LossEngine

Operating LossEngine involves handling several kinds of data:

• Account data — name, email, firm, and role of everyone your firm invites.
• Claim data — the policies, carrier estimates, correspondence, and claim details your firm uploads or enters, which may include the personal and financial information of your clients (the policyholders).
• Usage data — which agents are run, when, and their cost, so you can see your own spend.
• Billing data — handled directly by Stripe; we do not store full card numbers.

Data you upload is used only to provide the service to your firm: storing documents, running the AI analysis you request, computing statutory deadlines, generating correspondence, and showing your own claim data back to you. We do not sell personal data, and we do not use your firm's claim content to train models for other customers.

We use a small number of subprocessors to run the service. Each only receives the data it needs to perform its function:

• Supabase — database, file storage, and authentication.
• Anthropic — reads uploaded policy and estimate documents to generate the analyses you request. Documents sent for analysis are processed under Anthropic's API terms, which exclude API content from being used to train their models by default.
• Stripe — payment processing for paid plans.
• Postmark — transactional email (invitations, notifications, client portal links).
• Vercel — application hosting.

We do not share your data with data brokers or use it for third-party advertising. We disclose data when required by law, such as in response to a valid subpoena.

LossEngine is multi-tenant software: many firms share the same application, and each firm's data is isolated by database-level access rules (row-level security) tied to your firm's account, not just application-level checks. One firm cannot read another firm's claims, documents, or findings.

lossengine.com/demo is a shared, publicly reachable demonstration using synthetic data only — a fictional policyholder, fictional carrier, and a fabricated claim. No real client or claim data is ever placed in the public demo, and the demo account cannot write to or read any real firm's data.

We retain your firm's data for as long as your account is active. If you close your account, you may export your data first; after a reasonable transition period, your firm's content is deleted from active systems, subject to standard backup rotation.

Data is encrypted in transit (TLS) and at rest. Access to a firm's data requires authentication and is scoped by role. No system is perfectly secure, and we cannot guarantee absolute security, but we treat client and claim data as sensitive by default in how the product is built.

Firm owners can review and export their firm's data, and can remove a team member's access at any time from Settings. To request deletion of your account or data outside the normal account-closure flow, contact us below.

We may update this policy as the product changes. Material changes will be posted here with an updated date above.

Questions about this policy or a data request: privacy@lossengine.com