Privacy Policy

This policy explains what information LossLens collects, how we use and protect it, and your choices. We built LossLens to handle insurance loss runs — which can contain sensitive, claim-related information — so how we treat that data is described specifically below. Plain language, stated to match how the product actually works.

1. Information we collect

• Account information — your email, agency name, and a salted hash of your password (we never store your password in plain text).
• Documents you submit — the loss-run PDFs or text you upload for analysis. We do not retain the original document (see §3).
• Analysis results — the structured output we generate from your document (claim rows, amounts, descriptions, totals, and the written summary), saved to your account so you can revisit, export, and share it. This output may include limited claim-level detail extracted from your loss run.
• Interest / feedback form data — if you submit our discovery form, the responses and the email you provide.
• Technical data — limited log and request data (such as IP address) used to operate the service, enforce rate limits, and protect against abuse.
• Cookies — a single secure, httpOnly session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

To provide the service (analyze your documents, save your results, let you export and share them); to authenticate you and secure your account; to operate, protect, and improve the service; to communicate with you about your account or your inquiry; and to comply with legal obligations. We do not sell your personal information, and we do not use your loss-run data for advertising.

3. How loss-run data is handled (the important part)

• Your uploaded document is transmitted over an encrypted connection (TLS) and processed to produce the analysis. The original PDF/text is not written to our database or persistent storage. Only the structured analysis results are saved to your account.
• Analysis is performed by our AI sub-processor, Anthropic (the Claude API), under its commercial terms, which state that customer inputs and outputs are not used to train its models.
• You can have your account and stored analyses deleted — email us and we will delete them. A self-serve delete control is on our roadmap.

4. Sub-processors

We use a small number of trusted infrastructure providers to operate the service. We share only what each needs to perform its function.

Confirm this list reflects your live deployment before publishing; update it if you add or change providers.

5. How we share information

We share information only: with the sub-processors above to run the service; when you choose to share (e.g. a public report link you generate); to comply with law or a valid legal request; to protect the rights, safety, and security of users and the service; and in connection with a business transfer (e.g. merger or acquisition), subject to this policy. We do not sell personal information.

6. Data retention & deletion

Uploaded documents are not retained after processing. Account information and analysis results are kept while your account is active and until you delete them. You can delete any analysis, or your whole account and all its data, yourself from within the app at any time — or email hello@losslens.app and we'll do it for you.

7. Security

We encrypt data in transit, store passwords only as salted hashes, expire sessions, restrict access to stored data, and rate-limit and bound requests to deter abuse. No system is perfectly secure, and we are pre-launch and do not currently hold a SOC 2 or similar third-party certification. See our Security page for specifics, and contact us if your due-diligence process needs more.

8. Your rights & choices

You can access, correct, export, or delete your account data by contacting us. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or other state privacy laws — including the right to know, delete, and not be discriminated against for exercising those rights. We do not sell or “share” personal information for cross-context behavioral advertising. To exercise any right, email hello@losslens.app.

9. Other

• Not for children. LossLens is a business tool and is not directed to anyone under 18.
• US-based service. LossLens is operated from the United States; by using it you understand your information is processed in the US.
• Changes. We may update this policy; we will revise the effective date and, for material changes, take reasonable steps to notify you.

10. Contact

Questions or requests: hello@losslens.app ([Your Legal Entity]).