CertWatch is operated by Signature Insurance, a trade name of Doyle & Associates, Inc., 525 Darby Creek Rd, Unit 29, Lexington, KY 40509. Questions about anything on this page go to contact@signatureinsuranceky.com or 859-407-4888.

What we collect

About you, the customer: your business name and mailing address (these are printed on the certificate requests we send on your behalf), your login email, a hashed password, the reply-to address you want agents to reach, and your plan and billing status.

About your vendors: the vendor's name, the trade you assign them, their insurance agent's name and email address, renewal dates, the certificate documents themselves, and the coverage details read out of those documents.

Automatically: ordinary server logs, and basic usage events so we can tell which parts of the product are actually used.

Why we hold it

All of it exists to do the one job: know when a vendor's coverage is due, ask the right agent for a current certificate under your name, check what arrives against your requirements, and keep a record you can produce later. We don't collect anything that isn't used for that.

Who else processes it

Google (Gemini) — reads uploaded certificates and endorsements to extract coverage, limits and dates. Document contents are sent to Google for this.
Stripe — payments. Card details go directly to Stripe and never reach us.
Brevo — sends the reminder and correction emails.

That is the complete list. There are no advertising networks, no data brokers, and no analytics product that follows you around the web.

What we never do

We do not sell or rent your information, your vendor list, or your agents' contact details.
We do not market to your vendors or their agents. The only mail they receive is the certificate request you asked us to send, under your business name.
We do not use one customer's data to serve another customer.

A note about your vendors' agents

When you add a vendor, you're giving us an insurance agent's business contact details so we can request a certificate on your behalf. We use that address for that purpose and nothing else. Every email carries a way for the agent to tell us they no longer represent that vendor, and when they do, we stop writing to them about it.

How long we keep it

For as long as your account is open. Certificate history is deliberately retained rather than discarded — being able to show what was on file on a given date is usually the whole point when a claim or an audit lands. Close your account and ask us to delete it, and we will.

Your choices

You can view, correct, export or delete your data at any time — most of it from inside the app, and the rest by emailing us. If you'd like the entire account erased, say so and we'll confirm once it's done. We'll ask you to confirm from the account's registered email address first.

Children

CertWatch is a business tool and is not directed at anyone under 18.

Changes

If this policy changes in a way that affects what we collect or who processes it, we'll email account holders rather than quietly changing the date at the bottom.

Last updated 20 August 2026.

Privacy policy