Privacy Policy

Who we are

InsureTrek is producer licensing and compliance software for insurance agencies, FMOs and uplines, carriers, and individual insurance producers. It is operated by INSURETREK, LLC, a Delaware limited liability company ("InsureTrek," "we," "us").

INSURETREK, LLC
8745 Henderson Rd, Ste 220
Tampa, FL 33634
hello@insuretrek.com
(888) 691-7578

This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. We are a US company serving US customers.

What this policy covers

This policy covers:

• This website (insuretrek.com), including our blog, guides, and demo booking pages.
• The InsureTrek product at app.insuretrek.com, where it handles personal information. Customers who use the product under a service agreement should also read the Terms of Service and, where one is in place, their data processing agreement, which govern how we handle their data.
• The InsureTrek Assist browser extension, described in its own section below.

This policy is incorporated by reference into our Terms of Service. If this policy conflicts with a customer's Terms of Service, order, or data processing agreement about data in the product, that agreement controls. In the Terms of Service, the producer and account data described in this policy is called "User Submissions" and "User Information."

When an agency, upline, or carrier uses InsureTrek to manage its producers, we process producer data on that customer's behalf and under its instructions. If you are a producer whose information is in InsureTrek because your agency or upline put it there, your agency or upline decides how that data is used, and requests about it may need to go through them. We say more about this under "Your rights."

Information we collect

Website visitors. When you browse this website, we and the analytics, advertising, and sales services described below collect information about your visit: pages viewed, links clicked, time on page, approximate location derived from your IP address, browser and device information, and the URL parameters you arrived with (such as campaign tags in a link you clicked). This collection uses cookies and similar technologies.

People who book a demo or contact us. Demo scheduling on this website runs on an embedded scheduling service. When you book, it collects the details you enter, typically your name, email address, and anything you add to the booking, and shares them with us so we can hold the meeting. If you email or call us instead, we receive whatever you choose to share.

Customers and their users. When an organization signs up for InsureTrek, we collect account information for its users: name, work email, role, and login credentials or the sign-in your organization uses. We also collect billing information, which is handled by our payment processor; we do not store full payment card numbers.

Individual producers. Producers who use InsureTrek directly, for example to file a license application for a flat fee, give us their name, contact details, National Producer Number (NPN), and the information a state requires for the application, and pay through our payment processor. A state application can include your Social Security number, date of birth, residence address, and the background questions the state asks. We send that information to NIPR and the state, and we use it only to complete and support your filing.

Producer licensing data. InsureTrek is an official NIPR reseller. On behalf of each customer, we pull producer licensing data from NIPR's Producer Database: NPNs, license status, lines of authority, carrier appointments, continuing education status, and regulatory actions. This data comes from NIPR and from state insurance departments, and each customer's data is used one to one for that customer. We use regulatory-action and licensing history solely to provide licensing and compliance services to the customer that requested it; we do not use it for advertising or any other purpose. InsureTrek's services contain data from NIPR.

Sources. In short: we collect information directly from you, automatically from your browser and our servers' request logs when you use this website, from NIPR and state regulators when a customer directs us to pull licensing data, and from our customers when they add their producers to the product.

How we use information

We use personal information to:

• Operate this website and the InsureTrek product.
• Respond to demo requests, questions, and support requests.
• Provide licensing and compliance services: pulling and refreshing NIPR data, filing applications, tracking renewals and appointments.
• Process payments and manage accounts.
• Send service and marketing email. You can unsubscribe from marketing email at any time.
• Understand how the website and product are used, and improve them.
• Advertise InsureTrek, including measuring ad performance and showing ads to people who have visited this website.
• Meet our legal obligations and enforce our agreements.

Advertising and analytics

This website uses third-party advertising, sales, analytics, and session replay services, and some of what they collect is used for targeted advertising and sales follow-up. We describe them here by what they do. The specific services change from time to time; for the current list, email hello@insuretrek.com.

