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Export a machine-readable copy of your data

To exercise any of these rights, email support@boundflow.polsia.app. We respond to all requests within 30 days.

9. Children's Privacy

Broker Copilot is not intended for use by individuals under the age of 18. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Effective" date. If we make material changes, we will notify you via email or a prominent notice in the app. Continued use of Broker Copilot after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, concerns, or to exercise your data rights:

Email: support@boundflow.polsia.app

We aim to respond within 48 hours for privacy inquiries.