# Privacy Policy > What personal information InsureTrek collects on this site, in the product, and in the InsureTrek Assist browser extension, how it is used and shared, and the choices you have. ## Who we are InsureTrek is producer licensing and compliance software for insurance agencies, FMOs and uplines, carriers, and individual insurance producers. It is operated by INSURETREK, LLC, a Delaware limited liability company ("InsureTrek," "we," "us"). INSURETREK, LLC 8745 Henderson Rd, Ste 220 Tampa, FL 33634 [hello@insuretrek.com](mailto:hello@insuretrek.com) [(888) 691-7578](tel:+18886917578) This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. We are a US company serving US customers. ## What this policy covers This policy covers: * **This website** (insuretrek.com), including our blog, guides, and demo booking pages. * **The InsureTrek product** at app.insuretrek.com, where it handles personal information. Customers who use the product under a service agreement should also read the [Terms of Service](/terms) and, where one is in place, their data processing agreement, which govern how we handle their data. * **The InsureTrek Assist browser extension**, described in [its own section](#browser-extension) below. This policy is incorporated by reference into our Terms of Service. If this policy conflicts with a customer's Terms of Service, order, or data processing agreement about data in the product, that agreement controls. In the Terms of Service, the producer and account data described in this policy is called "User Submissions" and "User Information." When an agency, upline, or carrier uses InsureTrek to manage its producers, we process producer data on that customer's behalf and under its instructions. If you are a producer whose information is in InsureTrek because your agency or upline put it there, your agency or upline decides how that data is used, and requests about it may need to go through them. We say more about this under "Your rights." ## Information we collect **Website visitors.** When you browse this website, we and the analytics, advertising, and sales services described below collect information about your visit: pages viewed, links clicked, time on page, approximate location derived from your IP address, browser and device information, and the URL parameters you arrived with (such as campaign tags in a link you clicked). This collection uses cookies and similar technologies. **People who book a demo or contact us.** Demo scheduling on this website runs on an embedded scheduling service. When you book, it collects the details you enter, typically your name, email address, and anything you add to the booking, and shares them with us so we can hold the meeting. If you email or call us instead, we receive whatever you choose to share. **Customers and their users.** When an organization signs up for InsureTrek, we collect account information for its users: name, work email, role, and login credentials or the sign-in your organization uses. We also collect billing information, which is handled by our payment processor; we do not store full payment card numbers. **Individual producers.** Producers who use InsureTrek directly, for example to file a license application for a flat fee, give us their name, contact details, National Producer Number (NPN), and the information a state requires for the application, and pay through our payment processor. A state application can include your Social Security number, date of birth, residence address, and the background questions the state asks. We send that information to NIPR and the state, and we use it only to complete and support your filing. **Producer licensing data.** InsureTrek is an official NIPR reseller. On behalf of each customer, we pull producer licensing data from NIPR's Producer Database: NPNs, license status, lines of authority, carrier appointments, continuing education status, and regulatory actions. This data comes from NIPR and from state insurance departments, and each customer's data is used one to one for that customer. We use regulatory-action and licensing history solely to provide licensing and compliance services to the customer that requested it; we do not use it for advertising or any other purpose. InsureTrek's services contain data from NIPR. **Sources.** In short: we collect information directly from you, automatically from your browser and our servers' request logs when you use this website, from NIPR and state regulators when a customer directs us to pull licensing data, and from our customers when they add their producers to the product. ## How we use information We use personal information to: * Operate this website and the InsureTrek product. * Respond to demo requests, questions, and support requests. * Provide licensing and compliance services: pulling and refreshing NIPR data, filing applications, tracking renewals and appointments. * Process payments and manage accounts. * Send service and marketing email. You can unsubscribe from marketing email at any time. * Understand how the website and product are used, and improve them. * Advertise InsureTrek, including measuring ad performance and showing ads to people who have visited this website. * Meet our legal obligations and enforce our agreements. ## Advertising and analytics This website uses third-party advertising, sales, analytics, and session replay services, and some of what they collect is used for targeted advertising and sales follow-up. We describe them here by what they do. The specific services change from time to time; for the current list, email [hello@insuretrek.com](mailto:hello@insuretrek.com). ### Advertising Advertising networks, such as Google and Meta, place tags on this website. They measure whether our ads lead to demos and signups, and they let us show our ads to people who have visited this website, on those networks' platforms. ### Sales A sales-intelligence service receives the IP address and pages of each visit and tries to match them to the company behind it. We use the result at the company level, to follow up with businesses that showed interest in InsureTrek. ### Analytics and session replay Analytics services tell us how visitors move through the website: page views, clicks, performance, and the URL parameters you arrived with. A session replay service records clicks, scrolling, mouse movement, and the pages viewed, and turns them into replays and heatmaps we use to improve the website. It masks page text and anything you type before a recording is saved. Some of these services set their own identifiers and may also use the data under their own policies. We use Google Analytics, which loads with our Google advertising tag, and Microsoft Clarity, which sets Microsoft cookies that Microsoft also uses across its own services. See [how Google uses data from sites that use its services](https://policies.google.com/technologies/partner-sites) and the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). ### Scheduling, hosting, and security The demo page embeds a scheduling service that loads when you open it and sets its own cookies. Our hosting and security providers handle technical data such as IP addresses and collect traffic statistics to keep the website running. When you follow a signup link from this website into the product, we pass along the URL parameters from the link that brought you here, such as campaign tags, so we know which marketing led to which signups. Under some US state privacy laws, the advertising and sales activity above counts as "sharing" or a "sale" of personal information. You can opt out under [Your privacy choices](#your-privacy-choices). We do not sell personal information for money. ## InsureTrek Assist browser extension InsureTrek Assist is our browser extension for licensing and contracting work in the browser. It records a workflow you choose to capture, and it fills NIPR Attachment Warehouse forms with your account's data. This section covers what the extension collects and what happens to it. The rest of this policy applies to it too. ### What the extension collects * **Sign-in details.** Your email address and the access tokens issued when you sign in, so you stay signed in. * **Agency and role.** The agency and role you are working as, so the extension shows only what your account allows. * **Workflow recordings.** When you start a recording, the extension captures the actions you take on the websites you visit while it runs: clicks, page navigation, and changes to form fields. If you allow microphone access, it also records your spoken narration. * **NIPR form data.** What you enter, or what the extension fills in, on NIPR Attachment Warehouse pages, such as login details, submitter information, and document details. * **Documents you attach.** Files you choose from your DocuVault library to attach to a NIPR submission. ### How recording works Recording starts only when you start it from the extension, after you have agreed on its consent screen. It stops when you stop it or when it reaches the time limit shown in the extension. While it runs, it can capture activity on any website, because a workflow can span several sites. Password fields are excluded, and fields that look sensitive by their name or type are masked before a recording is saved. Masking is automatic and may not catch every field, so check a recording before you share it. ### How we use it We use extension data only to run the extension: to sign you in, fill NIPR forms when you ask, send the documents you choose to NIPR, save submitter information for your next submission, and turn your recordings into workflows you and your team can replay. We process recordings on our own systems. If we add a feature that sends recordings to a third-party service, we will say so here first. We do not use extension data for advertising, and we do not sell it. Our use of information received through the extension follows the [Chrome Web Store User Data Policy](https://developer.chrome.com/docs/webstore/program-policies/user-data-faq), including its Limited Use requirements. ### Who can see it and where it goes * Saved recordings are visible to you and to the admins of your InsureTrek account, including admins at an upline whose account covers your agency. * InsureTrek staff and the contractors who build the extension view a recording only when you ask for help with it, to investigate a security issue, or when the law requires it. * Recordings and their audio are stored with Amazon Web Services (AWS). * Sign-in runs through Auth0\. Your tokens are stored in your browser, where the websites you visit cannot read them. * NIPR form data and the documents you attach go to our servers, then to NIPR to complete your submission. * Everything the extension sends to our servers is encrypted in transit over HTTPS. ### How long we keep it Saved recordings stay until you or an admin on your account deletes them, and are deleted with the rest of a customer's data when its agreement ends. Saved submitter information stays until you or your admin removes it. Sign-in tokens are cleared when you sign out. Uninstalling the extension stops it from collecting anything further. ## How we share information We share personal information in the ways described in this section: * **Service providers.** Companies that provide services to us, including hosting, analytics, scheduling, payment processing, email delivery, and customer support tooling, receive the information they need to do so, under agreements that limit how they can use it. Product customers can request our current subprocessor list at [hello@insuretrek.com](mailto:hello@insuretrek.com). * **NIPR and state regulators.** When you or your organization file an application or transaction through InsureTrek, the required information goes to NIPR and the relevant state insurance departments. * **Advertising and sales partners.** As described above, advertising networks receive information about your visits to this website for measurement and targeted advertising, and a sales-intelligence service receives it to match visits to companies. * **Within a customer's account.** Producer data in a customer's InsureTrek account is visible to the people that customer grants access to. We do not share one customer's data with another customer, and we do not sell producer licensing data. * **Legal reasons.** We disclose information when the law requires it, for example in response to a valid subpoena or a regulator's demand, or to protect our rights, our users, or the public. * **Business transfers.** If InsureTrek is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction, subject to this policy. ## Data retention We keep personal information for as long as we need it for the purposes above. Account and licensing data is kept while a customer's account is active; when a customer's agreement ends, we delete the customer's data as described in the [Terms of Service](/terms) and in any data processing agreement, unless the law requires us to keep it longer. Demo and contact records are kept while we have a business need for them, such as an ongoing conversation or a customer relationship. The advertising, analytics, and sales services described above retain the data they collect under their own retention limits. When we no longer need information, we delete it or de-identify it. ## Security We take security seriously, and we back that up with an independent audit. InsureTrek is SOC 2 Type II audited. Data is encrypted in transit and at rest, hosted on managed cloud infrastructure in the United States, and protected by role-based