Privacy Policy

1. Overview

Palisade Zenith ("we", "us") is a private platform operated for licensed insurance agents affiliated with Pinnacle Life Group. This Privacy Policy explains what information we collect, how we use it, and the limited circumstances in which we share it.

2. Information We Collect

• ·Account information you provide: name, email address, NPN (when applicable), profile photo, contact email, and your relationship to your upline manager.
• ·Activity data you create within the platform: daily KPIs, sales, recordings, comments, action items, and notes.
• ·Carrier portal credentials you choose to store: encrypted at rest with AES-256-GCM. Only you (and platform administrators acting at your request) can view the decrypted values.
• ·If you sign in with Google: authentication is handled by Supabase Auth. We use only your basic Google profile (name and email) to create your account, and do not request access to Gmail, Drive, Calendar, or Contacts.

3. How We Use Information

• ·To operate the platform: render your dashboard, route announcements, surface team metrics to your manager, deliver onboarding curriculum.
• ·To send transactional email via Resend: phase-advancement requests to your upline, signup notifications. We do not send marketing email.
• ·To enforce platform rules: rate limiting, audit logs, suspicious-activity detection.

4. Sharing of Information

We do not sell or rent your personal information. Limited information is visible inside the platform per your role: your manager can see your KPIs and progression; cross-team leaderboards show display name and aggregated metrics only. Sensitive fields (carrier passwords, encrypted columns, personal volume) are scoped to you and platform administrators.

5. Third-Party Service Providers

• ·Supabase — database, authentication, and file storage. Hosted in the United States (AWS US West).
• ·Vercel — application hosting, plus Vercel Analytics and Speed Insights: cookieless, aggregated page-view and performance measurement. These do not set cookies, do not track you across sites, and are not advertising tools.
• ·Resend — delivers our transactional email (phase-advancement requests, signup and license notifications).
• ·Anthropic — powers the Sales Trainer: your practice-call text (and the AI’s replies and scoring) is processed by Anthropic’s Claude models to run the simulation.
• ·ElevenLabs — synthesizes the Sales Trainer’s spoken voice from the AI’s reply text.
• ·Discord — when a deal closes, an announcement (agent name and avatar, carrier/product, annualized premium, lead type) is posted to the agency’s private Discord server. Client names are not included.
• ·Upstash — rate limiting; sees only hashed/opaque request keys, never content.
• ·Sentry — error monitoring, used to alert us when something in the platform breaks.
• ·We share with these providers only what each needs to perform its function. None of them may use your information for their own marketing.

6. Data Retention

Account and activity data are retained for the lifetime of your account. If you leave Pinnacle Life Group, your account is deactivated; data may be retained for compliance and audit purposes per applicable insurance regulations. Encrypted carrier credentials are removed when you delete the corresponding entry.

7. Your Choices

• ·You can delete carrier-portal credentials from /carriers-licenses.
• ·For account deletion or data export requests, contact your platform administrator.

8. Security

Data is hosted on Supabase (United States — AWS US West) and Vercel. Authentication is handled by Supabase Auth with email + password or Google OAuth. Carrier passwords use AES-256-GCM with a key held in our infrastructure secret store. We use TLS for all in-transit traffic and standard at-rest encryption for the underlying database.

9. Cookies

We set a single first-party cookie required for your Supabase auth session. We do not use advertising cookies or cross-site trackers. Vercel Analytics and Speed Insights (see Third-Party Service Providers) are cookieless and measure aggregate usage and performance only.

10. Client Information

• ·Agents record information about insurance clients in the course of business: client names, policy and premium details on logged deals, and — where the client has consented — recordings of sales calls.
• ·Call recordings require an uploader attestation that every recorded participant consented, as required by the applicable state’s law. Recordings are stored in a private bucket and are only reachable by authenticated, approved agents through short-lived signed links.
• ·Client information is used solely for the agency’s legitimate business purposes: production tracking, compensation, coaching, and compliance. It is never sold, rented, or used for marketing.
• ·When a recording is deleted in the app, the underlying audio file is deleted from storage as well.

11. Changes to This Policy

We may update this Privacy Policy as the platform evolves. Material changes will be communicated via in-app notice. The "Last updated" date below reflects the most recent revision.