POLICY ANGEL™
MASTER TERMS OF SERVICE
Effective Date: November 1, 2025
Last Updated: November 19, 2025
Applicability: These Terms & Conditions apply to all users of the Policy Angel service, whether accessed via web browser or mobile application, across all U.S. States & Puerto Rico.
Introduction
Welcome to Policy Angel (also known as "My Policy Angel") – a platform for homeowners and skilled trade professionals. By accessing or using Policy Angel’s website, mobile app, and related services (collectively, the “Services”), you agree to these Terms & Conditions (“Terms”). If you do not agree with these Terms, you must not use the Services. These Terms form a binding legal agreement between you (“you” or “User”) and Policy Angel (“Policy Angel,” “we,” “us,” or “our”). Your use of the Services is also subject to our Privacy Policy, which explains how we collect and handle your information. The Services are intended for use in all U.S. states, and these Terms are intended to be valid and enforceable nationwide (subject to state-specific rights as noted below).
ARTICLE 1. DEFINITIONS AND INTERPRETATION
Section 1.1 Definitions
For purposes of these Terms of Service (“Terms”), the following defined terms apply:
(a) "Policy Angel," “Company,” “we,” “us,” or “our”
means Policy Angel, LLC, a Florida limited liability company, together with its parents, affiliates, subsidiaries, employees, officers, directors, agents, successors, and assigns.
(b) “User,” “you,” or “your”
means any individual accessing or using the Services, including Consumer Users and household-level subscribers.
(c) “Consumer User”
means a User utilizing the Services for personal, family, or household purposes, including homeowners, tenants, and property occupants.
(d) “Account”
means the User’s registered profile enabling access to certain features of the Services.
(e) “Services”
means the Policy Angel mobile application, website, widgets, dashboards, AI-driven features, risk analysis tools, pre-claim documentation systems, policy evaluation modules, grant discovery tools, contractor referral tools, maintenance reminders, digital document storage, and all related services, software, data, alerts, analytics, or content provided by the Company.
(f) “User Content”
means all documents, images, videos, data, information, insurance policies, notes, communications, or materials uploaded, submitted, stored, transmitted, or generated by the User through the Services.
(g) “Third-Party Provider”
means any contractor, public adjuster, inspector, broker, insurer, mortgage servicer, financial services provider, or other third-party entity not employed or controlled by Policy Angel.
(h) “Personal Information”
has the meaning assigned under applicable U.S. state privacy laws, including the CCPA/CPRA, VCDPA, ColoPA, CTDPA, UCPA, and New Jersey consumer statutes.
(i) “AI Systems”
means all proprietary artificial intelligence, machine learning models, data extraction tools, scoring engines, weather intelligence modules, and automated analytics integrated into the Services.
(j) “Applicable Law”
means all federal, state, and local laws, rules, and regulations governing the Services and User’s use thereof.
(k) Interpretation
Headings are for convenience only. “Including” means “including without limitation.” Singular includes plural.
ARTICLE 2. ACCEPTANCE OF TERMS
Section 2.1 Binding Agreement
By creating an Account, accessing the Services, or selecting “I Agree,” you enter into a legally binding agreement with Policy Angel consisting of these Terms and the Privacy Policy.
Section 2.2 Applicability
These Terms apply to all Users in all 50 U.S. states and Puerto Rico, regardless of the device or platform used to access the Services.
Section 2.3 Updates to Terms
(a) Material Changes
Policy Angel reserves the right to update or modify these Terms. Material changes will be communicated through the Services, via email, or by posting an updated version with a new Effective Date.
(b) Continued Use
Continued use of the Services after changes take effect constitutes acceptance.
ARTICLE 3. ELIGIBILITY AND ACCOUNT REGISTRATION
Section 3.1 Eligibility Requirements
You must:
be at least eighteen (18) years old (or the age of majority in your state);
have the legal capacity to enter into binding agreements; and
not be prohibited from using the Services under Applicable Law.
We do not knowingly collect information from minors.
Section 3.2 Account Creation
Users agree to:
provide accurate and complete information;
update all information as necessary.
Section 3.3 Account Security
The User is solely responsible for:
safeguarding login credentials;
restricting access to their device and account;
all activity occurring under their credentials.
Section 3.4 User-Initiated Termination
You may delete your Account at any time. Deletion does not guarantee refunds.
Section 3.5 Company-Initiated Suspension or Termination
Policy Angel may suspend or terminate access, with or without notice, for:
violations of these Terms;
unlawful activity;
misuse of Services;
fraudulent information;
attempts to disrupt the platform.
No refunds are provided for terminations due to User misconduct.
ARTICLE 4. USER RESPONSIBILITIES AND ACCEPTABLE USE
Section 4.1 Accurate Information
Your experience relies on the accuracy of the information you provide. You agree to maintain complete and truthful data relating to:
your property;
insurance policies;
maintenance history;
uploaded documents;
grant or relief information.
Section 4.2 Compliance with Law
You must comply with all applicable:
privacy laws;
insurance regulations;
consumer protection laws;
intellectual property laws.
