1. Scope and Responsibility
TSE Financial Services, Inc. operates BeneCraft. This policy describes information handled through our website, business inquiries, accounts, and benefits workflow tools. It also explains choices and how to contact us.
For employer or brokerage records, your organization determines much of the information entered and who is authorized to access it. We process those records to provide the service, subject to applicable agreements. Your organization’s own privacy notices may also apply. This policy does not cover independent third-party websites or services.
2. Information We Handle
- Account and organization information: name, email, authentication identifier, role, membership, employer assignments, invitation status, and login activity.
- Business records: employer and contact details, plans, aggregate census and claims data, quotes, scenarios, proposals, tasks, documents, notes, and report content that authorized users provide.
- Inquiries and support: contact details, company, role, message, scheduling preferences, inquiry source, and the module associated with a support request.
- AI requests and diagnostics: prompts and selected contextual data sent for processing, requested and returned model information, timestamps, status, token usage, and cost information where supplied by the provider. Saved workflow outputs can become part of your business records.
- Technical information: authentication/session data, browser preferences, service activity and error logs. Hosting and authentication providers may also process IP addresses, device/browser information, and request metadata to operate and protect their services.
Do not submit participant-level health information, identifiable claims, Social Security numbers, or identity documents. Use aggregate or appropriately de-identified business information where the feature permits it.
3. How Information Is Used
Information is used to authenticate users, enforce access permissions, maintain connected business records, process requested documents and AI tasks, generate reports, respond to inquiries, manage invitations, diagnose problems, protect the service, and comply with applicable obligations. Website inquiries are saved in the Internal Admin inbox. Requesting a demo does not automatically book a meeting or subscribe you to a newsletter.
4. Who Can Access Information
Authorized members of your brokerage or employer can access records according to their roles, assignments, and sharing settings. Authorized BeneCraft administrators may access records and diagnostic information for service operations and support. Administrative “Run As” functionality is intended to mirror an authorized user’s view; it does not transfer account ownership.
We use providers for hosting and storage (Sites infrastructure and Cloudflare services), ChatGPT/OpenAI sign-in, configured invitation email delivery through Brevo, and optional AI processing through OpenRouter and its selected model provider. Data sent depends on the feature used and the configured service. We may also disclose information where required by law, to protect rights or security, or in a business transaction subject to applicable safeguards.
When you export, publish, or share a report, proposal, article, or prospect page, its audience can receive the content you include. Review those outputs before sharing. Marketplace participation alone does not give a vendor access to private employer records; sending information to a vendor is a separate action or workflow.
5. AI and Document Processing
Some document workflows use local browser text extraction, OCR, and structured matching. Archiving an uploaded source or saving reviewed results stores that information in BeneCraft. When you request an enabled AI feature, the relevant prompt, extracted text, and authorized contextual records may be sent to OpenRouter and the configured model provider.
The current AI transport requests providers that support no-training and zero-retention settings. These request settings are not a promise that every service or diagnostic record has no retention. BeneCraft keeps AI request diagnostics, including prompt content, for authorized internal review. Provider processing is also governed by the applicable provider terms and configuration. Do not include prohibited sensitive information in a prompt.
Clearly labeled local demo responses and homepage sample walkthroughs use fictional data and do not themselves send an AI request. Review actual AI outputs before relying on them.
6. Cookies and Browser Storage
Authentication and hosting services use session mechanisms needed to sign in and maintain access. BeneCraft also uses browser storage for interface preferences and workflow state, such as theme or the last open Plan Build section. You can clear browser storage or adjust browser cookie controls, but doing so may sign you out or reset preferences. External sites and embedded or linked third-party services have their own practices.
7. Retention and Security
Information is retained for service delivery, customer recordkeeping, audit history, support, security, and applicable legal or contractual obligations. Retention depends on the record type and organization’s agreement; there is no single automatic deletion period for all BeneCraft records. Historical commercial versions, backups, and audit records may remain after a record is archived or access ends. Ask us about the handling of a specific record or deletion request.
BeneCraft uses server-side access controls and role-based permissions to restrict records. No online service can guarantee absolute security. Protect credentials, limit access assignments, and notify Support if you suspect an incident. This policy does not represent a security certification or a HIPAA compliance guarantee.
8. Your Choices and Requests
You can review or update information through available application controls, ask your organization administrator to correct records or adjust access, and contact us about access, correction, export, deletion, or other applicable privacy rights. Depending on your location and circumstances, applicable law may provide additional rights, including objection, restriction, withdrawal of consent, appeal, or a complaint to a regulator.
We may need to verify your request and coordinate with the organization responsible for the records. Some requests may be limited by legal obligations, other people’s rights, or required business records. We will handle requests according to applicable law. You do not need to provide health information or sensitive identity documents in an initial request.
For questions about these terms or your personal information, contact TSE Financial Services, Inc. using the Support button in BeneCraft (sign-in required). Choose “Other” and include “Privacy Request” or “Terms Question” in the subject. If you do not have an account, use the website contact form and identify your request in the message, or contact the brokerage or employer that provided your access. Do not include health information, passwords, or identity documents in your initial message.
9. International Processing and Children
Service providers may process information in the United States and other countries where they operate. Requirements and safeguards for international processing depend on the applicable agreement and law; this policy does not claim a particular data-residency arrangement. BeneCraft is intended for adult business users and is not directed to children. Do not create accounts for children or submit their identifiable information.
10. Policy Updates
We may update this policy to reflect changes in the service, processing practices, or applicable requirements. The date above shows the current version. Where required, we will provide additional notice of material changes through the service or an appropriate account contact. See our Terms of Service for use of the platform.