Privacy policy

This policy explains how InsuranceQuoteWidget handles personal information on insurancequotewidget.com, in the app at app.insurancequotewidget.com, and in the calculators our customers embed on their own websites. It is written for US readers and covers the rights that California and other US states give their residents.

Who is responsible for your information?

It depends on how you meet us, and the difference matters.

When you visit our website, contact us, start a trial or hold an account, InsuranceQuoteWidget decides why and how your information is used. This policy governs that information.

When you fill in a calculator on an insurance agency's website, the agency decides what happens to the lead you submit. We store and deliver that information on the agency's behalf, as its service provider, and we use it only to run the service for that agency. The agency's own privacy notice governs your information. If you contact us about a submission you made on an agency's site, we will pass your request to that agency and help it respond, but the decision about your data is the agency's to make.

What information do we collect?

From customers and people who sign up:

• Account details: name, email address, company or agency name, and a password, which we store only as a one-way hash.
• Billing details: payments are processed by Stripe. We receive the card brand, the last four digits, the expiry month and year, and your billing address. We never receive or store full card numbers or security codes.
• Communications: messages you send through the contact form, support emails, and replies to our emails.
• Workspace settings: the calculators, widgets, themes, webhook URLs and team members you configure.

From anyone who visits our website:

• Server logs: IP address, browser and device type, the pages requested, referring page and timestamps. We use these to keep the service running, detect abuse and fix errors.
• Preferences you set: theme, colour palette, accessibility settings and cookie choices are kept in your own browser, not on our servers. See the cookie policy for exact names.
• Campaign source: a first-party cookie records which campaign or link brought you to us, so a later sign-up or purchase can be credited to it.
• Analytics: only if you choose "Accept analytics" and only if analytics are enabled on the site. They are not enabled at launch.

Workspace data we hold for agencies (as their service provider):

• Leads submitted through a calculator: name, email, phone, an optional message, the consent the visitor gave, the calculator's inputs and results, the page URL, and campaign attribution such as UTM tags, ad click IDs, referrer and landing page.
• Notes and statuses the agency adds to contacts in its workspace.

How do we use information?

We use personal information to:

• provide, secure and support the service, including sign-in, two-factor authentication and workspace isolation;
• deliver leads to the agency by email, in its contacts list and to the webhook destinations it configures;
• process payments, send receipts and trial reminders, and handle refunds;
• answer questions and support requests;
• send product and account notices, and, where allowed, occasional product news you can unsubscribe from;
• understand which campaigns bring people to us, using our own first-party data;
• prevent spam, fraud and abuse, and comply with legal obligations.

We do not use workspace data, including leads, to market to the consumers in it, and we do not combine an agency's leads with another agency's data.

Do we sell or share personal information?

No. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in California law. We disclose information only to:

• Service providers that help us run the service, such as hosting, payment processing (Stripe) and email delivery. They are bound to use the information only to provide their service to us.
• Destinations a customer configures, such as a webhook into HighLevel, Zapier, Make or the agency's own CRM. The agency chooses these, and the agency is responsible for them.
• Authorities, when a valid legal process requires it or when we need to protect people, our customers or our service.
• A successor, if InsuranceQuoteWidget is involved in a merger, acquisition or sale of assets, subject to this policy's commitments.

Is any information sensitive?

Some calculator inputs can reveal health-related information, for example HSA contributions and planned medical expenses, or, as those calculators become available, inputs on ACA coverage, Medicare income-related premiums, long-term care, disability or critical illness. Some state laws treat health information as sensitive personal information. We use these inputs only to produce the calculator result and deliver the lead to the agency, never to infer characteristics about a person, and you can ask us to limit their use to what is necessary to provide the service.

What are your US state privacy rights?

Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas and a growing number of other states, you may have the right to:

• Know and access the personal information we hold about you and how we use it.
• Correct inaccurate information.
• Delete information we hold, subject to legal exceptions such as billing records we must keep.
• Portability: receive a copy in a commonly used format.
• Opt out of sale, sharing and targeted advertising. We do none of these, but you may still send the request and we will record it.
• Limit the use of sensitive personal information to what is needed to provide the service.
• Not be discriminated against for using any of these rights. We will not deny service, charge a different price or provide a lower quality of service because you made a request.

Some states also give you the right to appeal a decision we make about your request. If we decline, we will explain why and tell you how to appeal.

How do you make a request?

Use the data request page or email privacy@insurancequotewidget.com. We verify requests by matching information you give us with information we already hold, usually by confirming control of the email address on the account. For requests about highly sensitive information we may ask for more. We respond within the time limits your state sets, generally within 45 days, and tell you if we need an extension.

Authorized agents may make a request for you. We will ask for signed permission from you, and may ask you to confirm your identity directly with us.

If your request is about a lead you submitted on an agency's website, we will forward it to that agency, because the agency controls that information.

How long do we keep information?

We keep account and billing records for as long as the account is open and then for the period tax and accounting law requires. Server logs are kept for a short period for security and troubleshooting. Workspace data, including leads, is kept while the agency's account is active and is deleted when the agency deletes it or closes its account, after a short period for backups to expire. Agencies can delete individual contacts at any time.

How do we protect information?

Workspaces are isolated from each other, connections use HTTPS, stored credentials are encrypted at rest, and accounts can use two-factor sign-in. No system is perfectly secure; if a breach affects your information, we will notify you and the authorities as the law requires. See our security overview for more.

Children's privacy

The service is designed for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact privacy@insurancequotewidget.com and we will delete it.

Changes to this policy

When we make a material change we will update the date at the top of this page and, for account holders, send a notice before the change takes effect.

Contact

Privacy questions: privacy@insurancequotewidget.com. General questions: hello@insurancequotewidget.com, or use the contact page.