Privacy Policy

Cornerstone is software for licensed insurance professionals. It is operated by Cornerstone (“Cornerstone,” “we” or “us”) at cornerstone.gold. This policy explains what we collect, how we use it, who can see it and how long we keep it. It applies to the website, the application and every service we provide through them.

Three kinds of people appear in Cornerstone. Members are the agents, managers and administrators who sign in and use a workspace. Clients are the people whose information a member enters: a household, a prospect, a policyholder. Visitors are people who read a member’s public page or fill in a form on it. This policy covers all three. If you are a client or a visitor and want to know what a member holds about you, contact that member. They control that information and we act on their instructions.

By using Cornerstone you agree to this policy. If you do not agree, do not use the service.

Information you give us

Account information. Your name, email address, role in your workspace, and the sign-in identity provided by our authentication provider. If you pay for Cornerstone, our billing provider holds your payment details; we hold only your customer and subscription identifiers.

Workspace content you create. Client and household records, notes, uploaded documents, call recordings and their transcripts, facts extracted from those inputs, and documents Cornerstone generates for you such as summaries and needs analyses.

Profile details you choose to share. Licensing, sales focus and goals you enter during onboarding.

Information collected automatically

Usage information. Which features you use, when, and for how long; browser and device type; and the technical logs needed to keep the service running and secure. We do not record your screen.

Cookies. We use a session cookie to keep you signed in and a small number of first-party cookies to remember preferences such as your theme. We do not use advertising cookies or third-party trackers.

• To run the service you signed up for: storing your workspace, finding things in it, and generating the documents and answers you ask for.
• To bill you, support you, and tell you about changes to the service.
• To keep the service secure and to understand how it is used, in aggregate.
• To comply with law and to enforce our terms.

We do not sell personal information. We do not share it for advertising. We do not use your workspace content to train models, and our providers are prohibited from doing so too.

Cornerstone uses large language models and speech-to-text models from the providers named under Subprocessors to read your notes and documents, transcribe your recordings, answer your questions about a case, and draft documents. To do that, the relevant content is sent to those providers under contracts that prohibit them from using it to train their models and require them to delete it after processing.

AI output can be wrong. Every generated answer or document in Cornerstone is labeled as AI-generated and cites the material it drew from. It is assistance for a licensed professional, not advice to a client, and you are responsible for verifying it before you rely on it.

Cornerstone does not use AI to make decisions about you that have legal or similarly significant effects. Features that produce AI-written assessments of a member for a manager to read are not enabled in this version of the service. If we enable them for your workspace in the future, they will require your explicit, revocable consent first and will be described in an updated policy.

Your workspace. In an individual workspace, only you. In a team workspace, your client records are yours: other agents cannot see them. Whether your managers can see them is a policy your organization chooses, and you can always see that policy and who it gives access to in your settings. Your private profile is visible only to you.

Cornerstone staff. A small, named list of staff can access operational data such as queue status and error counts. They cannot sign in as you. Any access to workspace content for support purposes happens only at your request and is logged.

Service providers. The companies listed under Subprocessors, each bound by contract to use your information only to provide their service to us.

Legal requirements. We disclose information when the law requires it, and we will tell you unless we are legally prevented from doing so.

Business transfers. If Cornerstone is acquired or merges with another company, your information may transfer with it, and this policy continues to apply until you are told otherwise.

A member can publish a public page and put a contact form on it. If you fill in that form, the details you enter (your name and email address; your phone number, ZIP code and message if you give them; whether you agreed to be contacted; and your confirmation that you are 18 or older) go to the member whose page it is, into their workspace, and are handled like any other record they hold. Cornerstone does not use those details for anything else and does not contact you itself.

Public forms are for adults. You must be 18 or older to submit one, and each form says so and asks you to confirm it before it will send. We keep a short-lived, single-use token with each submission to stop automated abuse; it holds no personal information. We do not run session recording or replay on public pages.

A member’s page can be taken down by the member, by their organization’s administrator, or by Cornerstone. Once it is, the address stops answering. To have your details corrected or deleted, contact the member named on the page; if you cannot reach them, email hello@cornerstone.gold and we will pass the request to them and confirm it was handled.

Recording a conversation is your decision and your responsibility. Before Cornerstone captures audio, you confirm that you have told the other party the call is being recorded and transcribed and that they agreed. Recordings and transcripts are stored in your workspace like any other content and are deleted with the case they belong to.

We keep information only as long as it is needed for the purpose it was collected for, or as the law requires.

• You can view, edit, export and delete the content in your workspace yourself, at any time.
• You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@cornerstone.gold. We answer within 30 days and we do not treat you differently for asking.
• If a feature ever asks for your consent, you can withdraw it from your settings and the feature stops immediately.
• You can opt out of marketing email with the link in any message. Service email, such as invitations and billing notices, continues while you have an account.

Residents of California and other states

If you live in a state with a consumer privacy law, you may also have the right to know the categories of personal information we collect and the purposes we use it for, to access and delete that information, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise any of these rights, email hello@cornerstone.gold. You may designate an authorized agent to act for you; we will verify the request with you before acting on it.

Do Not Track

We do not track members across other websites, so we do not respond to Do Not Track signals differently from any other request.

All traffic to Cornerstone is encrypted in transit. Data is encrypted at rest by our hosting providers. Each workspace is isolated at the database level so one workspace’s queries cannot read another’s. Administrative actions and access to protected material are logged. We limit staff access to a named list and review it.

No system is perfectly secure. If we learn of a breach affecting your information we will notify you without undue delay and within the time the applicable law requires.

Cornerstone is hosted in the United States, and our providers process data there. If you use Cornerstone from outside the United States, you are sending your information to the United States, where privacy law may differ from your own.

Cornerstone is for licensed professionals and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email hello@cornerstone.gold and we will delete it.

These are the third parties that receive personal data from Cornerstone, what each one receives, and where it processes that data. Each is bound by contract to use the data only to provide its service to us. We update this list before adding a provider that would receive workspace content.

When we change this policy in a way that matters, such as collecting something new or sharing with someone new, we will ask you to accept the new version before it applies to you. Smaller clarifications take effect when posted. The version and dates at the top of this page tell you which policy you are reading, and we keep every prior version available on request.

Questions, requests and complaints about privacy go to hello@cornerstone.gold. We reply within 30 days.