PRIVACY POLICY

At EOICart.ai, operated by Southland Ventures, Inc., we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, and safeguard your data when you use our portal. Our offices are located at 333 City Blvd W, 17th Fl, Orange, CA 92868.

1. INFORMATION WE COLLECT

To provide automated ACORD 27 issuance, we collect the following categories of information:

• Policy Information: Policy numbers, insured names, and property addresses provided by you or your Insurance Agency.
• Lender/Broker Data: Names, professional email addresses, NMLS IDs, and employer information.
• Transaction Data: We use Stripe for payment processing. EOICart.ai does not store full credit card numbers; we receive a "token" and transaction confirmation from Stripe.
• Device & Usage Data: IP addresses, browser types, and timestamps (collected for fraud prevention and audit logs).

2. HOW WE USE YOUR INFORMATION

We use the collected data strictly for:

• Fulfillment: Generating the requested ACORD 27 document.
• Verification: Sending 2FA links to policyholders to confirm change requests.
• Revenue Sharing: Tracking transaction volume to facilitate fee-splitting with Insurance Agencies.
• Security: Monitoring for fraudulent activity or unauthorized access to insurance records.

3. DATA SHARING & DISCLOSURE

We do not sell your personal information to third parties. We share data only in the following contexts:

• With Insurance Agents: The Agent of Record receives a copy of every document and transaction initiated for their clients.
• With Financial Institutions: The ACORD 27 form is delivered to the lender/mortgagee you designate.
• Service Providers: We share data with Stripe (payments) and our cloud hosting providers (Abacus.AI/AWS) to maintain the service.
• Legal Compliance: If required by law or a valid subpoena from a regulatory body (such as the California Department of Insurance).

4. DATA RETENTION

We maintain audit logs and copies of issued ACORD 27 forms for a period required by state insurance regulations (typically 5–7 years) to protect the Agent and Policyholder in the event of a future claims dispute.

5. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)

As a California-based company, we comply with the CCPA. California residents have the right to:

• Know what personal information is being collected.
• Delete personal information (subject to certain legal exceptions for insurance record-keeping).
• Opt-out of the sale of personal information (though we do not sell your data).
• Non-discrimination for exercising these rights.

6. SECURITY MEASURES

We implement industry-standard encryption (SSL/TLS) for all data in transit. Access to the portal's backend is restricted via multi-factor authentication (MFA) to prevent unauthorized viewing of policyholder data.

7. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: