Privacy policy
Last updated October 26, 2026
BOR Desk is software for insurance agencies, built and run by Stratfield Partners LLC ("we"). This policy explains what information we handle and why.
Two kinds of information
Customer information. When an agency buys BOR Desk, we collect the business name, contact name, email, phone and billing address. Payments are handled by Stripe. We do not see or store full card numbers.
Agency data. Each agency uses its own private copy of BOR Desk. The agency decides what goes into it: its clients, policies, uploaded documents, signatures and notes. We handle that data only to run the service for that agency. We do not use it for advertising, sell it, or combine it with another agency's data.
How agency data is processed
- Hosting and storage. Cloudflare hosts the application and stores its database and files.
- Reading documents. When you upload a declarations page or a transcript, its contents are sent to an AI provider (Anthropic, and Google Gemini as a backup) so it can be read into fields you then confirm. These providers process the content to return a result for you.
- Payments. Stripe processes setup and subscription payments.
- Signing. When a client signs, we record the signature, the time, the IP address and browser, and an audit trail. This record is kept with the signed documents for the agency.
Google user data
If an agency connects Gmail, BOR Desk asks only for permission to create email drafts in that agency's own account. It does not send email, and it does not read, search or delete messages. Drafts are created only when the agency asks for them, and only contain documents from that agency's packets.
BOR Desk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Keeping and deleting data
Agency data stays for as long as the agency is a customer. After cancellation, the agency can ask for an export of its files and for deletion of its data, and we will do both within 30 days of the request. Signed documents and certificates are the agency's records, so keep your own copy.
Security
Each copy of BOR Desk sits behind a login. Data is encrypted in transit and at rest by our hosting provider. Signing links are random, single-use and expire. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you promptly.
Your choices
You can ask to see, correct, export or delete the information we hold about you or your agency. Clients of an agency should contact the agency first, because the agency controls its own data.
Contact
Questions about this policy: nick@stratfieldpartners.com