Privacy and integration data use
Effective October 6, 2026. This policy explains how Shoreva handles account information, agency work, and data from authorized integrations.
Information we collect
We process sign-in and workspace information, agency settings, and the records you or your agency provide: client and policy information, documents, messages, service requests, call information, assistant conversations, ratings, and saved preferences. When an agency authorizes HawkSoft access, we retrieve the client and policy data available under that agency’s granted permissions. Credentials are stored encrypted and used by the server connector.
How we use information
We use this information to operate your agency workspace, synchronize authorized records, answer requests, prepare drafts, route work, and record approved actions. Eva may use relevant agency records and uploaded content as context when responding. Ratings, edits, and preferences may improve future writing and product behavior. Agency users should provide only information they are authorized to process.
Service providers and AI processing
Shoreva uses Vercel for hosting, Supabase for database and file services, Clerk for authentication, and configured AI services including OpenAI to process assistant requests. Relevant prompts, document content, and agency context may be sent to the configured AI provider. Connected Microsoft services and optional voice providers process information when those features are enabled. Provider retention and any training use depend on the applicable provider agreements and account settings; this policy does not promise zero retention. Ask Shoreva for the provider configuration applicable to your agency before enabling processing of restricted information.
HawkSoft authorization and external actions
HawkSoft access requires partner approval, agency subscription and consent, and valid credentials. Agency staff must review and confirm activity writes. Permission to create an activity log does not authorize changes to insurance coverage, binding, cancellation, or issuance. A queued provider response is shown as pending creation. Your agency remains responsible for authorizing access and reviewing generated work.
Storage, retention, and disconnecting
Agency work is stored in the agency workspace with access controls. Disconnecting HawkSoft stops future synchronization; it does not automatically delete imported records, drafts, completed work, or audit history. Retention follows agency configuration, operational requirements, and applicable agreements. Credential revocation destroys the stored credential material. Contact us to request access, correction, export, or deletion of information; we verify authority and explain any records that must be retained.
Security and disclosures
We use authentication, agency access controls, encryption for integration credentials, and operational audit records. Information is disclosed to service providers to deliver enabled services, to recipients your agency authorizes, or where required by applicable law. No system is guaranteed free of risk, and generated outputs require appropriate human review.
Contact and changes
For privacy questions or requests, contact andrew@shoreva.ai. We publish material updates here with an updated effective date.