What happens to your policy after you upload it

We do not sell, share, or transfer policyholder or portfolio data to insurers, banks, or third-party agencies.

That is not a marketing promise: it is a clause in our contract with you (Terms of Service, §3), so it binds us legally.

You can grant access to your adviser and end it. Technical providers needed to run the service and any legally required disclosures are explained in the Privacy Policy.

We take no commission from insurance companies. We are paid only by subscription, so we gain nothing from what your analysis says.

Your files are encrypted in transit (TLS) and at rest, and stored on infrastructure inside the European Union — specifically the eu-west-3 region (Paris).

There is no public link to a policy document. Every time one is opened, permission is checked again and a link is created that expires within minutes.

Analysis starts only after you give explicit consent. Without it, the document never leaves for a model provider.

Analysis may send the entire document to an AI provider, including outside the EU. Its use and retention are governed by the provider's terms; see the Privacy Policy and provider list.

The AI reads your document and explains it. It does not decide which coverage gaps you have: rules do that, checking the data extracted from your policy, and every finding records which rule found it and what that rule read.

Every read of a policy goes through one checkpoint in the application, which asks the same question every time: do you own it, or has someone explicitly shared it with you? A CI test checks every route and action that can name a policy, and fails if a new one does not go through it.

An advisor's access ends with your relationship. If you end it, they stop seeing even the policies they uploaded for you themselves.

When one of our administrators opens your account, we record who opened it, whose account it was, and which category of information they saw. Administrator records are kept for five years; ordinary usage logs are deleted after twelve months.

You can download a copy of your data whenever you want, yourself, without asking anyone. It is a structured file, not screenshots.

A few things are not in that copy and are provided on request: payment-method details, session and security records, the history of who viewed your data, usage metering, and the free-text notes your advisor wrote about you. Their structured assessment of you is included.

You can request deletion from your account. We normally respond within one month and explain any lawful extension. Records we must retain, such as tax documents, are not erased before the retention obligation ends.