Privacy Policy

1. Scope

IVY Operations is an internal application used by MIG Benefits staff to manage prospects, clients, carrier data, renewals, governance, and service activity. This policy describes how MIG Benefits handles data entered into or generated by the application.

2. Data we collect

• Account information: name, email, role, team, and phone (optional) supplied at onboarding.
• Business records: prospect, client, contact, carrier, renewal, meeting, task, and service-request details entered by staff.
• Documents: files uploaded to client or governance records.
• Activity logs: in-app actions attributed to a user for audit and troubleshooting.
• Session data: authentication tokens stored in your browser and standard request metadata.

3. How we use data

Data is used solely to operate the application: authenticate users, display and manage records, generate reports, notify assignees, and maintain security and audit trails. MIG Benefits does not sell personal data.

4. Access controls

Access is restricted to authorized MIG Benefits personnel who sign in with an account. Row-level security policies scope records to signed-in users based on role and ownership. Administrative actions require elevated privileges.

5. Data storage and processing

The application runs on the Lovable Cloud platform, which uses managed database, auth, and hosting infrastructure. Data is encrypted in transit over HTTPS/TLS and encrypted at rest by the underlying platform. This page does not constitute an independent certification.

6. Retention

Records are retained for as long as they are needed to operate the business or as required by applicable law. Deleted records may persist in encrypted backups for a limited period before being removed.

7. Your rights

Staff users may review and correct their profile in Settings. Requests to access, correct, or delete records should be directed to your MIG Benefits administrator or the contact below.

8. Contact

Questions about this policy can be sent to privacy@migbenefits.com.