PRIVACY POLICY

01Information We Collect

ORLO is a sales production and performance-tracking platform for insurance sales teams. We collect the information needed to operate that service for you and your organization.

• Account information: your name, email address, phone number, and role within your organization.
• Production data: the insurance applications you submit, including documents you upload, parsed policy fields, carrier, premium, and effective dates.
• Activity data: clock-in/out times, presentations logged, rank score, quests, achievements, and leaderboard standings.
• Client records: policyholder details contained in the applications you submit, maintained on your organization's behalf.
• Usage and device data: log data, IP address, browser type, and interactions with the platform.
• Authentication data: handled by our identity provider; we never store your password.

02How We Use Your Information

We use the information we collect to provide and improve the platform, and for no purpose incompatible with the service you signed up for.

• Operate core features: application parsing, commission and override tracking, leaderboards, ranks, quests, and achievements.
• Authenticate you and secure your account.
• Surface production analytics and reporting to you and your authorized team leads and administrators.
• Send service-related notifications (in-app, Discord, and email) you have not opted out of.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

03Data Storage and Security

Your data is stored on managed cloud infrastructure in the United States. Uploaded documents are encrypted at rest, and all data is transmitted over encrypted connections.

We restrict access to your data to the people and systems that need it to operate the service. While no method of transmission or storage is completely secure, we maintain administrative, technical, and physical safeguards designed to protect your information.

04Third-Party Services

We rely on a small set of trusted service providers to operate ORLO. These providers process data only to provide their services to us and are bound by their own privacy and security commitments.

• Supabase: authentication and identity management.
• Amazon Web Services (AWS): application hosting, database, and encrypted document storage and processing.
• Discord: notifications and bot interactions for organizations that use the Discord integration.
• Plaid: when implemented, used to support payment and deposit verification features. We will update this policy before any such processing begins.

05Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or request deletion of your personal information. Because ORLO is operated on behalf of your organization, some requests are fulfilled through your organization's administrator.

To exercise your rights, contact us using the details below or speak with your team administrator. We will respond consistent with applicable law.

06Data Retention

We retain your information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Certain records, such as in-app notifications, are deleted automatically after a set period.

07Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at hello@joinorlo.com.