Privacy Policy

Account information — your name, email, agency details, headshot, and settings when you create an account.

Referral information — details agents and partners enter about insurance clients: names, contact information, dates of birth, property addresses, closing dates, policy details, and uploaded documents (loan applications, evidence of insurance, and similar). This information belongs to the agent's book of business; we process it to run the service.

Usage and log data — emails we send on your behalf (logged for delivery and de-duplication), activity timelines, and standard technical logs. We do not use advertising trackers.

To operate ReferBound: showing live referral status to the right partner, delivering documents, sending the transactional emails you and your partners expect (status updates, closing alerts, recaps), powering AI features you invoke (document extraction, drafted emails), and processing payments. That's it. We do not sell your data or your clients' data, and we don't use it for advertising.

We use a small set of service providers to run ReferBound:

Supabase (database & file storage) · Vercel (hosting) · Resend (email delivery) · Stripe (payments — we never see your card number) · Twilio (text-message delivery, for opted-in contacts only) · Anthropic (AI features — documents and referral details you run through AI features are processed to generate the result, and are not used to train their models under our API terms).

Each processes data only to provide their service to us. Beyond these, we share data only if the law requires it or to protect the service from abuse.

Some notifications are available by text message — for example, letting a referral partner know a client they sent has been quoted or that insurance documents are ready. Texts are sent only to people who opt in by checking the SMS consent box when submitting a referral or in their contact settings. Message frequency varies with referral activity; message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers and SMS opt-in consent are never sold or shared for marketing; text-messaging originator opt-in data and consent are shared only with our SMS delivery provider (Twilio) to send the messages you asked for.

Partner portals and referral boards use unguessable links instead of logins. Anyone with a portal link can see the referrals shared with that partner — that's the product working as designed. Treat links accordingly, and ask the agent (or us) to rotate a link if it's been shared too widely.

We keep data while the account it belongs to is active. Agents can export referrals as CSV anytime and can delete their account from the Profile page — deletion permanently removes their partners, referrals, messages, documents, and portal links. Residual copies in backups age out on a rolling basis.

Data is encrypted in transit (HTTPS everywhere) and at rest by our infrastructure providers. Passwords are stored only as salted scrypt hashes. Documents live in private storage accessed through short-lived signed URLs. Sign-in and public endpoints are rate-limited. No system is perfectly secure, but if we learn of a breach affecting your data, we'll notify you promptly.

You can update your profile anytime, control which emails each partner receives (recaps and thank-yous are per-partner settings), export your data, or delete your account entirely. Partners who want off non-essential emails can ask their agent or email us directly.

ReferBound is a business tool and isn't directed to anyone under 18.

If we materially change this policy, we'll notify account holders by email or in the app first. Questions or requests: hello@stonebind.com.