Advertising

Advertising networks, such as Google and Meta, place tags on this website. They measure whether our ads lead to demos and signups, and they let us show our ads to people who have visited this website, on those networks' platforms.

Sales

A sales-intelligence service receives the IP address and pages of each visit and tries to match them to the company behind it. We use the result at the company level, to follow up with businesses that showed interest in InsureTrek.

Analytics and session replay

Analytics services tell us how visitors move through the website: page views, clicks, performance, and the URL parameters you arrived with. A session replay service records clicks, scrolling, mouse movement, and the pages viewed, and turns them into replays and heatmaps we use to improve the website. It masks page text and anything you type before a recording is saved.

Some of these services set their own identifiers and may also use the data under their own policies. We use Google Analytics, which loads with our Google advertising tag, and Microsoft Clarity, which sets Microsoft cookies that Microsoft also uses across its own services. See how Google uses data from sites that use its services and the Microsoft Privacy Statement.

Scheduling, hosting, and security

The demo page embeds a scheduling service that loads when you open it and sets its own cookies. Our hosting and security providers handle technical data such as IP addresses and collect traffic statistics to keep the website running.

When you follow a signup link from this website into the product, we pass along the URL parameters from the link that brought you here, such as campaign tags, so we know which marketing led to which signups.

Under some US state privacy laws, the advertising and sales activity above counts as "sharing" or a "sale" of personal information. You can opt out under Your privacy choices. We do not sell personal information for money.

InsureTrek Assist browser extension

InsureTrek Assist is our browser extension for licensing and contracting work. You can use it to record a workflow and turn it into something your team can follow, such as a video or a step-by-step guide, and to sign in to carrier portals and other websites with logins saved in your InsureTrek account.

We add and change the extension's features over time. This section describes the kinds of information the extension handles and the rules every feature follows, so it applies to new features that handle information in the same ways. The extension explains each feature, and asks for your consent where needed, before the feature collects anything. The rest of this policy applies to the extension too.

What the extension handles

• Account information. Your email address, the agency and role you work as, and the sign-in tokens that keep you signed in.
• Recordings you start. While a recording runs, the extension captures the pages you visit and what they show, including information about other people, such as a client's details on a carrier portal. It also captures your clicks, navigation, and changes to form fields, with what you type masked as described below. If you allow microphone access, it records your narration and whatever else your microphone picks up.
• Website logins. The website address, username, and password of each login saved to your InsureTrek account, the current sign-in code for logins that use an authenticator app, and any login you choose to save while you browse.
• The page you are on. To know where a feature applies, the extension checks the page you are on, for example to find sign-in fields. This check runs in your browser. When a feature needs our servers, such as to look up the logins saved for a website, the extension sends the website's address, not the page's content.
• Technical information. Your IP address, the extension's version, and a record of the requests the extension makes to our servers, including the website address when it looks up a login.

Rules every feature follows

• Nothing is saved or shared unless you ask. A recording starts only when you start it, after you agree on the extension's consent screen, and stops when you stop it or it reaches the time limit shown in the extension. A saved login is filled only when you pick it, and only on the website it was saved for. If saving logins is turned on for your account, the extension notices when you sign in to a website and holds the username and password you typed so it can offer to save them. The username and password reach our servers only if you choose to save them.
• Recordings mask what you type, not what a page shows. Passwords and other values you type into form fields are replaced with placeholder characters before a recording is stored. Text, images, and data a page displays are recorded as they appear. Review a recording, and anything made from it, before you share it, and do not record pages, calls, or people you are not allowed to record.
• Saved logins stay on our servers. Saved passwords and authenticator secrets are stored on our servers, not in the extension. When the extension needs a login for a moment, such as while you decide whether to save it, it keeps it in your browser's memory, not on disk, and clears it within minutes if you do not save it.
• Recordings leave your device when they upload. While a recording is in progress, the extension keeps it in your browser's storage, and it deletes that copy once the recording reaches our servers.
• Information is encrypted. Everything the extension sends to our servers is encrypted in transit. Saved logins are also encrypted at rest, with managed encryption keys that we rotate regularly.