access controls with customer data isolation. Staff access to production data is limited to those who need it and is logged. Our SOC 2 report and subprocessor list are available on request through our [Trust Center](/trust). No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires. ## Your rights Several US states, including California, give their residents rights over personal information. Depending on your state, these can include the right to: * Know what personal information we have about you and get a copy, in a portable format. * Correct inaccurate information. * Delete your information. * Opt out of targeted advertising and of the "sale" or "sharing" of personal information. * Limit how we use sensitive personal information. We use it only to provide the service you asked for, which is a use the law allows without a request. * Not be treated differently for exercising these rights. To exercise any of these rights, email [hello@insuretrek.com](mailto:hello@insuretrek.com) with the request and the email address you've used with us. To opt out of sale or sharing, you can also use the controls under [Your privacy choices](#your-privacy-choices). To verify a request to know, correct, or delete, we match the email address you send it from with our records and may ask one follow-up question to confirm it is you. We do not ask for more than we need. You can use an authorized agent; we will ask the agent for your signed permission or ask you to confirm the request directly. We respond within 45 days and tell you if we need longer. If we deny a request, you can appeal by replying to our decision, and someone else at InsureTrek will review it. If we deny your appeal, you may contact your state attorney general to submit a complaint; we will include instructions for doing so in our appeal decision. These rights apply to information we hold as the business, for example if you visited this website or bought a license application from us directly. If your information is in InsureTrek because your agency, upline, or carrier put it there, we process it on that organization's behalf, and we will refer your request to them and help them respond. Note that licensing records held by NIPR and state insurance departments are governed by those bodies, not by us; correcting a state licensing record happens with the state, not in InsureTrek. ## Details for state privacy laws State privacy laws ask businesses to describe their practices using specific categories. This section restates the rest of this policy in those terms. **Categories we collect.** In the past 12 months we collected these categories of personal information: identifiers (such as name, email address, phone number, NPN, IP address, and cookie and device identifiers); professional information (such as license status, lines of authority, appointments, continuing education status, and regulatory actions); commercial information (such as products bought and demo and support history); internet activity (such as pages viewed, clicks, and session recordings on this website, and workflow recordings in the extension); approximate location derived from IP address; audio, when you record narration in the extension; and sensitive personal information, described below. The sections above describe the sources, purposes, and recipients for each. **Sold or shared.** In the past 12 months we shared identifiers and internet activity from this website with advertising networks for cross-context behavioral advertising, and with a sales-intelligence service to identify the companies behind visits. We did not sell or share any other category. We do not have actual knowledge that we sell or share the personal information of anyone under 16\. **Sensitive personal information.** This means account login credentials and the Social Security numbers and other details on state applications, described above. We use it only to provide the service you asked for, and we do not use it to infer characteristics about you. ## Your privacy choices You can opt out of the advertising and sales tracking described under [Advertising and analytics](#advertising-and-analytics), which some US state privacy laws treat as "sharing" or a "sale" of personal information. ### Opt out of advertising and sales tracking When you opt out, this website stops loading its advertising, sales, and session replay tags in this browser, and Google Analytics, which loads with our Google advertising tag, stops too. None of those tags load on this page. Your choice is stored in this browser only, so set it again if you clear your browser data or use a different browser or device. Checking your current setting… Opt out ### Global Privacy Control and Do Not Track We honor Global Privacy Control (GPC). If your browser or a browser extension sends the GPC signal, we treat it as an opt-out of the sale or sharing of personal information, and the tags above do not load. We process the signal without asking you for anything else. It applies to the browser that sends it, not to your account or your other devices. We do not respond to the older "Do Not Track" browser setting, because there is no agreed standard for what it means. ### The product's signup and login pages The signup and login pages at app.insuretrek.com also use advertising tags, and they do not yet read the setting above or the GPC signal. Until they do, use the advertising networks' own settings below for those pages. ### Other choices You can also limit ads through [Google's ad settings](https://adssettings.google.com), [Meta's ad preferences](https://www.facebook.com/adpreferences), and the [Digital Advertising Alliance's opt-out page](https://optout.aboutads.info), and block cookies in your browser settings. ### What this does not change Opting out does not stop the first-party product analytics we run for our own use, and it does not affect the licensing data we process for customers in the InsureTrek product. That data is never used for advertising. To exercise other privacy rights, such as access or deletion, see [Your rights](#your-rights) above or email [hello@insuretrek.com](mailto:hello@insuretrek.com). ## Children This website and the InsureTrek product are for business use by adults. We do not knowingly collect personal information from anyone under 16\. If you believe a child has given us personal information, contact us and we will delete it. ## Changes to this policy When we change this policy, we will update the date at the top and, for material changes, say so on this page or by email. The current version always lives at insuretrek.com/privacy. ## Contact Questions about privacy, or requests under this policy: INSURETREK, LLC 8745 Henderson Rd, Ste 220 Tampa, FL 33634 [hello@insuretrek.com](mailto:hello@insuretrek.com) [(888) 691-7578](tel:+18886917578)