Privacy, records & your choices.
This notice describes the Kalvira client portal and supplements the website privacy policy and applicable agency insurance privacy notice. Contact gor@kalvira.com with questions.
Your account
Supabase processes your email, verification and session records to operate your account. You may use a personal or work email that you control. A one-time code verifies access to that mailbox, not your legal identity, authority to act for an insured, or policy eligibility. Do not share codes or use another person's account.
What is saved
Selecting Save draft stores the insured's legal name and address, carrier and policy information, requested history dates and signer contact details in your private account. Entries are otherwise kept in the current page's memory. Signing stores the reviewed details, full signer name, selected script style or drawn signature strokes, affirmative consents, exact document and consent wording, account identifier, email verification/sign-in times, server-recorded signature time, document version, and PDF integrity hash. Drawings do not collect pressure or stroke timing. The executed PDF is fixed rather than editable. No Social Security numbers, payment data, medical records or claimant details should be entered.
Agency-review requests are not appointments or policy actions
Broker of Record review, certificate, policy-service and renewal forms collect the policy, named insured and contact information you provide, along with the request-specific details and your scope/privacy acknowledgments. Save draft keeps an editable private draft. Submitting saves a fixed request PDF, exact request and acknowledgment text, verified account email, server-recorded submission time, reference and integrity hash. The PDF and request record are emailed through Resend only to gor@kalvira.com. No carrier or certificate holder is contacted automatically. These forms do not request an electronic signature, execute a broker appointment, issue a certificate, change carriers, bind or change coverage, cancel a policy, or report a claim. BOR appointments require a separate agency-reviewed and carrier-accepted process. Submitted requests cannot be edited in place; contact Kalvira with your reference to correct one.
Purpose and recipients
Kalvira uses these records to review your authorization, verify missing information or authority, request the limited loss history you authorize and assist with an insurance review. Supabase hosts accounts and private database records. The website host processes technical requests. Resend processes verification emails and delivery of the signed PDF and signing record to gor@kalvira.com. Kalvira may provide the authorization to the named carrier or its authorized claims administrator. Email is not end-to-end encrypted. A delivery confirmation means the provider accepted an email, not that it reached an inbox or that a carrier accepted the authorization.
Access and protection
Client records are restricted to their account owner through database row-level policies; only the website server can create executed records. Session cookies are HTTP-only and secure on HTTPS deployments. Protected responses are not shared-cacheable and there are no public document links. Hashed email/network identifiers are used for rate limiting, not identity certification. Operational providers may retain technical logs under their own terms. Sign out on shared devices and protect downloaded files and your mailbox.
Electronic records and alternatives
Electronic signing is voluntary and is a separate step after review. You must affirm authority, electronic-record consent and delivery/privacy consent, and type the signer's full name. To use the portal you need an email inbox, a current web browser with JavaScript and cookies, and a way to open, download and retain a PDF. Download the review PDF before consenting to confirm you can access it. You may decline and use the fillable PDF or request a paper copy from gor@kalvira.com. You can withdraw consent before signing by stopping the flow and contacting Kalvira; withdrawal does not undo an executed authorization.
Copies, corrections and retention
Download the exact signed PDF and its signing record from your account. Contact gor@kalvira.com if you cannot access a copy, need help, or want access, correction, deletion or retention information. Signed copies cannot be edited in place; corrections require a new authorization and agency review. Retention and deletion are subject to the agency's approved recordkeeping policy and applicable obligations. Kalvira must finalize its retention schedule and operational review before public launch.
Limited scope and signature limitations
The authorization is for loss history only, expires 90 calendar days after signing, and does not change an agent/broker of record or bind, cancel, renew or amend coverage. Revocation is prospective by written notice to the named carrier and Kalvira. This custom electronic-signature workflow is not BoldSign and is not a cryptographic digital signature or independent identity certification. A script font or drawn mark does not independently establish identity or authority. A carrier may require its own form or additional verification. Agency/legal review and carrier acceptance remain necessary.