Privacy Policy

We collect information you provide directly, including:

• Account information: name, email address, phone number, and agency details when you register.
• Client data you enter or import: names, phone numbers, email addresses, appointment details, carrier and coverage selections.
• Secure intake data submitted by clients at your request: beneficiary information, banking details, and Social Security numbers. This data is displayed for a limited time and then permanently deleted from view.
• Technical data: IP address, browser type, device information, and login events, used for security and notification purposes.
• Signature data: electronic signatures, timestamps, and originating IP addresses captured during agreement signing.

We use the information we collect to:

• Provide, operate, and improve the InsureFlow platform;
• Send transactional SMS/email messages you request, including appointment reminders, confirmation codes, secure intake links, and birthday messages;
• Send security and login notifications;
• Comply with legal obligations and enforce our agreements.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Mobile numbers and SMS consent data are used solely to deliver the messages described at the time of opt-in.

Message frequency varies. Message and data rates may apply. Recipients can opt out at any time by replying STOP and can get help by replying HELP. See our Terms of Service for full messaging terms.

We do not sell your personal information. We share information only with:

• Service providers that help us operate the platform (hosting, messaging delivery, payment processing), bound by confidentiality obligations;
• Authorities when required by law, subpoena, or to protect rights and safety.

Text messaging originator opt-in data and consent are never shared with any third party.

Account and client records are retained while your account is active. Sensitive secure intake submissions (beneficiary, banking, and SSN data) are permanently deleted from agent view approximately 10 minutes after submission. You may request deletion of your account data at any time through the support contact listed on our website.

Where HIPAA applies, PHI is retained and deleted only in accordance with the terms of the applicable Business Associate Agreement (BAA) and HIPAA record-retention requirements.

We use administrative, technical, and physical safeguards designed to protect your information, including access controls, IP and login event tracking, and signed agreement records. Where we have entered into a HIPAA Business Associate Agreement (BAA) with you, we implement and maintain safeguards that meet the HIPAA Security Rule requirements for PHI, including encryption, access management, audit controls, and workforce training. No method of transmission or storage is 100% secure, but we work to protect your data consistent with industry practices.

Depending on your state of residence, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. To exercise these rights, contact us through the support contact listed on our website.

InsureFlow is a business tool for licensed insurance professionals and is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the service constitutes acceptance of the revised policy.

Questions about this Privacy Policy can be sent through the support contact listed on our website.