Your data. Clear boundaries.

01What is available today

PolicySnap is still being built, so it matters that we are clear about which parts are working and which are examples.

On this website

The car-tool demonstrations and quote journey use fictional example details. Our guides provide general information. The website does not read your insurance documents, does not produce real quotes and is not connected to a live comparison service. Nothing you see on the site is an offer of insurance.

On WhatsApp

Structured checks and voice notes are being tested with a limited group of people. Open-ended, generative conversation and a public production number are not available yet.

Still to come

Reading an uploaded insurance document, explaining it back to you and comparing prices are planned features. When they arrive we will describe how they work, and who processes the information, before you use them.

02How we use AI

Our intention is that AI does the tedious part: pulling the details out of a document and explaining insurance wording in plain English, so you do not have to re-type or decode anything.

What is actually running today is narrower than that. In the limited WhatsApp trial, a voice note is transcribed using Cloudflare Workers AI so we can understand what you asked for. The application does not keep the recording or a separate transcript of it. The interpreted result — for example the vehicle details we understood — and the technical information needed to protect the conversation are kept only briefly.

Messaging platforms and device backups keep their own copies of what you send, and each provider handles information under its own terms. That is outside our control, and we do not claim otherwise.

03Is my information used to train AI?

Processing a message or document to help with your request is different from using it to train a model. Provider terms and the settings for each feature determine what happens to that information.

For the Cloudflare Workers AI service used in our voice-note trial, Cloudflare states that it does not use customer content to train its models or improve its own or third-party services without explicit consent — see Cloudflare’s Workers AI data policy. That is the provider’s published policy for that service. It does not cover copies kept by messaging platforms or your own device, and it is not a guarantee we can give on any other provider’s behalf.

Before introducing document-reading or generative chat features, we will explain which providers process the information and the training and retention terms that apply.

If you want to know what applies to a specific feature, email data@policysnap.io and we will tell you what is in place at that time.

04Protecting information

This website

The site is served through Cloudflare, which also provides security protection in front of it, and both signup forms use Cloudflare Turnstile to check that a submission comes from a real browser and to reduce automated abuse.

The WhatsApp trial

In the limited trial, credentials for the services we use are held on the server and never in your browser or the chat, incoming WhatsApp webhooks are signature-verified, and the state that carries a conversation forward is encrypted and short-lived. These protections have been verified in the trial setup, not at public production scale.

We take care with the information we hold, but no website or online service can be guaranteed completely secure, and we will not tell you otherwise.

05Retention and your choices

Different information is kept for different lengths of time. The detail lives in our privacy policy — how long we keep information — and this is the summary.

• Website analytics is off until you accept it, and you can change your mind at any time using ‘Privacy choices’ in the footer. Analytics information is kept on its own timescale, which is set out in the privacy policy.
• Email signups are kept while you are subscribed, and unsubscribing works immediately.
• Documents and check details — once that part of the product is live, the planned rules are that original uploaded documents are deleted within 28 days, personal information collected for a check is deleted within 28 days unless you explicitly choose to save it, and saved account details are deleted after 24 months of inactivity. These are the rules we are building to; the document pipeline is not running yet.

We use a small number of providers to run the site, including Loops for email, Cloudflare for hosting and security, Lovable for application hosting, and PostHog and Google for analytics if you accept them. They are all listed, with links to their own privacy information, in the privacy policy.

06Standards and assurance

We will only list certifications here once they have been independently awarded to PolicySnap. A technology provider’s certification is not a certification of PolicySnap.

We are registered with the Information Commissioner’s Office under reference ZC224572, and we build to the retention and transparency commitments set out in our privacy policy.

07Questions about your data?

Email data@policysnap.io and a real person will reply. Ask what we hold, how a particular feature works, or ask us to correct or delete something.

Your full set of choices — access, correction, deletion, withdrawing consent and objecting — is set out in your rights and choices.