Privacy Policy

1. Introduction

MyPolicyReview.ai is owned and operated by Catfish Properties LLC, a Nebraska limited liability company ("Company," "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the practices described herein.

This Privacy Policy is designed to comply with applicable state privacy laws, including the Nebraska Data Privacy Act (NDPA), effective January 1, 2025, as well as other applicable state and federal privacy regulations.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, company name (if applicable), and account type
• Insurance documents: PDF files of insurance policies that you upload for analysis
• Communications: messages sent through our broker/client chat feature, notes, and support inquiries
• Payment information: billing details processed through our third-party payment processor (we do not store credit card numbers)
• Inspection records: property photos, condition assessments, and contractor inspection reports you upload as pre-claim documentation. These files may contain the names, contact information, and business details of contractors, vendors, or other third-party individuals who are not account holders. We store them solely to maintain your documentation records.
• Tenant and vendor certificates of insurance: when you send a self-upload link, we collect the name, email address, and each certificate of insurance or policy document submitted by your tenant or vendor, together with the expiration dates used for your compliance tracking and reminder emails.
• Borrower compliance information (lender accounts): borrower and guarantor contact details, insurance certificates, and compliance schedule history collected directly from those parties or uploaded by you, used to produce your compliance status and reminder notices.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, timestamps, and interaction patterns
• Device information: browser type, operating system, device type, and screen resolution
• Log data: IP address, access times, and referring URLs

2.3 Sensitive Data & Third-Party Information in Uploads

Insurance policies may contain sensitive personal information such as Social Security numbers, financial account details, health-related information, or property details. We process this data solely to provide the Service and do not use it for any other purpose. We strongly recommend you redact sensitive personal identifiers before uploading documents.

Lease agreements, contracts, and similar documents you upload for analysis may contain personal information about your tenants, guarantors, occupants, or other third parties who are not account holders. We process these documents exclusively to extract the insurance requirements and dates you asked us to track, and we do not use them for any other purpose. You are responsible for having the right to upload documents containing another person's information.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Analyze your uploaded insurance policies using AI to generate summaries, gap analyses, and renewal tracking
• Send you important notifications including renewal reminders, deletion warnings, and account updates
• Facilitate communication between you and professionals (brokers, lenders, adjusters) when you opt in
• Improve and personalize your experience with the Service
• Process payments and manage subscriptions
• Respond to your inquiries and provide customer support
• Comply with legal obligations

4. AI Processing of Your Documents

When you upload an insurance policy, our AI system processes the document to extract and analyze information including coverage types, limits, deductibles, exclusions, effective dates, and named insureds. This processing occurs on secure servers and the results are stored in your account.

We do not use your uploaded documents to train AI models. Your documents are processed solely to provide you with analysis and are not shared with AI providers in a way that allows them to retain or learn from your data.

Important: AI-generated outputs are for informational purposes only and may be inaccurate. See our Terms of Service for full disclaimers regarding AI limitations and zero liability.

5. Sale of Data & Targeted Advertising

We do not sell your personal data. We do not share your personal data for purposes of targeted advertising. We do not engage in profiling that produces legal or similarly significant effects on consumers. In accordance with the Nebraska Data Privacy Act, you have the right to opt out of any such activities should they ever be introduced in the future.

6. Data Sharing & Third Parties

6.1 Sharing with Professionals (Opt-In Only)

Your policy data is never shared with brokers, lenders, adjusters, property managers, or any other professionals unless you explicitly opt in. When you invite a professional to view your policy, you choose exactly what to share:

• Policy document (PDF)
• AI-generated summary
• Coverage gap analysis
• Chat history

You can revoke access at any time.

6.2 Service Providers

We work with trusted third-party service providers who assist us in operating the Service, including:

• Cloud infrastructure: for secure data storage and processing
• Email services: for sending notifications and reminders
• Payment processing: for handling subscription payments (Stripe)
• AI services: for document analysis (documents are processed but not retained by AI providers)

These service providers are contractually obligated to handle your data securely and only for the purposes of providing services to us.

6.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to respond to a valid legal process.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security policies ensuring users can only access their own data
• Secure, private storage buckets for uploaded documents
• Regular security audits and vulnerability assessments
• Role-based access controls for company accounts

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security. In the event of a data breach involving your personal data, we will notify you and applicable authorities as required by Nebraska law.

8. Data Retention

• Free tier: Policy documents and analysis are retained for 90 days from upload. You will receive a reminder 14 days before deletion.
• Premium tier: Data is retained for as long as your subscription is active, plus 90 days after cancellation.
• Account data: Your profile information is retained until you delete your account.
• Chat messages: Communication history is retained for as long as the associated policy or invite is active.

9. Your Rights Under the Nebraska Data Privacy Act

Under the Nebraska Data Privacy Act (NDPA) and other applicable privacy laws, you have the following rights:

• Right to Know: You may request confirmation of whether we are processing your personal data and access a copy of that data.
• Right to Correct: You may request correction of inaccurate personal data.
• Right to Delete: You may request deletion of your personal data, subject to certain exceptions (e.g., legal obligations, fraud prevention).
• Right to Portability: You may request your data in a portable, readily usable format.
• Right to Opt Out: You may opt out of the sale of personal data, targeted advertising, or profiling. We do not currently engage in any of these activities.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, contact us at privacy@mypolicyreview.ai. We will respond to verifiable consumer requests within 45 days. If additional time is needed, we will notify you of the extension and the reason.

If you are not satisfied with our response, you may appeal our decision by contacting us. If the appeal is denied, you may file a complaint with the Nebraska Attorney General at ago.nebraska.gov.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. Cookies & Tracking

We use essential cookies to maintain your session and preferences. We may use analytics tools to understand how the Service is used. You can control cookie preferences through your browser settings, though disabling essential cookies may affect functionality. We do not use tracking cookies for targeted advertising purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Catfish Properties LLC
d/b/a MyPolicyReview.ai
State of Organization: Nebraska
Email: privacy@mypolicyreview.ai