Section 4.3 Prohibited Conduct
You shall not:
(a) upload illegal, fraudulent, harmful, or offensive content;
(b) harass or defraud any User or Third-Party Provider;
(c) introduce malware or attempt to access restricted systems;
(d) reverse engineer or attempt to copy the platform;
(e) use bots, scrapers, or automated tools (unless expressly provided by Policy Angel);
(f) misuse User or third-party data;
(g) gather information for competitive analysis or platform replication.
Section 4.4 Third-Party Interactions
Your dealings with Third-Party Providers are solely between you and such provider. Policy Angel does not guarantee:
workmanship,
quality,
timeliness,
availability,
safety, or
regulatory compliance.
Section 4.5 Platform Integrity
Any attempt to disrupt, overload, or degrade Services constitutes a violation and may lead to legal enforcement.
ARTICLE 5. SCOPE OF SERVICES
This portion integrates your original detailed descriptions, expanded and reformatted to enterprise legal standards.
Section 5.1 General Description
Policy Angel provides digital tools and resources for property information management, risk awareness, insurance policy understanding, and maintenance oversight. The Services include:
(a) Interactive Dashboards & Widgets
Personalized user interfaces for organizing property, insurance, and maintenance information.
(b) Pre-Claim Documentation Systems
Tools for recording photos, videos, inventories, and property condition details.
(c) Risk & Weather Intelligence
Automated alerts and risk assessments based on geographic factors and third-party weather data.
(d) Grant & Relief Program Discovery
Identification of federal, state, and private assistance programs relevant to the User.
(e) Policy Review & Data Extraction
Automated analysis of insurance policy documents, including OCR and AI-driven interpretation.
(f) Contractor & Professional Referral Services
Connections to vetted third-party contractors, public adjusters, or brokers.
(g) Home Maintenance Scheduling
Automated reminders for routine maintenance tasks affecting property condition and insurability.
(h) Financial Tools
Calculators and estimation tools for repair costs, loan payments, or insurance premium effects.
(i) Claims Documentation Tools
Support for organizing claim data, storing adjuster contacts, and maintaining repair timelines.
(j) Secure Document Storage
Encrypted vault for storing User Content, accessible only to the User unless shared.
Section 5.2 Availability of Features
Not all Services may be available in all states or territories.
Section 5.3 Important Legal Disclaimers on Scope
(a) Technology Platform Only
Policy Angel is not an insurance company, agent, adjuster, broker, attorney, engineer, or financial institution.
(b) No Professional Advice
All insights, persona scores, comparisons, and analyses are informational only.
(c) Independent Third Parties
Contractors, adjusters, and brokers are not employees or agents of Policy Angel.
ARTICLE 6. SUBSCRIPTIONS, FEES, AND BILLING
Section 6.1 Overview
Certain features of the Services may require payment of subscription fees, one-time purchases, or enterprise-level service costs. All fees, billing cycles, and charges will be disclosed at the point of purchase.
Section 6.2 Subscription Plans
(a) Consumer Subscription Tiers
(b) Billing Cycles
Subscriptions may be billed on a monthly or annual basis. The choice of billing cycle is displayed at checkout.
(c) Automatic Renewal
Subscriptions renew automatically at the end of each billing period unless you cancel prior to renewal.
Section 6.3 Payment Authorization
initial subscription fees,
recurring renewal fees,
upgrades or add-ons,
applicable taxes.
Section 6.4 Free Trials and Promotional Access
If offered, free trials:
begin upon activation,
convert to paid plans unless canceled before expiration,
may be revoked in cases of misuse.
Promotional pricing applies only for the stated duration.
Section 6.5 Cancellation and Refunds
(a) User Cancellation
You may cancel at any time through your Account settings. Cancellation stops future charges but does not entitle you to a refund for the current billing period.
(b) No Refunds
Except where required by law, fees are non-refundable.
(c) Refunds for App Store Purchases
If purchased via Apple App Store or Google Play Store, refunds must be requested from the respective platform.
Section 6.6 Failed Payments
If a payment fails:
Policy Angel may retry the transaction;
access to paid features may be suspended;
continued failure may result in account termination.
Users are responsible for unpaid amounts.
ARTICLE 7. USER CONTENT AND DATA RIGHTS
Section 7.1 Ownership of User Content
Users retain ownership of all User Content uploaded or submitted through the Services. Policy Angel does not claim ownership over your documents, images, or other materials.
Section 7.2 License Grant to Policy Angel
To provide the Services, you grant Policy Angel a non-exclusive, worldwide, royalty-free, sublicensable license to:
host,
store,
process,
display,
analyze,
transmit,
and create derivative works from
your User Content solely to operate, maintain, and improve the Services.
We do not sell User Content.
Section 7.3 Content Accuracy and Compliance
You represent that:
you own or have rights to the User Content;
the content is lawful;
it does not infringe on third-party rights;
the content does not include sensitive data irrelevant to the Services (SSNs, credit card numbers, medical records).
Section 7.4 Data Storage and Backups
Policy Angel uses encrypted storage and may maintain backups. However:
we do not guarantee permanent preservation of User Content;
Users should maintain their own backup copies.
Residual content may remain in backups for legal compliance.
Section 7.5 Content Sharing
Content remains private unless you voluntarily:
enable link-sharing;
request a referral service.
