Privacy Policy

Who we are

Refuge Memorial ("we", "us") operates this platform for our life-insurance agents and managers. It is used for agent training and onboarding, appointment scheduling, marketing-campaign management, and team performance tracking.

Information we collect

• Account information — name, email address, phone number, state licensing details, and role, provided when you sign up or when an administrator creates your account.
• Operational data — training progress, appointments, campaign and payment records, and performance metrics generated through normal use of the platform.
• Payment data — campaign payments are processed by Stripe. We store payment amounts and references; we never see or store card numbers.

Google user data (Google Calendar)

Managers may optionally connect their Google Calendar so agents can book onboarding appointments during open time slots. When a manager connects their calendar:

• We request the calendar.freebusy and calendar.events scopes.
• We read free/busy availability only to determine open appointment slots. We do not read the titles, descriptions, attendees, or contents of your existing events.
• We create a calendar event when an agent books an appointment, and delete that event if the appointment is cancelled. We do not modify any other events.
• OAuth tokens are stored encrypted in our database and are used solely to perform the actions above. You can disconnect your calendar at any time from the availability settings, which revokes our access.

Refuge Memorial's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as needed to provide the scheduling feature described above.

How we use information

• To operate the platform: training, scheduling, campaigns, payments, and performance reporting.
• To send transactional emails such as account setup links, password resets, appointment confirmations, and campaign notifications.
• To meet our legal and regulatory obligations as an insurance organization.

We do not sell personal information to anyone.

Sharing

We share data only with service providers needed to run the platform — hosting (Railway), email delivery (Resend), payments (Stripe), and Google (Calendar integration) — each bound to use it only to provide their service to us.

Data retention & deletion

We retain account and operational records while your account is active and as required by insurance regulations. To request deletion of your account or your connected Google data, contact us at the address below; disconnecting Google Calendar immediately revokes our calendar access and we delete the stored tokens.

Security

Data is transmitted over TLS and stored in access-controlled databases. Passwords are stored as salted hashes, and OAuth tokens are held server-side and never exposed to the browser.

Contact

Questions or requests about this policy: keyescode@gmail.com.