Privacy Policy

Introduction

Submission Bridge ("we," "us," or "our") operates the submissionbridge.com website and the Submission Bridge service (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Company name and contact information
• Password (stored securely hashed)
• Role and permissions within your organization

Carrier Credentials

To provide our automation services, we collect and store carrier portal credentials. These credentials are:

• Encrypted at rest using AES-256 encryption
• Stored in Google Cloud Platform Secret Manager
• Accessible only to authenticated automation processes
• Never shared with third parties

Submission Documents

Documents you upload for processing may contain:

• Business information (company names, addresses, tax IDs)
• Insurance-related data (policy numbers, coverage details, loss history)
• Personal information of insured parties

We process this data solely to provide the requested automation services and do not use it for any other purpose.

Usage Data

We automatically collect:

• IP addresses and browser information
• Pages viewed and features used
• Timestamps of actions taken
• Error logs and performance data

How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process submissions and execute carrier portal automation
• Authenticate users and secure account access
• Send transactional notifications (quotes received, errors, etc.)
• Provide customer support
• Monitor and improve Service performance
• Detect and prevent fraud or abuse
• Comply with legal obligations

Data Retention

We retain your data as follows:

• Account data: Retained while your account is active, deleted within 30 days of account closure
• Submission documents: Retained for 90 days after processing, then automatically deleted
• Quote results: Retained for 1 year for reference and audit purposes
• Audit logs: Retained for 3 years for compliance purposes
• Carrier credentials: Deleted immediately upon request or account closure

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: Cloud infrastructure (Google Cloud Platform), AI providers (Anthropic, Google AI) for document processing
• Carrier portals: Only the data necessary to complete requested submissions
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually bound to protect your data and use it only for the specified purposes.

Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-tenant isolation with strict access controls
• Regular security audits and penetration testing
• Security controls aligned with SOC 2 Type 2 requirements (certification in progress)
• Employee access limited by role and necessity

Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes

To exercise these rights, contact us at [email protected].

Cookies

We use essential cookies for:

• Session management and authentication
• Security and fraud prevention
• Remembering your preferences

We do not use third-party advertising or tracking cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.