ARTICLE 8. THIRD-PARTY SERVICES AND PROVIDERS
Section 8.1 Independence of Third-Party Providers
Contractors, adjusters, brokers, insurers, and any Third-Party Provider:
are independent;
are not employees of Policy Angel;
operate under their own licenses and obligations;
are solely responsible for their work.
Policy Angel does not control or supervise Third-Party Providers.
Section 8.2 No Endorsement or Guarantee
Policy Angel does not guarantee:
workmanship quality,
timeliness,
pricing,
licensure,
outcomes of claims,
estimates,
safety,
responsiveness.
Section 8.3 Third-Party Websites
Links to third-party websites:
are for convenience only;
may follow separate Terms and Privacy Policies.
Policy Angel is not liable for third-party content or actions.
Section 8.4 User Responsibility
Users are solely responsible for evaluating and selecting Third-Party Providers. Any disputes, damages, or claims must be resolved directly between the User and the provider.
ARTICLE 9. ARTIFICIAL INTELLIGENCE AND AUTOMATED TOOLS
Section 9.1 Overview
Policy Angel uses AI Systems to analyze documents, provide risk insights, organize property information, detect policy attributes, and recommend actions.
Section 9.2 Informational Nature of AI Outputs
AI-generated outputs:
are informational only,
do not constitute legal, financial, or insurance advice,
should not be relied on without professional consultation.
Section 9.3 Limitations
AI Systems may:
misinterpret documents,
misread poor-quality images,
generate incomplete guidance,
fail to account for unique circumstances,
rely on third-party data that may be inaccurate.
Section 9.4 User Responsibility
The User agrees:
to verify AI insights independently,
to consult licensed professionals before making decisions,
not to use Policy Angel as the sole basis for claim filings or coverage decisions.
ARTICLE 10. DISCLAIMERS
Section 10.1 General Disclaimer
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT ANY WARRANTIES, EXPRESS OR IMPLIED.
Section 10.2 No Professional Advice
Policy Angel does not provide:
legal advice,
insurance advice,
adjusting services,
engineering evaluations,
construction assessments,
financial planning.
Section 10.3 No Guarantee of Outcomes
Policy Angel does not guarantee:
insurance claim outcomes,
grant availability,
financial savings,
maintenance results,
weather accuracy,
risk scoring accuracy.
Section 10.4 Third-Party Data
Policy Angel relies on:
weather providers,
public records,
insurers,
mapping databases.
We do not guarantee the accuracy or timeliness of third-party data.
Section 10.5 Tech Limitations
We do not warrant that:
Services will be uninterrupted,
free from errors,
free from security breaches,
compatible with all devices,
available at all times.
Some jurisdictions limit disclaimers; in such cases, we disclaim to the maximum extent permitted.
ARTICLE 11. LIMITATION OF LIABILITY
Section 11.1 Maximum Liability
To the fullest extent permitted by law, Policy Angel’s total liability to any User is limited to:
(a) fees paid by the User in the preceding 12 months, or
(b) one hundred dollars ($100),
whichever is greater.
Section 11.2 Excluded Damages
Policy Angel is not liable for:
lost profits,
lost data,
emotional distress,
property damage,
reliance on AI outputs,
third-party actions,
personal injury,
service outages,
corruption of files,
inaccurate policy interpretations,
missed alerts.
Section 11.3 Third-Party Provider Release
Users release Policy Angel from any claims arising out of:
contractor work,
adjuster opinions,
broker advice,
insurer decisions.
Some states restrict liability limitations; where required, exemptions apply.
ARTICLE 12. INDEMNIFICATION
Users agree to indemnify, defend, and hold harmless Policy Angel from claims arising out of:
misuse of the Services,
violation of laws,
User Content issues,
infringement of third-party rights,
false information submitted.
This obligation survives account termination.
ARTICLE 13. TERMINATION
Section 13.1 User Termination
Users may delete their Account at any time.
Section 13.2 Company Termination
Policy Angel may suspend or terminate accounts for:
violations of these Terms,
illegal activity,
data misuse,
platform disruption,
abuse of trial periods,
chargeback abuse.
Section 13.3 Effects of Termination
Upon termination:
access immediately ceases,
data may be removed or archived,
licenses granted to Policy Angel survive only as needed for legal compliance.
ARTICLE 14. DISPUTE RESOLUTION AND ARBITRATION
Section 14.1 Governing Law
These Terms are governed by Florida law.
Section 14.2 Mandatory Arbitration
Except where prohibited, disputes must be resolved through binding arbitration under the FAA.
Section 14.3 Class Action Waiver
Users waive:
class actions,
collective actions,
representative actions.
Section 14.4 Opt-Out Rights
Users may opt out of arbitration within 30 days of accepting these Terms.
Section 14.5 Venue If Arbitration Unavailable
If arbitration is invalidated, disputes will be brought exclusively in Florida state or federal courts.
ARTICLE 15. CHANGES TO TERMS
Policy Angel may modify Terms:
with notice for material changes,
without notice for clerical or explanatory updates.
Continued use after updates constitutes acceptance.
