Effective September 17, 2026.
What Flora stores
- Account
- Name, email, company, role; a salted password hash (never the password); sign-in sessions with their address and browser.
- Company file
- The application facts the insured typed in, the checklist, and the readiness score with its reasons.
- Documents
- The files the insured uploads, the checklist item they match, the period they cover, and the quality-check result.
- Verification
- When Flora called or texted, the outcome, what was said about the application, and any discrepancies. Consent and STOP replies.
- Growth signals
- The observation, its evidence, and the labeled estimate.
- Audit log
- An append-only record of every change: who, what, when, before and after. The database refuses to update or delete rows in it.
- Messages to Flora
- What you send through the contact page and account-deletion requests, until handled and for the retention period below.
Where it lives
In a Postgres database on the hosting provider that runs the application, in the United States, reachable only by the application. Payment details never touch Flora: they are entered in Stripe-hosted checkout.
How long
- Account and sessions
- While the account is open. Sessions expire on their own after a period of inactivity and are removed after that.
- Company file and documents
- While the company file is open, and after that for as long as the audit the file supports can still be reopened, which for most workers’ compensation policies is three years after the policy term ends. A contract with a carrier partner may set a different period; when it does, that period applies to that carrier’s files.
- Verification records
- Same as the company file.
- Audit log
- For the life of the company file and its retention period; it is the record that the file was handled properly.
- Messages to Flora
- Two years after they are handled.
- After a deletion request
- Once the Flora team has confirmed the request with you, the account and company file are closed and removed within thirty days, except records the law or a carrier contract requires us to keep, which are kept only for that purpose and that period.
Getting it out
Carriers and the Flora team can export a book as CSV from their dashboard. Anyone can ask for a copy of their company file, or for its removal, through the contact page or the account page. A person confirms the request by email.
No scrapers
Flora never scrapes websites, public records, or social media, and never buys data about an insured. Everything in a file was typed or uploaded by the insured, said by the insured on a verification call or text, or computed by Flora from those two sources.