Privacy Policy

At Constelle, your privacy is foundational to everything we build. This Privacy Policy explains what personal information we collect when you use our AI-powered insurance assistant, why we collect it, how we use and protect it, and the choices you have. Constelle is not an insurer; we help you understand and manage your coverage. By using the Service, you agree to the practices described in this Policy.

1. Information we collect

We collect several types of information to provide and improve the Service. Information you provide includes your name, email address, account details, and the insurance policies, documents, and coverage details you upload or enter. Information collected automatically includes details about your device, browser, usage activity, and interactions with the Service, such as log data, IP address, and cookies, which are described further in our Cookie Policy.

Information from connected services. When you choose to connect an external account — such as your bank, email, or calendar — we retrieve only the information you authorize, and only to deliver the features you requested. Connecting a service is always optional and never required to use the core Service.

2. How we use your information

We use your information to operate, maintain, and secure the Service; to read and summarize your policies; to identify potential gaps in your coverage and generate personalized recommendations; to keep your activity feed and reminders accurate; to communicate with you about your account and important updates; to detect and prevent fraud and abuse; and to improve and develop our products. We do not sell your personal data.

3. AI processing

Constelle uses artificial intelligence and machine-learning models to analyze the documents and details you provide and to generate summaries, insights, and suggestions. This processing happens to provide you with useful, personalized assistance. We take care to limit the data we use for product improvement, and we will not use your personal information in a way that conflicts with the choices described in this Policy.

4. Legal bases for processing

Where applicable data-protection law applies, we process your personal information on the following bases: to perform our contract with you, for example by providing the Service you requested; with your consent, such as when you connect an external account or opt in to communications; to comply with our legal obligations; and for our legitimate interests, such as improving security, preventing fraud, and developing our Service, balanced against your rights.

5. Sharing and disclosure

We share your information only in limited circumstances: with service providers and processors who help us operate the Service under appropriate data-protection terms; when you direct us to share information, for example by following a link to an insurer; to comply with legal obligations or respond to lawful requests; and in connection with a merger, acquisition, or sale of our business, subject to confidentiality protections. We require our vendors to use your information only to provide services to us.

6. International transfers

Because we and our service providers may process information in different countries, your information may be transferred to and processed in a country other than your own. Where this happens, we use safeguards such as standard contractual clauses to help protect your information consistently with this Policy.

7. Data retention

We keep your personal information only as long as we need it to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account or ask us to delete your information, we remove it or anonymize it, except where we are required to retain it by law.

8. Security

We use technical and organizational measures designed to protect your information, such as encryption in transit, access controls, and regular security review. No system is perfectly secure, so we cannot guarantee absolute security, but we work to keep your information safe and will notify affected users and regulators where required by law in the event of a breach.

9. Your privacy choices and rights

You are in control. You can review and update your account information, connect or disconnect external accounts at any time, manage or disable optional cookies in your settings, and opt out of marketing communications. Depending on where you live, you may also have rights to access, correct, export, or delete your personal information, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us through the Contact page, and we will respond within the time required by law.

10. Children

The Service is not directed at children under eighteen (18), and we do not knowingly collect personal information from them. If you believe a child has provided us with information, please contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will notify you through the Service or by other reasonable means and update the “last updated” date. Your continued use of the Service after a change takes effect means you accept the revised Policy.

12. Contact

If you have questions about this Privacy Policy or your personal information, contact us through the Contact page on our website. We are committed to helping you understand and exercise your privacy choices.