Privacy Policy

How EnsureLoc collects, uses, protects, shares, retains, and deletes personal information.

Effective date: August 26, 2026

Privacy at a glance. EnsureLoc is a self-service records-readiness platform operated by Mitigate America, LLC. Customers control the records they upload and the people they authorize to access them. We do not sell customer-uploaded record content, we do not use customer-uploaded record content for targeted advertising, and our routine operating policy is not to have EnsureLoc personnel read or interpret the contents of individual customer records.

Contents

1. Scope and Who We Are

This Privacy Policy explains the privacy practices of Mitigate America, LLC, doing business as EnsureLoc ("EnsureLoc," "we," "us," or "our"), for ensureloc.com, customer accounts, the member portal, readiness tools, partner/customer forms, and related services that link to this Policy (the "Service").

Some functions are provided by third parties, such as payment processing and secure file storage/sharing. Their privacy notices may also apply to the information they process. This Policy does not control an independent third party's separate website or service.

2. Information We Collect

Information you provide

  • Identity and contact information: name, email, phone number, mailing or physical address if provided, and optional emergency or next-of-kin contact information.
  • Account and membership information: customer/account identifiers, selected package, purchase date, service status, storage allowance, Trusted Connection limits, authentication/account status, and related operational metadata.
  • Transaction information: purchase amount, billing status, payment-processor customer/transaction identifiers, refunds, cancellations, and renewal status. We do not store complete payment-card numbers.
  • Trusted Connection information: names, email addresses, invitation status, permission choices, and related access metadata that you provide or generate when using sharing features.
  • Support and communications: messages, form submissions, customer-story or partner inquiries, support requests, and information you choose to provide when communicating with us.
  • Customer Content: records and files that you choose to upload through the secure member portal.

Information collected automatically

When you use the Service, website and infrastructure providers may automatically process device and network information such as IP address, browser type, device type, operating system, timestamps, referring pages, security events, request logs, authentication events, and similar technical data used for operation, security, troubleshooting, and fraud prevention.

3. Customer Records and Sensitive Content

Customer-uploaded records may contain highly sensitive information, including government identification, insurance, property, vehicle, financial, legal, medical, family, employment, and business information. Customers decide what to upload and remain responsible for ensuring they have authority to store and share it.

Hands-off policy: EnsureLoc's routine operating policy is that EnsureLoc personnel do not open, read, inspect, edit, rename, organize, interpret, or make decisions based on the contents of individual customer records. Technical and account support is designed to be provided without reading record contents. Customer Content is automatically processed by secure infrastructure providers to transmit, store, back up, retrieve, and share records as directed by the customer.

We do not use the contents of customer-uploaded records to build advertising profiles or to train general-purpose artificial intelligence models. We do not sell customer-uploaded record content.

Do not submit sensitive record contents, passwords, Social Security numbers, account credentials, policy numbers, medical details, or similar confidential information through ordinary email, public web forms, or chat unless the form expressly requests that information and is designed for secure collection.

4. How We Use Personal Information

We use personal information as reasonably necessary to:

  • create, authenticate, provision, maintain, and support accounts;
  • provide storage, organization, retrieval, readiness, and Trusted Connection features;
  • process purchases, renewals, cancellations, refunds, and account status;
  • send transactional, security, service, and legally required communications;
  • respond to support requests, partner inquiries, and customer communications;
  • enforce plan limits, prevent abuse, protect users, detect fraud, and maintain security;
  • debug, maintain, and improve the Service using operational or aggregated information;
  • comply with law, legal process, accounting obligations, tax requirements, and enforceable agreements; and
  • establish, exercise, or defend legal claims and protect the rights, safety, and integrity of EnsureLoc, users, providers, and others.

We do not make automated decisions based on customer record contents that produce legal or similarly significant effects for customers.

5. How We Disclose Information

We may disclose personal information only as reasonably necessary for the following purposes:

  • Service providers/processors: providers that perform hosting, authentication, payment processing, email, automation, database, customer-support, security, and secure file-storage/sharing functions. Current core providers may include Stripe, Netlify, ShareFile, Airtable, and related service providers.
  • User-directed sharing: people you authorize through Trusted Connections or other customer-controlled sharing features.
  • Legal and safety: where we reasonably believe disclosure is required by law, valid subpoena, court order, warrant, or other lawful process; or is necessary to protect rights, safety, security, prevent fraud, or investigate abuse.
  • Business transactions: a buyer, successor, lender, adviser, or other party involved in a merger, financing, reorganization, sale of assets, acquisition, or similar business transaction, subject to appropriate confidentiality and applicable law.
  • With your consent: when you direct or authorize us to disclose information.

We do not sell or rent customer-uploaded record content. We do not disclose customer-uploaded record content to advertisers for targeted advertising.

6. Trusted Connections, Death, Incapacity, and Legal Access

You decide whom to invite as a Trusted Connection and the permissions you grant. EnsureLoc does not independently determine that a family member, next of kin, caregiver, executor, beneficiary, attorney, insurer, employer, government official, or other person is entitled to your records.

A claim that a customer has died or become incapacitated does not, by itself, create portal access. Access must come from permissions established by the customer or from valid legal process handled in accordance with law and applicable provider procedures. We may use limited account information to verify or respond to a lawful request, but the Service is not designed to make discretionary inheritance, guardianship, fiduciary, or authority determinations.

