How we handle your data

You are a broker. The documents you are about to upload belong to your clients, not to you, and you are the one who has to answer for them. So this page is written to be checked, not skimmed: every claim below describes what our code actually does, and we have tried to be specific about the things most policies leave vague.

Two different things are covered here. The free Renewal Breakdown tool is anonymous and needs no account. The Zenewals workspace is still in development and is covered at the bottom.

The free Renewal Breakdown tool

Your PDF is deleted, not stored

When you drop in a renewal letter, the file is sent over an encrypted connection to private storage, read once by Claude to pull out the rates, and then deleted from our storage. That deletion runs on every path, including when the extraction fails. A letter we could not read is not a letter we keep.

The file is never public, never attached to an email, and no one at Zenewals sits and reads it.

What we do keep

We keep the table, not the document. That is what makes your shareable link and CSV work after the PDF is gone:

• The extracted breakdown itself: plan names, tiers, rates, rate changes, effective date, and the group name if it appeared on the letter.
• The file name, file size, and a checksum of the file. Not its contents.
• A one-way hash of your IP address, so we can rate-limit abuse. We do not keep the address itself.
• Your browser's user-agent string, and the AI token counts for the run so we can track what the tool costs us.
• Your email address only if you choose to give it to us.

The breakdown is deleted after 90 days

The extracted table is not kept forever. Ninety days after you run a letter, the whole record is deleted automatically, and the shareable link stops working. A renewal cycle runs 60 to 90 days, so the window covers the life of the document you uploaded and then closes.

Your shareable link is public to anyone holding it

Each breakdown gets a link with a long random ID. It is not listed anywhere and search engines are not pointed at it, but it is not password protected either. Anyone who has the URL can open the extracted table. Treat the link exactly as carefully as you would treat the table itself.

Nothing from the free tool trains anything shared

Zenewals does get better at reading each carrier's letter format over time. Uploads from this free tool are deliberately excluded from that. They are never folded into the shared carrier-format knowledge that other agencies' extractions draw on, and an anonymous upload cannot add a carrier to our registry. That exclusion is enforced in code, not by policy alone. It is there because letting anonymous strangers shape a shared system is both a privacy problem and a security one.

Who else touches your file

• Anthropic (Claude): reads the PDF and returns the structured rates. Under Anthropic's commercial terms, inputs and outputs sent through their API are not used to train their models.
• Supabase: our database and the private storage the file passes through, hosted in the United States.
• Vercel: runs the application itself, in a US region.
• PostHog: product analytics. It receives the carrier name and counts (how many plans, how many rate cells, how long it took, what it cost). It does not receive your group name or the rates.
• Sentry: error monitoring, so we hear about failures.
• Resend: sends email, and only ever sees an address you gave us.

What you should not upload

This tool is built for carrier renewal letters, meaning plan, tier, and rate information. Please do not upload documents containing individual employees' health information, claims detail, Social Security numbers, or anything else you would need a business associate agreement to hand to a vendor. Zenewals is not acting as a HIPAA business associate today and we do not sign BAAs yet. We would rather tell you that plainly than let you assume otherwise.

Getting a breakdown deleted

Email hello@zenewals.com with the link and we will delete the record, no account or verification dance required. You do not have to explain why.

The early-access list

If you join the early-access list, we keep your email address and your agency name if you gave one. We use it to tell you when access opens. We do not sell it, we do not share it, and using the free tool does not put you on any list on its own.

The Zenewals workspace

The full product is still being built. When it launches, your groups, letters, and comparisons will live in your own agency's workspace, visible to the people you invite. Before anyone pays us anything, we will publish a fuller policy covering retention, subprocessors, and exactly where we stand on business associate agreements.

Questions

Email hello@zenewals.com. If something on this page does not match what you observe the product doing, we want to hear about it. That is a bug, and we will treat it as one.