ARTICLE 16. MISCELLANEOUS
Includes:
Entire Agreement
Severability
Assignment
No Agency
No Third-Party Beneficiaries
Interpretation Rules
Export Controls
Language
ARTICLE 17. CONTACT INFORMATION
Policy Angel, LLC
111 E. Washington St.
Orlando, FL 32801
support@policyangel.com
PART II — ENTERPRISE SERVICES ADDENDUM
This Addendum applies to all Enterprise Users and supplements (but does not replace) the Consumer Terms of Service.
ARTICLE E-1. DEFINITIONS
For purposes of this Enterprise Addendum (“Enterprise Terms”), the following terms apply in addition to the Master Definitions:
(a) “Enterprise User”
means any business entity, contractor, public adjuster, insurance broker, restoration company, inspector, engineer, solar firm, service technician, real estate professional, or organization accessing the Services for professional, commercial, or revenue-generating purposes.
(b) “Enterprise Personnel”
means all employees, subcontractors, agents, or representatives acting on behalf of an Enterprise User.
(c) “Enterprise Data”
means all User Content uploaded by Enterprise Personnel, including inspections, reports, estimates, diagrams, CAD files, engineering summaries, proposals, invoices, or policy interpretation notes.
(d) “Consumer User Data”
means Personal Information or property information belonging to Consumer Users, accessible to an Enterprise User only with explicit user permission via the platform.
(e) “Enterprise Service Features”
means professional functionality provided by Policy Angel, including referral tools, inspection uploads, job-site documentation, enterprise dashboards, lead integrations, and API access.
(f) “PA-API”
means the Policy Angel Application Programming Interface, including endpoints, credentials, SDKs, and integration documentation.
ARTICLE E-2. ENTERPRISE ACCESS AND REQUIREMENTS
Section E2.1 Verification Requirements
Enterprise Users must:
maintain legally valid business registration;
hold all required state and local licenses;
maintain insurance appropriate for their field (GL, WC, E&O, etc.);
comply with industry standards and safety regulations.
Policy Angel may request documentation at any time.
Section E2.2 Professional Conduct
Enterprise Users agree to:
provide accurate, truthful information to Consumer Users;
refrain from misrepresenting credentials;
comply with ethical, legal, and licensing obligations;
avoid pressuring or misleading homeowners;
act independently of Policy Angel.
Section E2.3 Account Responsibility
Enterprise Users are responsible for:
all actions of their personnel;
safeguarding login credentials;
misuse of Consumer Data;
activity via API keys.
ARTICLE E-3. DATA ROLES (ENTERPRISE-SPECIFIC)
Section E3.1 Enterprise as Controller
An Enterprise User acts as a Controller for:
inspection data;
contractor-uploaded media;
job site documentation;
estimates;
engineering evaluations;
policy review notes.
Policy Angel acts as a Processor for such data.
Section E3.2 Policy Angel as Controller
Policy Angel remains the Controller for:
platform analytics;
persona scoring models;
risk insights;
weather intelligence;
consumer-facing features;
meta-data describing platform usage.
Section E3.3 Consumer Data Access Restrictions
Enterprise Users may only access Consumer Data:
and for no other purpose.
ARTICLE E-4. ENTERPRISE USER CONTENT
Section E4.1 Ownership
Enterprise Users retain ownership of Enterprise Data they upload.
Section E4.2 License to Policy Angel
Enterprise Users grant Policy Angel a limited, revocable, sublicensable license to:
host,
process,
analyze,
display internally,
generate aggregated analytics (non-identifiable),
and store Enterprise Data.
Section E4.3 Accuracy and Compliance
Enterprise Data must be:
truthful,
compliant with applicable law,
compliant with licensing boards,
free from fraudulent claims or overstated damages.
Violation may result in account termination and referral to regulatory authorities.
ARTICLE E-5. ENTERPRISE PROHIBITED PRACTICES
Enterprise Users may not:
(a) use the platform as a lead-harvesting system outside approved workflows;
(b) solicit Consumer Users outside the platform using scraped or exported data;
(c) misrepresent Policy Angel as a partner, insurer, or adjusting firm;
(d) alter inspection data to mislead insurers or homeowners;
(e) reverse engineer or replicate Policy Angel scoring models;
(f) utilize the PA-API for competitive analysis;
(g) store consumer documents outside the approved use case;
(h) falsify images, weather data, or structural evaluations.
Policy Angel maintains a zero-tolerance policy for regulatory violations or fraud.
ARTICLE E-6. ENTERPRISE FEES AND COMMERCIAL TERMS
Section E6.1 Enterprise Subscription Pricing
Enterprise Services may include:
per-seat pricing;
usage-based fees;
API request fees;
referral fees;
document processing fees;
add-on modules.
Fees are disclosed in Enterprise onboarding.
Section E6.2 Enterprise Payment Terms
invoiced monthly or annually;
due upon receipt unless stated otherwise;
subject to late fees and suspension for non-payment.
Section E6.3 Taxes
Enterprise Users are responsible for applicable sales, use, or VAT taxes.
ARTICLE E-7. ENTERPRISE LIABILITY STRUCTURE
Section E7.1 No Representation of Work or Outcomes
Policy Angel does not:
supervise work quality;
validate estimates;
review engineering integrity;
oversee job site conditions.
Section E7.2 Enterprise Indemnification
Enterprise Users must indemnify Policy Angel for claims arising from:
workmanship;
employee conduct;
regulatory violations;
misuse of Consumer Data;
unlicensed practice;
insurance fraud.
