How we protect your information

We don't keep the documents you upload. Poli reads each PDF to write its explanation, and then the file is thrown away. What stays is Poli's explanation and the policy wording she quotes, so you can come back to it.

Before any text goes to the AI service that writes the explanation, names, addresses, emails, phone numbers and policy numbers are removed. The AI service learns what the policy says, not who it belongs to.

In an agency account, client names, addresses, carriers and renewal dates are kept so each policy is filed under the right client. These are the agency's records.

• Only staff the agency invites can see them.
• The account owner decides which staff can see every client.
• Each agency's account is kept apart from every other account. Anyone who hasn't been invited is blocked, even if they're signed in to PoliSays.

Everything is encrypted while it travels between your computer and PoliSays, and again where it's stored. It's the same kind of protection your bank's website uses.

You sign in with Microsoft, Google, or your email and a password of at least 8 characters. New email accounts have to be confirmed by email first. We never see or store your Microsoft or Google password.

PoliSays tests itself for weak spots on a regular schedule, and we fix what we find. We keep the software PoliSays runs on up to date with security fixes.

• Delete a client and their policies and notes are deleted with them.
• Export your client list at any time.
• Want everything removed? Email privacy@polisays.com.

• Sell your data or your clients' data.
• Use it for advertising.
• Contact an agency's clients.
• See or store credit card numbers. Payments go through Stripe.

PoliSays doesn't have a SOC 2 report yet. We plan to get one as more agencies join. If your agency has a security questionnaire, send it to privacy@polisays.com and we'll fill it in. For the full details, read our privacy notice.