Privacy Policy

1. Who we are

This platform is operated by Ledger Insurance Agency Inc("Ledger", "we", "us", or "our"), a licensed insurance agency. We built this platform to help workers compensation insurance agencies manage their book of business, applications, renewals, certificates of insurance, and client portal access. If you have questions about this policy, email support@ledgerins.com.

2. What data we collect

We only collect data that is necessary to operate the platform and provide insurance services to you and your clients.

• Agency staff accounts. Name, work email, password hash, and phone number (used for optional SMS-based two-factor authentication). Google OAuth profile data if you choose "Sign in with Google".
• Agency profile. Agency name, Federal EIN, address, phone, producer name, NPN, state insurance license number, domicile state, and license expiration date.
• Client/business data. Business legal name, FEIN, address, industry/NAICS code, ownership structure, owner/officer details, class codes, payroll estimates, employee counts, claims history, and underwriting information submitted through the application or renewal wizard.
• Client portal signers. Mobile phone number, which we use to send a one-time login code via SMS. No password is stored for portal users.
• Usage data. Standard server logs, error reports, and diagnostic information used to keep the service secure and reliable.

3. How we use your data

We use collected data to:

• Authenticate agency staff and client portal users.
• Pre-fill, generate, and manage workers compensation applications, renewals, and certificates.
• Verify agency identity and licensing status.
• Communicate with you about account activity, support requests, and important updates.
• Maintain security, prevent abuse, and comply with legal obligations.

We do not sell personal data or use it for advertising.

4. How we store and protect data

The platform is hosted on Lovable Cloud with data stored in Supabase databases. All data is encrypted in transit using TLS. Database data is stored encrypted at rest by the underlying cloud provider. Access is protected by Row-Level Security (RLS) policies, role-based access, and multi-factor authentication for agency staff. Client portal access is restricted to the phone number you have invited.

5. Third-party services

We share limited data with the following processors solely to operate the service:

• Google — used for OAuth sign-in for agency staff. Google receives only the profile data needed to authenticate you.
• Twilio — used to send SMS verification codes to client portal signers. Twilio receives the recipient phone number and message content.
• AgentSync — used to verify agency and producer licensing status where applicable. Only the minimum licensing information needed is shared.

6. Data retention

We retain account and business data for as long as your agency maintains an active account, or as needed to comply with legal, tax, or regulatory requirements for insurance records. You may request deletion of your agency data by contacting support@ledgerins.com. Some records may be retained where required by law.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data. You can update most account and agency information directly in Settings. For other requests, contact us at support@ledgerins.com.

8. Changes to this policy

We may update this policy as the service or applicable laws change. The latest version will always be posted at app.ledgerins.com/privacy. Continued use of the platform after changes means you accept the updated policy.

9. Contact us

For privacy questions or data requests, contact Ledger Insurance Agency Inc at support@ledgerins.com.