Section E7.3 Limitation of Liability
Policy Angel’s liability to Enterprise Users is capped at:
the greater of (i) fees paid in the six (6) months preceding the claim, or (ii) $500.
ARTICLE E-8. REFERRAL PROGRAM TERMS
Section E8.1 Consumer-Requested Referrals
Referrals occur only when a Consumer explicitly requests:
contractor contact,
inspection,
claim assistance,
repair evaluation.
Section E8.2 Enterprise Acceptance or Decline
Enterprise Users may:
accept the referral,
decline without penalty,
or request more information.
Section E8.3 Lead Allocation
Policy Angel may:
rotate lead distribution,
prioritize high-rated Enterprise partners,
limit referrals during high-demand events.
ARTICLE E-9. ENTERPRISE API & INTEGRATION TERMS
Section E9.1 API Keys
Policy Angel may issue API keys for:
CRM integrations,
job management systems,
estimating software,
partner dashboards.
Keys must remain confidential.
Section E9.2 API Usage Restrictions
Enterprise Users may not:
exceed rate limits;
benchmark or test platform security;
develop competing products using API data.
Section E9.3 Revocation
Policy Angel reserves the right to revoke API access:
at any time,
for any misuse,
to protect system integrity.
ARTICLE E-10. TERMINATION (ENTERPRISE-SPECIFIC)
Policy Angel may immediately terminate Enterprise access for:
unlicensed activity,
consumer harm,
fraudulent documentation,
misuse of API,
regulatory violations,
data misuse.
ARTICLE E-11. SURVIVAL
The following provisions survive termination:
Data ownership
Indemnification
Confidentiality
Limitation of liability
API restrictions
Dispute resolution
PART III — DATA PROCESSING ADDENDUM (DPA)
This Data Processing Addendum (“DPA”) applies to all processing of Personal Information by Policy Angel, LLC (“Policy Angel”) when acting as a Controller and when acting as a Processor for Enterprise Users.
This DPA forms an integral part of the Master Terms of Service and Enterprise Addendum.
ARTICLE D-1. DEFINITIONS
Terms defined in the Master Agreement apply here. Additional DPA-specific definitions include:
(a) “Personal Information” (PI)
Information that identifies, relates to, describes, or can be linked directly or indirectly to an individual or household, as defined under applicable privacy laws.
(b) “Sensitive Personal Information” (SPI)
Includes:
precise geolocation;
account login details;
government identifiers;
racial or ethnic data (not collected by Policy Angel);
biometric data (not collected);
union membership;
health data (not collected).
Policy Angel does NOT intentionally collect most categories of SPI unless required for a specific user-authorized service (e.g., address for hazard alerts).
(c) “Processing”
Any operation performed on PI, including collection, storage, analysis, transmission, or deletion.
(d) “Controller”
Entity determining the purpose and means of processing PI.
(e) “Processor”
Entity processing PI on behalf of a Controller.
(f) “Subprocessor”
A third-party vendor engaged by Policy Angel to support processing activities.
ARTICLE D-2. ROLE OF THE PARTIES
Policy Angel functions in a HYBRID role depending on the data and context.
Section D2.1 Policy Angel as a Controller
Policy Angel is the Controller for:
Consumer User Accounts
persona scoring and analytics
risk and weather intelligence systems
app usage logs
device data
aggregated platform metrics
AI training (anonymized or aggregated)
security monitoring
fraud detection
platform improvement
enterprise referral workflows
notifications, alerts, and recommendations
Section D2.2 Policy Angel as a Processor
Policy Angel acts solely as a Processor when processing PI on behalf of Enterprise Users, including:
inspection photos, videos, and reports
adjuster notes
contractor job files
CAD diagrams or technical assessments
damage documentation
enterprise-driven data integrations
professional policy interpretation notes
invoices, estimates, or work orders uploaded by Enterprise Users
Enterprise Users are the Controllers for such data.
ARTICLE D-3. CONTROLLER OBLIGATIONS (POLICY ANGEL)
When acting as Controller, Policy Angel will:
(a) process PI lawfully and transparently;
(b) collect PI only for disclosed, user-facing purposes;
(c) minimize data collection to what is necessary;
(d) provide Users with access, correction, deletion, and opt-out rights;
(e) maintain appropriate technical and organizational security measures;
(f) not sell PI as defined under U.S. state privacy laws;
(g) limit sharing only to service providers, enterprise partners (when authorized), or as required by law.
ARTICLE D-4. PROCESSOR OBLIGATIONS (POLICY ANGEL)
When acting as Processor for Enterprise Users, Policy Angel will:
(a) Process PI only on documented instructions
The Enterprise User determines the purpose and means.
(b) Ensure confidentiality
Employees and subprocessors handling PI will be under binding confidentiality obligations.
(c) Implement security measures
Measures include encryption, access controls, data minimization, monitoring, and secure development practices.
(d) Assist the Enterprise User
Policy Angel will help Enterprise Users fulfill obligations regarding:
consumer privacy rights requests,
security obligations,
breach notification,
data retention controls.
(e) Delete or return data
Upon request or termination, Policy Angel will delete or return Enterprise Data unless retention is required by law.
ARTICLE D-5. SUBPROCESSORS
Section D5.1 Authorization
Policy Angel may engage Subprocessors for:
hosting (AWS, Google Cloud)
security monitoring
email delivery
analytics
document processing
OCR services
mapping and location services
weather intelligence
notifications and messaging
Section D5.2 Requirements for Subprocessors
Policy Angel must ensure all Subprocessors:
are under written agreements;
implement comparable security standards;
process PI only for purposes consistent with the Master Agreement.
Section D5.3 Right to Object
Enterprise Users may object to new Subprocessors if the objection is reasonable and relates to data protection. Policy Angel may provide alternative solutions or terminate the relationship.
ARTICLE D-6. DATA SECURITY MEASURES
Policy Angel implements:
(a) Encryption
Data encrypted in transit (TLS 1.2+) and at rest (AES-256).
(b) Access Controls
Role-based access, MFA for internal systems, periodic access reviews.
(c) Data Minimization
Only storing data necessary for operational features.
(d) Logging and Monitoring
Audit logs maintained for security-critical activities.
(e) Disaster Recovery
Backups, redundancy, and availability strategies.
(f) Vulnerability Management
Scheduled security assessments, patch cycles, and remediation protocols.
ARTICLE D-7. RESTRICTIONS ON PROCESSING
Policy Angel will NOT:
sell Personal Information;
use Enterprise Data for advertising or marketing;
mine Enterprise Data to train AI models in identifiable form;
combine separate datasets for cross-user profiling without consent;
ARTICLE D-8. DATA BREACH OBLIGATIONS
(a) investigate promptly;
(b) notify affected parties consistent with state privacy laws;
(c) provide remediation guidance;
(d) cooperate with Enterprise Users to fulfill regulatory obligations;
(e) document incidents and corrective actions.
ARTICLE D-9. RETENTION AND DELETION
Section D9.1 Retention
PI is retained only as long as required for:
service functionality,
legal compliance,
backup cycles,
fraud or security detection.
Section D9.2 User-Initiated Deletion
Consumers may request deletion at any time—subject to legal obligations, certain data may be retained temporarily in backups.
Section D9.3 Enterprise-Initiated Deletion
Upon Enterprise User request, Policy Angel will delete or return Enterprise Data.
ARTICLE D-10. CONSUMER RIGHTS (ALL STATES)
Policy Angel provides Users with:
(a) Right to Access
Users may request copies of their Personal Information.
(b) Right to Correct
Users may correct inaccurate PI.
(c) Right to Delete
Users may request deletion of PI, with certain exceptions.
(d) Right to Opt Out of:
automated decision systems (where applicable),
targeted advertising (Policy Angel does NOT engage in targeted ads).
(e) Right to Data Portability
Export of certain data in a structured format.
(f) Right to Appeal
For denied privacy requests (required in VA, CO, CT).
ARTICLE D-11. CROSS-BORDER DATA TRANSFERS
Data is primarily stored in the United States. If transferred internationally:
transfers will comply with applicable U.S. transfer rules;
subprocessors will be bound by equivalent protections;
Enterprise User consent is required when necessary.
ARTICLE D-12. AUDITS
Enterprise Users may conduct audits:
once per 12 months,
with 30 days written notice,
limited to data processing activities,
subject to confidentiality and operational limits.
Policy Angel may provide SOC reports or third-party audits in lieu of on-site reviews.
ARTICLE D-13. CONFLICTS
If the DPA conflicts with the Master Terms:
ARTICLE D-14. SURVIVAL
Sections on:
Confidentiality
Security
Deletion
Subprocessors
Data roles
survive termination.
PART IV — U.S. PRIVACY POLICY (LONG FORM)
Effective Date: November 1, 2025
Last Updated: November 1, 2025
1. INTRODUCTION
Policy Angel, LLC (“Policy Angel,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains:
What information we collect
Your privacy rights under U.S. state laws
How we secure and retain information
How enterprise partners access consumer data
How AI systems operate
Your choices and controls
This Privacy Policy applies to:
the Policy Angel mobile app,
the Policy Angel web platform,
APIs, widgets, dashboards, and integrations,
all Services described in the Master Terms.
By using the Services, you consent to the practices described here.
2. INFORMATION WE COLLECT
We collect Personal Information (“PI”) and non-personal information to operate the Services.
2.1 Personal Information You Provide Directly
(a) Account Information
Name
Email address
Phone number
Login credentials
Address(es) for your property
(b) Property Information
Home characteristics
Maintenance logs
Roof, HVAC, plumbing, and structural details
Photos and videos you upload
(c) Insurance Information
Policy documents
Declarations pages
Coverage limits
Deductibles
Adjuster contact information
Claim numbers
(d) Communication Data
Messages sent through the platform
Notes, forms, and contractor interactions
(e) Payment Information
Processed by secure third-party providers (Stripe, Apple, Google).
We do not store full payment card numbers.
2.2 Information Collected Automatically
(a) Device Information
Device type
Operating system
Unique device identifiers
Browser type
(b) Network & Usage Data
IP address
Log files
Date/time stamps
App actions taken
Error logs
(c) Location Data
Precise location (optional)
General location for weather/hazard alerts
This data is used to operate features such as risk alerts and storm notifications.