7. Payments

Payments are processed by third-party payment providers such as Stripe. Payment providers may collect payment-card, billing, fraud-prevention, and identity information directly under their own terms and privacy policies. EnsureLoc receives transaction and customer identifiers, payment status, amounts, and related information needed to administer the purchase, but does not store complete payment-card numbers.

8. Cookies, Local Storage, and Similar Technologies

The Service may use essential cookies, session storage, local storage, and similar technologies for authentication, security, forms, navigation, preferences, readiness tools, and service operation. Third-party providers may set their own cookies when you use checkout, authentication, the portal, or other provider-operated features.

Certain free readiness tools may store checklist selections or reminder information only in the browser's local storage. When the tool is designed to be local-only, EnsureLoc does not receive that local entry merely because it is saved in the browser. Clearing browser data, private browsing, or switching devices may remove or make that local information unavailable.

See our Cookie Policy for additional information. Blocking essential cookies or storage may prevent checkout, login, forms, or other features from functioning properly.

9. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the Service and rely on specialized providers for significant portions of hosting, authentication, payment, and secure file-storage infrastructure. Safeguards may include encryption in transit and at rest where supported by the applicable provider, authentication, access controls, logging, backups, monitoring, and security procedures.

No security measure can guarantee absolute protection. Customers should use strong unique passwords, secure their email and devices, use additional authentication when available, review Trusted Connection permissions, avoid sending sensitive records through ordinary email, and maintain independent copies of critical records.

Security certifications or compliance reports held by a service provider apply to that provider's environment and do not mean that EnsureLoc itself holds the same certification unless we expressly say so.

10. Security Incidents and Breach Notification

We maintain procedures for responding to suspected security incidents. If a breach involving personal information triggers notification duties, we will provide notices required by applicable law. For Georgia residents, this includes applicable Georgia breach-notification requirements. If the federal FTC Health Breach Notification Rule applies to a particular health-information incident, we will follow its applicable notification requirements.

Because incident obligations depend on facts such as the information involved, encryption, acquisition, jurisdiction, and the role of service providers, the timing, recipients, and form of any notice will be determined under applicable law.

11. Health and Medical Information; HIPAA

Customers may choose to store medical or health-related records as part of their records-readiness files. EnsureLoc is not a healthcare provider or health plan merely because customers store such records. Unless EnsureLoc expressly enters into a written HIPAA Business Associate Agreement for a specific service relationship, we do not represent that the general consumer Service is a HIPAA-covered service.

Other privacy and breach laws may still apply to health-related information, including the Federal Trade Commission Act and, depending on the facts and product functionality, the FTC Health Breach Notification Rule. We do not use customer-uploaded medical record contents for targeted advertising.

12. Retention, Account Closure, and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security and fraud records, satisfying accounting/tax obligations, resolving disputes, enforcing agreements, and complying with law.

Customer records are retained through the applicable secure storage provider while the account or paid service remains active, subject to provider backup and lifecycle practices. When an account-deletion request is processed, we initiate deletion of associated customer data through applicable systems. Residual copies may remain temporarily in backups, logs, fraud-prevention records, payment records, legal holds, or systems where immediate deletion is not reasonably possible or legally required.

Before deleting an account, download records you want to keep. Account deletion is separate from cancellation of automatic renewal and separate from refund eligibility.

13. Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, or information about certain personal information. You may also have rights relating to certain data sales, targeted advertising, profiling, or appeals. EnsureLoc will honor privacy rights that apply to us and to your request.

You can update certain account information through the Service where available. To make a privacy request, email support@ensureloc.com from the email associated with the account and describe the request. We may take reasonable steps to verify identity and authority before acting, especially when sensitive records or another person's information may be affected.

You may opt out of marketing email using the unsubscribe method in the message. Transactional, security, billing, and legally required communications may continue while the account remains active or where required.

Authorized agents may submit requests when applicable law permits, subject to verification of the agent's authority and the customer or consumer's identity.

14. Children's Privacy

EnsureLoc customer accounts are intended for adults and are not directed to children under 13. We do not knowingly allow a child under 13 to create a customer account or knowingly collect personal information directly from a child under 13 through an account. If we learn that we collected a child's personal information in a manner covered by the Children's Online Privacy Protection Act (COPPA) without required authorization, we will take appropriate steps to delete it and comply with applicable law.

An adult with lawful authority may store records concerning a child or dependent in the adult's customer-managed records area. In that situation, the adult—not the child—is the account holder and controls the records.

15. United States Service and Processing

EnsureLoc is a U.S.-focused service. Information may be processed or stored in the United States and in other locations where service providers operate, subject to applicable contractual and legal safeguards. If you access the Service from outside the United States, you understand that your information may be transferred to jurisdictions with different privacy laws.

16. Changes to this Policy

We may update this Privacy Policy to reflect changes in the Service, vendors, security practices, law, or business operations. The effective date will be revised when changes are published. We will provide additional notice of material changes when required by law.

17. Contact Us

Privacy questions, access/correction/deletion requests, and security concerns may be sent to support@ensureloc.com.