Privacy Policy

1. Overview

This policy describes how Risklytics, Inc., a Delaware corporation (“Risklytics,” “we,” or “us”), collects, uses, shares, and protects information when you use risklytics.ai and the application portal at app.risklytics.ai. Our service is commercial insurance brokerage for businesses; most of the information we handle is about a company and its operations, and some of it identifies the people who represent that company.

2. Information we collect

Information you give us:

• Contact and account information: your name, title, work email address, phone number, and company name.
• Application information: what your company does, where it operates, its address, organization and financial details, payroll and headcount, its use of AI and autonomous systems, claims history, contracts, and the coverage you are requesting. Each completed application is preserved as a versioned record.
• Documents you upload: for example loss runs, declarations pages, and equipment schedules.
• Messages you send us: service requests, replies in the portal, and help-form submissions.

Information collected automatically, and only at specific moments:

• When you acknowledge a notice or consent in the application, we record the acknowledgment together with the exact text version, the time, your IP address, and your browser’s user agent, so the record shows what was agreed and when.
• When you sign in, we create a session record with the time and your browser’s user agent. You can see and end your active sessions from the account page.
• When we email you, we keep a log of the message and its delivery outcome.

We do not collect information from data brokers, and we do not use analytics trackers, advertising pixels, or fingerprinting on either site.

3. How we use information

We use the information above to provide brokerage services: preparing your application, submitting it to insurance carriers and wholesale brokers, presenting returned options, servicing your account and requests, and keeping the records the law requires of an insurance producer. We also use it to secure the service, to keep an audit trail of changes to your file, to send the transactional email described below, and to comply with legal obligations. We do not use your information for advertising, and we do not sell it.

4. How we share information

• Carriers and wholesale brokers: sharing your application with insurance markets is the service. When we submit your application, the carriers and any wholesale brokers involved receive the information they need to underwrite it, and they handle it under their own privacy practices.
• Service providers that run our infrastructure: Vercel (hosting), Supabase (database and document storage), and Resend (email delivery). Each processes information only to provide its service to us.
• Legal and safety: we may disclose information when the law requires it, to respond to lawful requests, or to protect the rights, safety, or property of Risklytics, our customers, or others.
• Corporate transactions: if Risklytics is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies

The portal sets one cookie, rl_session, which keeps you signed in. It is strictly necessary for the service, is not used for tracking, and is not shared with anyone. Neither site sets analytics or advertising cookies. Because we do not track visitors across sites, we do not respond to browser Do Not Track signals; there is nothing for them to turn off.

6. Email

We send transactional email: sign-in links, confirmation that your application was submitted, updates when your application reaches a meaningful stage, and updates on service requests you have opened. From the account page you can pause nonessential stage notifications; sign-in links and messages required to service your account still send.

7. Retention

We keep information while your account is active and afterwards for as long as insurance producer recordkeeping laws, other legal obligations, and the possibility of disputes require. Insurance records commonly must be retained for a period of years after a transaction; we do not promise a fixed deletion timeline, and we delete or anonymize information when the reasons for keeping it have passed. To ask about or request deletion of your information, contact us at the address below; we will act on the request to the extent the law allows.

8. Security

Connections to both sites are encrypted in transit. Sign-in links are single-use, expire after fifteen minutes, and are stored only as cryptographic hashes. Uploaded documents live in a private storage bucket and are served only through short-lived signed links after an ownership check. Access to customer files inside Risklytics is limited to authorized personnel, and changes to a customer file are recorded in an audit trail. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we design for it and we log so that we can investigate.

9. Your choices and rights

You can see and update your account details, pause nonessential notifications, and review or end active sessions from the account page in the portal. You can ask us to access, correct, or delete information we hold about you by contacting the address below. Depending on where you live, state law may give you specific rights over personal information; we honor requests to the extent applicable law requires and will not discriminate against you for making one. Note that information already submitted to a carrier as part of an application is under that carrier’s control, and insurance recordkeeping law limits what we are permitted to delete.

10. Children

The service is for businesses. It is not directed to anyone under eighteen, and we do not knowingly collect information from children.

11. Changes to this policy

If we make a material change to this policy, we will post the updated version here with a new effective date and give notice in the portal or by email before the change takes effect.

12. Contact

Risklytics, Inc. · Privacy questions and requests can be sent to hello@risklytics.ai.