How we handle your data

By default: nothing is stored

RenewalOwl's coverage check doesn't require a signup, and by default it doesn't store your policy. When you upload a declarations page, it's encrypted in transit, read to extract your coverage details, and then discarded — nothing about that upload is written to a database. This is true for every check unless you explicitly opt into Renewal Watch below.

If you opt into Renewal Watch

Renewal Watch is a free, opt-in feature offered on the results screen: it re-checks your coverage before your policy renews and emails you if there's a real move to make. Turning it on is the one case where we keep something after your session ends. If — and only if — you check the consent box and submit, we save:

• Your email address, so we can reach you.
• Your renewal date, state, and carrier, so we know when and what to re-check.
• The coverage numbers our analysis already extracted (limits, deductibles, and similar figures) and your personalize-step answers.

We never save the uploaded document itself — only the structured numbers above, and those are encrypted at rest. You can delete everything we've saved at any time, with one click, right from the Renewal Watch card where you opted in.

If you save your plan in the Needs Analyzer

The Life Needs Analyzer doesn't require a signup either — by default, it computes your plan and shows it to you, and nothing about that session is written to a database. Saving your plan is a free, opt-in feature offered on the results screen: it keeps your plan so you can come back to it, and can check in when your life changes. If — and only if — you check the consent box and submit, we save:

• Your email address, so we can reach you.
• Your answers to the questionnaire (income, dependents, mortgage, and similar figures) and the computed plan (your recommended coverage, term, and breakdown).
• If you choose to, which life changes you're expecting (like a new baby or a home purchase) and whether you'd like us to check in with you in about a year — this is entirely optional and only used to decide when to send you the one re-check email below.

The Needs Analyzer never involves a document upload in the first place — there is nothing to save beyond the numbers above, and those are encrypted at rest. You can delete everything we've saved at any time, with one click, from the link in any email we send you.

If you flagged a life change or asked us to check in with you in about a year, we'll send a single low-key email when it's due, inviting you to see whether your number has changed — never a warning, and we won't know if anything actually changed until you look. If a scheduled check-in passes and goes unused for about six months, we automatically delete the saved answers and plan for that check-in, the same way a one-click delete would.

Product analytics

We track a small set of anonymous, aggregate events — like when a results screen is viewed or which questionnaire step someone's on — so we can see which parts of these tools people actually use. This is cookieless: no cookies, no browser storage, and no identified visitor profile is ever created. We never send your answers, email address, or any other personal figures (income, health, coverage amounts, ZIP code) to this system — only the name of the event and, where relevant, the identifier of the step or screen, never the value you entered.