How we use it

We use information from the extension only to provide its features, to support you when you ask for help, and to keep the extension and your account secure. We do not use it for advertising, we do not sell it, and we do not use it to determine creditworthiness or for lending.

Our use of information received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Who can see it

• You, and the people your organization's InsureTrek account gives access to, such as your agency's admins and, where an upline's account covers your agency, the upline's admins. Your organization decides who has access.
• The people you choose to share a recording or login with.
• InsureTrek staff and contractors, only when you ask for help, to investigate a security issue, or when the law requires it.
• Service providers that host, secure, and process this information for us, such as our cloud hosting, sign-in, and encryption key providers. They may use it only to provide their services to us, and may not use it to train their own models. Each one is on our subprocessor list, and we add a provider to that list before it receives information from the extension. Product customers can request the list at hello@insuretrek.com.

How long we keep it

Recordings, what is made from them, and saved logins stay until you or an admin on your account deletes them, and are deleted with the rest of a customer's data when its agreement ends. Sign-in tokens are cleared when you sign out, and temporary data is cleared within minutes. Uninstalling the extension stops it from collecting anything further; it does not delete what is saved in your account.

How we share information

We share personal information in the ways described in this section:

• Service providers. Companies that provide services to us, including hosting, analytics, scheduling, payment processing, email delivery, and customer support tooling, receive the information they need to do so, under agreements that limit how they can use it. Product customers can request our current subprocessor list at hello@insuretrek.com.
• NIPR and state regulators. When you or your organization file an application or transaction through InsureTrek, the required information goes to NIPR and the relevant state insurance departments.
• Advertising and sales partners. As described above, advertising networks receive information about your visits to this website for measurement and targeted advertising, and a sales-intelligence service receives it to match visits to companies.
• Within a customer's account. Producer data in a customer's InsureTrek account is visible to the people that customer grants access to. We do not share one customer's data with another customer, and we do not sell producer licensing data.
• Legal reasons. We disclose information when the law requires it, for example in response to a valid subpoena or a regulator's demand, or to protect our rights, our users, or the public.
• Business transfers. If InsureTrek is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction, subject to this policy.

Data retention

We keep personal information for as long as we need it for the purposes above. Account and licensing data is kept while a customer's account is active; when a customer's agreement ends, we delete the customer's data as described in the Terms of Service and in any data processing agreement, unless the law requires us to keep it longer. Demo and contact records are kept while we have a business need for them, such as an ongoing conversation or a customer relationship. The advertising, analytics, and sales services described above retain the data they collect under their own retention limits. When we no longer need information, we delete it or de-identify it.

Security

We take security seriously, and we back that up with an independent audit. InsureTrek is SOC 2 Type II audited. Data is encrypted in transit and at rest, hosted on managed cloud infrastructure in the United States, and protected by role-based access controls with customer data isolation. Staff access to production data is limited to those who need it and is logged. Our SOC 2 report and subprocessor list are available on request through our Trust Center.

No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

Your rights

Several US states, including California, give their residents rights over personal information. Depending on your state, these can include the right to:

• Know what personal information we have about you and get a copy, in a portable format.
• Correct inaccurate information.
• Delete your information.
• Opt out of targeted advertising and of the "sale" or "sharing" of personal information.
• Limit how we use sensitive personal information. We use it only to provide the service you asked for, which is a use the law allows without a request.
• Not be treated differently for exercising these rights.

To exercise any of these rights, email hello@insuretrek.com with the request and the email address you've used with us. To opt out of sale or sharing, you can also use the controls under Your privacy choices.

To verify a request to know, correct, or delete, we match the email address you send it from with our records and may ask one follow-up question to confirm it is you. We do not ask for more than we need. You can use an authorized agent; we will ask the agent for your signed permission or ask you to confirm the request directly. We respond within 45 days and tell you if we need longer. If we deny a request, you can appeal by replying to our decision, and someone else at InsureTrek will review it. If we deny your appeal, you may contact your state attorney general to submit a complaint; we will include instructions for doing so in our appeal decision.

These rights apply to information we hold as the business, for example if you visited this website or bought a license application from us directly. If your information is in InsureTrek because your agency, upline, or carrier put it there, we process it on that organization's behalf, and we will refer your request to them and help them respond. Note that licensing records held by NIPR and state insurance departments are governed by those bodies, not by us; correcting a state licensing record happens with the state, not in InsureTrek.

Details for state privacy laws

State privacy laws ask businesses to describe their practices using specific categories. This section restates the rest of this policy in those terms.

Categories we collect. In the past 12 months we collected these categories of personal information: identifiers (such as name, email address, phone number, NPN, IP address, and cookie and device identifiers); professional information (such as license status, lines of authority, appointments, continuing education status, and regulatory actions); commercial information (such as products bought and demo and support history); internet activity (such as pages viewed, clicks, and session recordings on this website, and workflow recordings in the extension); approximate location derived from IP address; audio, when you record narration in the extension; and sensitive personal information, described below. The sections above describe the sources, purposes, and recipients for each.

Sold or shared. In the past 12 months we shared identifiers and internet activity from this website with advertising networks for cross-context behavioral advertising, and with a sales-intelligence service to identify the companies behind visits. We did not sell or share any other category. We do not have actual knowledge that we sell or share the personal information of anyone under 16.

Sensitive personal information. This means account login credentials, including the website logins saved through the extension, and the Social Security numbers and other details on state applications, described above. We use it only to provide the service you asked for, and we do not use it to infer characteristics about you.

Your privacy choices

You can opt out of the advertising and sales tracking described under Advertising and analytics, which some US state privacy laws treat as "sharing" or a "sale" of personal information.

Opt out of advertising and sales tracking

When you opt out, this website stops loading its advertising, sales, and session replay tags in this browser, and Google Analytics, which loads with our Google advertising tag, stops too. None of those tags load on this page. Your choice is stored in this browser only, so set it again if you clear your browser data or use a different browser or device.

Global Privacy Control and Do Not Track

We honor Global Privacy Control (GPC). If your browser or a browser extension sends the GPC signal, we treat it as an opt-out of the sale or sharing of personal information, and the tags above do not load. We process the signal without asking you for anything else. It applies to the browser that sends it, not to your account or your other devices. We do not respond to the older "Do Not Track" browser setting, because there is no agreed standard for what it means.

The product's signup and login pages

The signup and login pages at app.insuretrek.com also use advertising tags, and they do not yet read the setting above or the GPC signal. Until they do, use the advertising networks' own settings below for those pages.

Other choices

You can also limit ads through Google's ad settings, Meta's ad preferences, and the Digital Advertising Alliance's opt-out page, and block cookies in your browser settings.

What this does not change

Opting out does not stop the first-party product analytics we run for our own use, and it does not affect the licensing data we process for customers in the InsureTrek product. That data is never used for advertising. To exercise other privacy rights, such as access or deletion, see Your rights above or email hello@insuretrek.com.

Children

This website and the InsureTrek product are for business use by adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We update this policy as our services change, and the date at the top shows when it last changed. We review it at least once a year. If a change materially reduces your rights, or materially expands how we use or share personal information in the InsureTrek product or the extension, we will tell customers' account admins by email or in the product at least 30 days before it takes effect. We will not use or share information we already hold in a materially different way without the consent the law requires. New features that handle information in the ways this policy already describes, new service providers, and clarifications are not material changes, and they take effect when posted. The current version always lives at insuretrek.com/privacy, and earlier versions are available on request.

Contact

Questions about privacy, or requests under this policy:

INSURETREK, LLC
8745 Henderson Rd, Ste 220
Tampa, FL 33634
hello@insuretrek.com
(888) 691-7578