Privacy Policy

1. Introduction

InsureC ("we", "our", or "us") is committed to protecting the privacy of insurance brokers and their clients who use our platform. This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data We Collect

We collect the following categories of data:

• Broker account data: Name, email address, agency name, phone number
• Client data: Names, email addresses, phone numbers, addresses, dates of birth, policy information entered by the broker
• Policy data: Policy numbers, insurer names, coverage types, premium amounts, expiry dates, uploaded PDF documents
• Usage data: Log data, IP addresses, browser type, pages visited
• AI interaction data: Chat messages submitted to our AI assistant

3. How We Use Your Data

• To provide and operate the InsureC platform
• To send renewal reminders on behalf of brokers
• To generate AI-powered policy summaries and messages using the Anthropic Claude API
• To improve our services and fix bugs
• To comply with legal obligations

4. Data Storage and Security

All data is stored in the European Union (Frankfurt, Germany) on Supabase infrastructure. We implement row-level security so each broker can only access their own data. Data is encrypted in transit (TLS) and at rest. We do not sell your data to third parties.

5. Third-Party Services

We use the following third-party processors:

• Supabase — Database and authentication (EU region)
• Anthropic — AI processing for policy analysis and message generation
• Twilio — SMS delivery for renewal reminders
• Resend — Email delivery for renewal reminders
• Vercel — Application hosting

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Delete your account and all associated data via Settings → "Delete my account"
• Portability — Receive your data in a machine-readable format
• Objection — Object to processing of your data

7. Your Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

8. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising or tracking cookies. A cookie consent banner is displayed on first visit for non-essential cookies.

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.