Privacy Policy

1. Introduction

This Privacy Policy explains how LossStack collects, uses, shares, and protects information across LossStack One, LossStack Field, associated mobile applications, client portals, APIs, integrations, AI-assisted features, and other LossStack services (collectively, the “Services”). LossStack often processes information on behalf of customer organizations that use the Services.

2. Information We Collect

We collect account and profile information, organization and role details, customer-submitted content, communications, billing details, and technical information generated when people use the Services. The information collected depends on the features a customer or user chooses to use.

3. Customer and Claim Data

Customer and claim data may include insured and homeowner details, property information, loss facts, estimates, contacts, assignments, contents inventories, signatures, and information about contractors, adjusters, inspectors, attorneys, public adjusters, engineers, vendors, and other claim participants.

4. Photos, Documents, Audio, and Inspection Data

The Services may process photos, videos, documents, measurements, LiDAR or spatial data, inspection notes, voice recordings or transcriptions, reports, messages, signatures, and other evidence submitted through claim and field workflows.

5. Location Information

With user or device permission where required, LossStack may process precise or approximate location information for inspections, mapping, measurements, routing, assignments, time or location verification, and similar user-enabled field features. Device settings can control location permissions, although some features may then be unavailable.

6. AI-Assisted Features

AI-assisted features may process customer-provided information to produce narratives, summaries, classifications, extracted information, recommendations, or other requested outputs. AI output can be incomplete or incorrect. Users are responsible for reviewing it before relying on it in a claim, professional, legal, financial, safety, or business decision.

7. Communications

We process messages, support requests, portal communications, email, SMS, and notification preferences to deliver requested communications, coordinate claim work, provide support, and maintain relevant records.

8. Usage and Device Information

We may collect browser and device type, operating system, IP address, identifiers, timestamps, feature usage, diagnostics, log data, and security events to operate, secure, troubleshoot, and improve the Services.

9. Billing Information

Billing and transaction information is used to administer subscriptions and purchases. Payment card information is processed by payment providers; LossStack does not claim to store full payment card numbers.

10. How We Use Information

• Provide, operate, support, secure, and improve the Services.
• Authenticate users and enforce organization, role, and permission boundaries.
• Process claims, inspections, reports, measurements, assignments, integrations, and other requested workflows.
• Send transactional communications and respond to support requests.
• Administer billing, prevent fraud and abuse, and comply with law.

11. How We Share Information

LossStack does not sell customer claim data. We may share information with authorized customer users and claim participants, service providers, subprocessors, and integrations as needed to provide requested features; when directed by a customer; to protect rights and security; in a business transfer; or when required by law or valid legal process.

12. Service Providers and Subprocessors

LossStack uses providers for infrastructure, storage, communications, payments, analytics, support, security, and AI-assisted or other product functions. They may process information only as needed to provide their services to LossStack and subject to applicable contractual and legal obligations.

13. Third-Party Integrations

When a customer connects a third-party service, LossStack may exchange information with that service as directed by the customer. Third-party services have their own terms and privacy practices, and customers should review them before enabling an integration.

14. Data Ownership

Customer organizations retain ownership of the business, claim, inspection, photo, document, and related content they submit to LossStack. Customers grant LossStack the rights necessary to host, process, transmit, display, and otherwise handle that content to provide, secure, and support the Services.

15. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, satisfy contractual commitments, resolve disputes, and comply with law. Retention varies by data type, customer settings, account status, backup cycles, and legal requirements.

16. Security

LossStack uses safeguards that may include encryption in transit, infrastructure storage protections, authentication, authorization, access controls, organization-level isolation, logging, and secure file handling. No system can guarantee absolute security. Report suspected vulnerabilities to security@lossstack.com.

17. Cookies and Similar Technologies

LossStack may use cookies, local storage, and similar technologies for authentication, security, preferences, service operation, analytics, and performance. Browser controls can limit these technologies, but doing so may affect functionality.

18. Your Privacy Choices and Rights

Users may manage certain account, communication, device, and integration settings through the Services or their devices. Depending on applicable law and LossStack's role, individuals may request access, correction, deletion, portability, restriction, or objection. Customer organizations may need to handle requests involving data they control.

19. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable privacy laws. LossStack will not discriminate against a person for exercising an applicable privacy right. Submit requests to privacy@lossstack.com; identity and authority may need to be verified.

20. Children's Privacy

The Services are intended for business and professional use and are not directed to children under 13. LossStack does not knowingly collect personal information directly from children under 13 through public account registration.

21. International Users

Information may be processed in countries other than the one where it was collected. Where required, LossStack uses appropriate measures for cross-border processing. Users are responsible for ensuring they have authority to submit information to the Services.

22. Business Transfers

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law and appropriate protections.

23. Changes to This Policy

We may update this Policy as the Services or legal requirements change. We will post the revised version and update its effective date, and will provide additional notice when required.

24. Contact Us

For privacy questions or requests, email privacy@lossstack.com. For vulnerability or security reports, email security@lossstack.com.