2.3 Information from Third Parties
(a) Weather & Hazard Providers
We receive:
storm data,
hail/wind models,
NOAA and private weather feeds.
(b) Public Records & Property Databases
We may ingest:
property assessments,
tax records,
year-built data,
parcel boundaries.
(c) Enterprise Partners
For consumers who engage with contractors or adjusters:
inspection results,
estimates,
reports,
work orders.
(d) Grant/Relief Program Databases
We access federal, state, and private resources for eligibility matching.
3. HOW WE USE INFORMATION
We use Personal Information to:
(a) Provide the Services
create and maintain Accounts
deliver risk analysis, alerts, and insights
analyze policy documents
facilitate contractor referrals
provide maintenance reminders
(b) Improve the Platform
enhance AI accuracy
optimize weather alerts
develop new tools
correct errors
(c) Personalize User Experience
offer tailored recommendations
identify potential coverage gaps (informational only)
display relevant grant programs
(d) Protect Platform Security
monitor for fraud
maintain system integrity
(e) Comply with Legal Obligations
consumer privacy requests
regulatory requirements
law enforcement requests (with valid legal process)
4. HOW WE SHARE INFORMATION
Policy Angel does not sell Personal Information.
4.1 With Your Direction
When you ask us to:
connect with an adjuster or broker
send your home data to an insurer
request a referral or quote
4.2 With Service Providers (Subprocessors)
Including:
hosting providers (AWS, Google Cloud)
email/SMS providers
document processing tools
OCR engines
analytics vendors
weather and hazard data providers
All subprocessors are under strict contractual obligations.
4.3 With Enterprise Users (If You Request Services)
name
contact information
summary of your request
property details relevant to the service
Enterprise Users are bound by the Enterprise Addendum.
4.4 For Legal or Safety Reasons
We may disclose PI when required by:
subpoenas
regulatory obligations
enforcement of agreements
fraud prevention
critical safety risks
5. HOW WE USE AI SYSTEMS
Policy Angel uses AI to:
read and parse insurance documents
detect coverage categories
organize home data
identify maintenance concerns
estimate risk factors
analyze uploaded photos/videos
support claim documentation workflows
AI Limitations
AI outputs:
may be incorrect or incomplete,
do not constitute professional advice,
must be verified independently.
Users should consult licensed professionals before acting on AI insights.
6. DATA RETENTION
We retain PI only as long as needed to:
provide Services,
comply with law,
maintain backups,
resolve disputes,
secure the platform.
Consumers may request deletion at any time.
Enterprise Data may be deleted or returned according to the DPA.
7. HOW WE PROTECT INFORMATION
We use industry-standard security measures, including:
AES-256 encryption at rest
TLS 1.2+ encryption in transit
multi-factor authentication internally
role-based access control
network segmentation
regular vulnerability assessments
logging and monitoring
firewall and intrusion prevention
No system is perfectly secure, but we maintain commercially reasonable protections.
8. YOUR PRIVACY RIGHTS (ALL STATES)
Depending on your state, you may have the right to:
(a) Access Your Data
Receive a copy of your Personal Information.
(b) Correct Inaccurate Data
(c) Delete Data
(d) Opt Out of:
automated decision-making (where applicable)
customer profiling
targeted advertising (Policy Angel does not engage in targeted advertising)
(e) Data Portability
Obtain certain data in exportable form.
(f) Appeal
If your request is denied (required in CO, CT, VA).
9. STATE-SPECIFIC RIGHTS
Full addendums appear in PART V, but high-level summaries are required here.
California (CCPA/CPRA)
You have rights to:
know what PI we collect,
request deletion,
request correction,
opt out of sharing,
limit use of SPI.
We do not “sell” PI.
Virginia (VCDPA)
You have rights to:
access, correct, delete,
request data portability,
opt out of profiling.
Colorado (ColoPA)
You have rights to:
access, correction, deletion
opt out of profiling and targeted ads
appeal denied requests
Connecticut (CTDPA)
Similar to Colorado, with restrictions on dark patterns.
Utah (UCPA)
You may request:
access
deletion
opt-out of targeted advertising
New Jersey
Consumers receive:
rights to transparency
limitations on liability waivers
restrictions on arbitration in certain consumer transactions (we include relevant carve-outs)
10. CHILDREN’S PRIVACY
Policy Angel is not intended for individuals under 18.
We do not knowingly collect data from minors.
11. DO-NOT-TRACK (DNT)
We do not respond to DNT browser settings because no uniform standard exists.
12. INTERNATIONAL USE
Data is stored in the United States. Users outside the U.S. consent to transfer and processing under U.S. law.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically. Material changes will include notice through:
email,
in-app prompts, or
updated timestamps.
Continued use after updates indicates acceptance.
PART V — STATE-SPECIFIC ADDENDUMS
These State Addendums supplement the U.S. Privacy Policy and apply only to residents of the listed states, granting additional rights and imposing additional obligations pursuant to state privacy laws.
If you reside in one of the states listed below, the corresponding addendum applies to you.
