Privacy Policy

This policy explains how Policybean (“Policybean”, “we”, “us”) collects, uses and shares personal information when you use our website and application (the “Service”). By using the Service you agree to this policy and to our Terms of Use. It does not cover websites or services run by other companies that we link to.

We do not intentionally collect government identification numbers, bank login credentials or health information. Please don’t include them in notes or uploaded documents; if a document you upload contains them, they are treated like the rest of that document.

• To provide the Service: show your portfolio, charts, upcoming dates and loan figures.
• To read the documents you upload and fill in policy fields for you.
• To process payments and manage your subscription.
• To email you about your account: sign-up confirmation, password resets, receipts and reminders you have asked for.
• To keep the Service secure, prevent abuse and fix bugs.
• To answer your questions and improve the product.
• To comply with legal obligations and enforce our Terms.

We do not sell your data, rent it, or use it to show you advertising.

We share information only with the service providers below, who process it on our behalf to run the Service.

We may also disclose information:

• For legal reasons when required by law, court order or a valid government request, or to protect the rights, safety and security of users and the Service.
• In a business transfer such as a merger, acquisition or sale of assets. We would notify you and this policy would continue to apply to your data.
• With your consent, for example if you ask us to share something.

We may share aggregated or de-identified information that cannot reasonably identify you.

When you upload a policy document, its contents are sent to Anthropic’s API so that the fields (insurer, premium, dates and similar) can be extracted. We use this only to provide that feature to you, and we do not permit our provider to use your documents to train its models under the terms of the API we use.

Extraction can be wrong. Always check the figures shown against your original document. Policybean is a tracking tool and does not give financial, insurance or legal advice.

We use only what is necessary for the Service to work:

• Authentication cookies keep you signed in and protect your session.
• Preference storage in your browser remembers choices such as light or dark mode.

We do not use advertising or cross-site tracking cookies, and we do not sell or share personal information for targeted advertising, so there is nothing to opt out of. We honour browser “Do Not Track” and Global Privacy Control signals as a consequence. You can block or delete cookies in your browser settings, but you will not be able to stay signed in.

Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to your rows and uploaded files is restricted to your own account using database access rules, and uploaded documents are stored in a private bucket. Payments are handled by Stripe, which is PCI-DSS certified.

No system is completely secure. Use a strong, unique password and tell us right away if you think your account has been accessed without permission.

We keep your information while your account is active. You can delete your account from Settings; this removes your policies, loans, snapshots and uploaded documents from our systems. Copies in backups are overwritten on the provider’s normal schedule.

We may keep limited records longer where the law requires it, for example tax and payment records held by Stripe, or to resolve disputes and prevent fraud.

• Access and correction. Most of your data is visible and editable inside the app. Ask us for anything you can’t see there.
• Deletion. Delete your account in Settings, or email us.
• Portability. Ask us for a copy of your data in a common format.
• Email. Account and security emails are required for the Service. Optional reminders can be turned off.

California and other U.S. states. Depending on where you live you may have the right to know, access, correct, delete and port your personal information, and to opt out of its sale, sharing for targeted advertising and profiling. We do none of those things. We will not discriminate against you for exercising your rights.

EEA, UK and Switzerland. We process your data to perform our contract with you, for our legitimate interests in running and securing the Service, to meet legal obligations, and with your consent where required. You may also object to or restrict processing, withdraw consent, and lodge a complaint with your local data protection authority.

To make a request, email support@policybean.com from the address on your account. We may need to verify your identity and will respond within 30 days (45 where the law allows). You can use an authorised agent; we may ask for proof of authority.

The Service is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

Our providers may process data in the United States and other countries. Where we transfer data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy. If the changes are material we will tell you by email or in the app before they take effect, and we will update the date at the top. Continuing to use the Service after that means you accept the updated policy.

Questions or requests about privacy? Email support@policybean.com, or use our Contact page.