Retention principles
We keep personal information only while it is reasonably needed to provide the vault, protect the service, meet legal obligations, resolve disputes, or enforce agreements. We minimize retained data and use scheduled deletion where practical.
| Information | Normal retention |
|---|---|
| Account and profile | While the account remains active, then deleted with the account. |
| Policies, contacts, instructions, and checklists | Until the user deletes the record or account. |
| Uploaded life, auto, home, umbrella, and other insurance documents | Until the user deletes the document or account. |
| Beneficiary invitations and access activity | While needed to provide, audit, or revoke authorized access. |
| Email delivery, authentication, security, and error records | For the limited operational period configured with the relevant provider. |
| Billing and transaction records | As required for payment processing, tax, accounting, disputes, and law. |
| Encrypted backups | Rolling retention of up to 30 days. |
Account deletion
A signed-in account holder can request permanent deletion from Settings. The service re-verifies the account before accepting the request. We then remove the authentication account, live vault records, private document files, and access records owned by that account. Any associated paid subscription is canceled as part of the process.
Encrypted backup copies are not edited in place. They remain protected, are not returned to normal use, and expire through the rolling backup schedule within 30 days. Limited records may be retained when required by law, for fraud prevention, to complete a transaction, or to document the deletion request.
Invited beneficiaries
Deleting an invited beneficiary login removes that login and its portal connection. Information independently entered by a policyholder in the policyholder’s own vault remains under that policyholder’s control. An invited person can ask the policyholder to correct or remove those contact details.
Your controls
You can delete individual documents and policies without deleting the entire account. See the Privacy Policy for additional choices and request information.
If you cannot access your account, send a privacy or deletion request to privacy@huffmaninsurancegroup.com.
HIG Legacy Vault is operated by HIG Legacy Vault, LLC.