A. CALIFORNIA PRIVACY ADDENDUM (CCPA/CPRA)
Applies to California Residents Only
1. Categories of Personal Information Collected
Over the past 12 months, Policy Angel has collected the following categories of PI under California Civil Code §1798.140(v):
Identifiers
Name, email, address, phone number, device IDs.
Customer Records Information
Insurance documents, policy information, photos, videos, home records.
Protected Classification Characteristics
Not intentionally collected. If any such data appears in User Content, it is incidental and not used for profiling.
Commercial Information
Subscription history, in-app purchases.
Internet/Network Activity
IP address, device metadata, usage logs.
Geolocation Data
Professional Information
Applies to enterprise partners.
Inferences
Persona scoring, risk modeling, maintenance assessments.
We do not collect or process:
biometrics,
genetic data,
health data,
union membership,
sexual orientation.
2. California Consumer Rights
Right to Know
Request categories and specific pieces of PI collected.
Right to Delete
Request deletion of PI, subject to legal exceptions.
Right to Correct
Request correction of inaccurate PI.
Right to Data Portability
Receive data in a transferable format.
Right to Opt Out of Sharing
You may opt out of any “sharing” of PI for cross-context behavioral advertising.
Right to Limit Use of SPI
We do not use SPI for profiling or sensitive processing.
Right to Non-Discrimination
We will not penalize users for exercising privacy rights.
3. Categories of PI Disclosed
We disclose PI only to:
subprocessors
enterprise partners (if you request services)
weather data providers
insurers or contractors (only at your direction)
We do not sell PI.
4. How to Submit California Requests
Email: support@policyangel.com
Verification may be required.
B. VIRGINIA PRIVACY ADDENDUM (VCDPA)
Applies to Virginia Residents Only
Virginia residents have the following rights:
Right to Access
To know what PI we process.
Right to Correct
To correct inaccuracies.
Right to Delete
To delete PI provided by or collected about you.
Right to Opt Out Of:
targeted advertising (not applicable),
profiling that produces legal or similar effects,
sale of PI (not applicable).
Right to Data Portability
Portable, machine-readable copy of PI.
Right to Appeal
Appeal a denied request within 30 days.
We respond within 45 days.
C. COLORADO PRIVACY ADDENDUM (ColoPA)
Applies to Colorado Residents Only
Colorado residents are granted:
1. Rights to:
access,
deletion,
correction,
data portability,
opt-out of:
targeted ads (not applicable)
sale of PI (not applicable)
profiling for legal or similar effects.
2. Duty of Transparency
We clearly disclose all processing purposes and data categories.
3. Right to Appeal
We provide an internal appeals process.
4. Data Protection Assessments
Performed for:
AI systems,
persona scoring,
automated decision tools.
Colorado requires companies to minimize data, which Policy Angel complies with.
D. CONNECTICUT PRIVACY ADDENDUM (CTDPA)
Applies to Connecticut Residents Only
Connecticut provides rights similar to Colorado and Virginia, including:
access,
correction,
deletion,
data portability,
opt-out of profiling.
Dark Pattern Prohibition
All consent flows in Policy Angel (e.g., “I Agree,” data sharing prompts) comply with CTDPA standards.
E. UTAH PRIVACY ADDENDUM (UCPA)
Applies to Utah Residents Only
Utah provides:
access rights,
deletion rights,
opt-out of targeted advertising (not applicable),
opt-out of sale of PI (not applicable).
Utah does not require correction rights or data protection assessments.
Response time: 45 days.
F. NEW JERSEY PRIVACY & CONSUMER PROTECTION ADDENDUM (2025 Law)
Applies to New Jersey Residents Only
The New Jersey Consumer Privacy Law adds additional obligations:
1. Consumer Rights
Right to Transparency
Clear disclosure of data collection and use.
Right to Access, Delete, Correct
Same as California/Virginia.
Right to Opt Out
Users may opt out of:
profiling,
data sharing,
cross-context advertising.
Policy Angel does not engage in targeted advertising.
Right to Non-Waivable Protections
Certain consumer rights cannot be waived by contract:
public safety disclosures,
fraud protections,
certain liability limitations.
Policy Angel’s Terms reflect these limitations.
2. Arbitration Carve-Out (New Jersey Only)
New Jersey law restricts mandatory arbitration clauses in certain consumer contracts.
Your arbitration agreement includes an exception:
NJ residents may bring certain consumer claims in New Jersey courts,
regardless of arbitration clauses,
where non-waivable rights apply.
3. Data Handling Requirements
New Jersey requires:
stricter breach notification,
explicit disclosure of automated systems,
transparent data retention schedules,
Policy Angel complies with these standards.
G. OTHER STATES WITH EMERGING PRIVACY RIGHTS
As additional U.S. states enact new privacy laws, Policy Angel will:
update these addendums,
notify Users of major changes,
apply rights to Users where legally required.
H. HOW TO SUBMIT A PRIVACY REQUEST (ALL STATES)
You may submit privacy requests by contacting:
Email: support@policyangel.com
Mail: Policy Angel, LLC
111 E. Washington St., Orlando, FL 32801
We verify identity before responding.
I. RESPONSE TIME (ALL STATES)
We respond:
within 45 days,
with a possible 45-day extension if reasonable.
If a request is denied:
Users may appeal within 30 days (where required).