1. Introduction
BeInsured Solutions (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property and coverage review service for licensed insurance agents.
By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
This Privacy Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
🛡️ Privacy Compliance Statement
🇪🇺 GDPR Compliant
Full compliance with European Union General Data Protection Regulation
- ✓ Lawful basis for data processing
- ✓ Right to access, rectify, and delete data
- ✓ Data portability and objection rights
- ✓ Data Protection Officer available
🇺🇸 CCPA Compliant
Full compliance with California Consumer Privacy Act
- ✓ Right to know what data we collect
- ✓ Right to delete personal information
- ✓ Right to opt-out of data sales (we don’t sell data)
- ✓ Non-discrimination for exercising rights
Contact our Data Protection Officer: privacy@beinsured.example
2. If Your Agent Sent You a Report
If you received a link or a PDF from an insurance agent who uses BeInsured Solutions, this section is for you. You do not have an account with us, and you do not need one. Your relationship is with your agent and their agency; we are the software they used to prepare your report.
2.1 What the Report Contains
Your agent's report is about your property. It contains your name, the property address, publicly available records about that address and its area, and whatever your agent recorded during their review. Your agent decides what it contains and approves every item in it before it is sent. We do not decide what goes in it.
2.2 What We Record When You Open the Link
When a report link is opened, we record three things, so that your agent can see that their report was opened:
- The date and time the link was opened.
- An approximate network address — the first three parts of an IPv4 address, or the first three groups of an IPv6 address. It is shortened before it is stored, so your precise address is never written down.
- Your browser's description of itself — the user-agent string your browser sends with every web request.
That is the whole record. We do not store a precise address, a location, a device profile, a visitor identifier, a cookie, how long you spent reading, or how far you scrolled. Opening the link sets no cookie.
2.3 The Email Is Not Tracked
There is no tracking pixel in the email your agent sent you, and we do not record whether you opened it. Your agent can see that the link was opened, because opening it is a deliberate act. They cannot see that the message was opened, because we do not measure that.
Our email provider does report whether the message reached your mail server, whether it bounced, and whether it was reported as spam. Those are facts about delivery rather than about you reading it.
2.4 The Link Expires, and Your Agent Can Switch It Off
A report link stops working 90 days after it is issued. Your agent can also switch it off at any time before that. Either way, the PDF attached to the email your agent sent you is yours to keep, and nothing we do affects it.
If a link no longer works and you would like another one, ask your agent. We cannot issue one, and for security reasons we cannot show anyone an existing link — links are stored scrambled, the way a password is.
2.5 If You Have Questions About the Report
Ask your agent first. They wrote it, they hold the records it is based on, and they can correct or explain anything in it. If you want to reach us about how we handle the information described above, our contact details are at the end of this policy.
4. How We Use Information
We use the collected information for the following purposes:
4.1 Service Provision
- Provide and maintain the property and coverage review service
- Assemble public property and hazard data for addresses you enter
- Manage your account and subscription
- Store and retrieve your reviews, observations, and reports
4.2 Communication
- Send service-related notifications and updates
- Respond to your inquiries and support requests
- Notify you of changes to our Service or policies
4.3 Service Improvement
- Analyze usage patterns to improve enrichment coverage and rule quality
- Monitor service performance and reliability
- Develop new public data sources and review capabilities
4.4 Legal and Security
- Comply with legal obligations and regulations
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service
- Resolve disputes and investigate violations
5. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:
5.1 Service Providers
- Payment Processing: Stripe for secure payment processing
- Authentication: Supabase for user authentication and account management
- Infrastructure: Cloud hosting providers for data storage and service delivery
- Hosting & Analytics: Cloud hosting and basic usage monitoring
5.2 Third-Party AI Services
The Service uses third-party AI providers for two purposes, and we describe them separately because they involve different information.
Writing the interpretive layer of a review — the narrative, the agent talk track, and the phrasing of questions. Models do not determine any finding, do not classify anything, and no figure originates with them. Every finding in a review is produced by a deterministic rules engine that runs to completion before any model is called.
Reading documents an agent uploads — declarations pages, replacement-cost estimator reports, claims reports, inspections and disclosures. To turn a PDF into structured fields, we send the text of that document to a model. This can include the named insured, the property address, coverage limits, deductibles, premium, and claims history.
Uploading a document is always optional. Every value a document can supply can be typed in by hand instead, and a review built entirely by hand is complete. If you would rather no policy document leave our systems, do not upload one.
Nothing a model returns is treated as fact. Every extracted value arrives as a prefilled suggestion that a licensed agent must confirm, edit, reject or mark unknown before it counts.
Providers and routing:
- OpenRouter: Requests are sent through OpenRouter, which routes them to an underlying model provider.
- Zero data retention: We instruct OpenRouter to use only endpoints operating under a zero-data-retention agreement, and to refuse any provider that may retain or train on the content we send. A model that cannot be reached under those terms is not used.
- Underlying providers currently include Anthropic, OpenAI and Google. The set may change; the retention constraint above applies whatever it is.
We record, for each uploaded document, which model read it and when. That record is available to your agency and is retained with the review.
We do not send vendor data whose licence terms prohibit it. Property records obtained from commercial data providers are used by the rules engine but are never included in a request to a model.
5.3 Legal Requirements
We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users
- Investigate potential violations of our Terms of Service
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
6. Data Retention
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:
- Account Information: Until you delete your account plus 30 days for backup purposes
- Review Records: Until you delete them or close your account
- Payment Information: As required by law and for tax/accounting purposes (typically 7 years)
- Usage Data: Basic usage patterns (anonymized) retained for service improvement
- Legal Holds: Information may be retained longer if required by law or legal proceedings
You can request deletion of your data at any time by contacting us or using account deletion features in our Service.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Data encryption in transit and at rest
- Access Controls: Limited access to personal information on a need-to-know basis
- Authentication: Multi-factor authentication for administrative access
- Regular Audits: Security assessments and vulnerability testing
- Incident Response: Procedures for detecting and responding to security breaches
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
8. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
8.1 GDPR Rights (EU Users)
If you are located in the European Union, you have additional rights under the GDPR:
- Legal Basis: We process your data based on contract performance, legitimate interests, and consent
- Data Protection Officer: You can contact our DPO at privacy@beinsured.example
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
- Automated Decision-Making: We do not engage in automated decision-making that significantly affects you
8.2 CCPA Rights (California Users)
If you are a California resident, you have specific rights under the CCPA:
- Right to Know: Request disclosure of personal information collected, used, or shared
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: Not be discriminated against for exercising your rights
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
- Essential Cookies: Required for basic site functionality and security
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how you use our Service
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our Service. For more detailed information, please see our Cookie Policy.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Adequacy Decisions: Transfers to countries with adequate data protection laws
- Standard Contractual Clauses: EU-approved contractual protections
- Certification Programs: Privacy Shield successors and similar frameworks
- Consent: Your explicit consent for transfers where required
11. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we learn that we have collected personal information from children under 13 without verification of parental consent, we will take steps to remove that information from our servers.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to your registered email address
- Displaying a prominent notice on our Service
Your continued use of our Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
This Privacy Policy is effective as of 2026-09-17. We reserve the right to modify this policy at any time, so please review it frequently.