This policy explains what personal data CeevTech Brokers handles, why, and how it is protected. CeevTech Brokers is an online system that insurance brokerages in Lebanon use to manage their clients, policies, accounting, renewals and claims.
1. Who we are
CeevTech provides and operates CeevTech Brokers. Contact: info@ceevtech.com.
2. Two roles: the brokerage and CeevTech
- Your clients' data. Each brokerage that subscribes (the "Brokerage") decides which data about its clients it enters and what it uses it for. For that data the Brokerage is the data controller. CeevTech processes it on the Brokerage's behalf and only to provide the service: we do not use it for our own purposes, sell it or share it with other brokerages.
- Brokerage staff accounts. For the accounts of the Brokerage's staff, and for billing, CeevTech is responsible for the data.
3. What data is handled
- Staff accounts: name, mobile number, e-mail (optional), role, language, sign-in times, device identifiers for notifications.
- Data entered by the Brokerage about its clients: names, contact details, identity and registration numbers, addresses, dates of birth, vehicle, property and health-related details required for a policy, policies, premiums, payments, claims and uploaded documents.
- SMS logs: the phone number, text and delivery status of every SMS the system sends (sign-in codes, renewal and payment reminders).
- Audit and technical logs: who created or changed what, when, and from which IP address.
- Subscription records: the Brokerage's plan, payments to CeevTech and their references.
4. Why we use it
To run the service the Brokerage subscribed to; to sign users in (one-time codes by SMS); to send the reminders the Brokerage enables; to keep an audit trail; to secure the system and prevent abuse; to bill the subscription; and to meet legal obligations.
5. Legal framework
We handle personal data in line with Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data: data is collected for specific and legitimate purposes, kept accurate, limited to what is needed, protected, and not kept longer than necessary. The Brokerage is responsible for having a lawful basis and for informing its own clients, including of their rights of access and correction.
6. Security and hosting
- All traffic is encrypted in transit (HTTPS/TLS).
- Tenant isolation: every brokerage's data is separated at the database-query level; one brokerage cannot see another's data.
- Sign-in by one-time SMS code; role-based access inside each brokerage (owner, manager, data entry, viewer); audit trail of changes.
- Daily backups of the database and uploaded documents, including an off-site copy on Microsoft OneDrive, kept for a limited period.
- Access to servers is restricted to authorised CeevTech personnel.
7. Who else receives data
Only providers needed to run the service: the hosting provider, the SMS gateway (phone number and message text), Microsoft OneDrive (encrypted backups) and, when enabled, push-notification services. We do not sell personal data.
8. SMS
The system sends SMS for sign-in codes and, when the Brokerage enables them, renewal and payment reminders to its clients, as well as subscription reminders to the Brokerage owner. The Brokerage is responsible for having its clients' consent to receive reminders.
9. Retention and deletion
Data is kept while the Brokerage's account exists. A Brokerage can export all of its data at any time (Settings › Subscription › Export all my data), including after its subscription ends. Because insurance brokerages must keep client, policy and accounting records, records are not erased from our systems: data that is removed in the app is kept in removed form, hidden from every user.
Deleting an account. Any user can delete their account in the app (Settings › Delete account), confirmed by a code sent by SMS. The account is switched off at once; signing in again within 30 days restores it (for a Brokerage, only the owner who asked for the deletion can). After 30 days the account is permanently closed: nobody can sign in to it, and its mobile number cannot be used again to sign in or to register. When the Brokerage's only owner deletes the account, the whole Brokerage is closed. The records of a closed account are kept in closed form, not visible or usable by anyone in the app and not shared with anyone. Details and how to ask without the app: Account deletion.
10. Rights
Staff members may ask us for access to or correction of their account data. A Brokerage's clients should address requests to the Brokerage, which controls their data; we help the Brokerage answer them.
11. Changes
We may update this policy. Significant changes will be announced in the app.