Privacy Policy

1. Scope, and insurance information covered by our GLBA notice

This policy covers information collected through our website (for example, quote requests, policy-review uploads, and waitlist signups), information used for our marketing, and information about businesses we contact by email.

Information we collect to provide insurance to you as an individual — for example, applications, policy, payment, and claims information for coverage you obtain for personal, family, or household purposes — is "nonpublic personal information" governed by the federal Gramm-Leach-Bliley Act (GLBA) and California insurance and financial privacy law. That information is handled under our separate GLBA Privacy Notice, which we provide when you become a customer, and to the extent it is subject to GLBA it is exempt from the California Consumer Privacy Act (CCPA). Where this policy and our GLBA Privacy Notice differ for that information, the GLBA Privacy Notice controls.

2. Personal information we collect, and where it comes from

In the past 12 months we have collected the following categories of personal information:

We do not ask for Social Security numbers, driver's license numbers, financial account numbers, or health information through the website. Documents you choose to upload may still contain such information; we use it only to review your coverage as you requested.

3. How we use personal information

• Providing what you ask for: preparing quotes, reviewing and scoring uploaded policies, checking carrier eligibility, and placing and servicing coverage you request.
• Communicating with you: confirmation emails, reports, quotes, follow-ups on a request you made, renewal reminders for clients, and, if you opted in, text messages about your request.
• AI-assisted policy review: uploaded policies are processed with Google's Gemini models to extract and organize policy terms. A licensed agent reviews the results before we send them to you. We do not use your documents to train AI models.
• Marketing: telling businesses about our services, including the email outreach described in Section 9.
• Operating and improving the site: hosting, measuring site traffic and performance, diagnosing errors, and keeping our services secure.
• Legal and compliance: keeping records of consents and transactions, meeting insurance record-keeping requirements, and responding to lawful requests.

4. Who we disclose personal information to

We disclose personal information only to the following, and only for the purposes in Section 3:

• Service providers that run our services for us: Supabase (database, file storage, and sign-in), Vercel (website hosting, traffic and performance analytics), Google (Gemini AI processing, Google sign-in, appointment scheduling, and Google Analytics when enabled), Resend (email delivery), and Sentry (error monitoring). They may use the information only to provide their services to us.
• Insurance carriers and wholesale partners: such as Pathpoint, when you ask us for a quote or coverage — that is how quotes are obtained and policies placed.
• Our outreach email provider: Apollo.io, which we use to find business contact details and to send the outreach emails described in Section 9. Apollo is also connected to our main email inbox to send and track email, so it can process the contents of email correspondence with us, including names and contact details. Apollo may add business contact details it receives this way to its own database (see Section 5). Information you submit through our website forms is not sent to Apollo.
• Legal and safety: regulators, courts, or law enforcement when required by law, or to protect our rights, our customers, or others.
• Business transfers: a buyer or successor if our agency is sold or merged, subject to this policy.

Mobile phone numbers collected for text messaging are never shared with third parties or affiliates for their marketing or promotional purposes.

5. Sale and sharing of personal information; cookies and tracking

We do not sell, or "share" for cross-context behavioral advertising, the personal information you give us through this website, as those terms are defined under California law. We do not use advertising cookies or advertising pixels.

Apollo.io, the email outreach service we use (see Sections 4 and 9), may add business contact details it receives from us — from our outreach emails and from email correspondence with us — to the database it makes available to its other customers. Under California law, that may count as a "sale" of personal information. You can opt out at any time; see Section 7.

We have no actual knowledge of selling or sharing the personal information of anyone under 16.

Our website uses these technologies:

• Sign-in cookies: set by Supabase only when an agent signs in to our portal, to keep the session active.
• Browser storage: your policy-review results may be saved in your own browser's local storage so you can return to them. You can clear this in your browser settings.
• Vercel Web Analytics and Speed Insights: aggregate page-view and performance measurement that does not use cookies.
• Sentry: error monitoring. When an error occurs, and for a small sample of visits, Sentry records a replay of the page interaction with all text masked and all images and media blocked, so we can fix problems.
• Google Analytics: when enabled, uses cookies to measure site traffic for us. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Do Not Track: our website does not respond to browser "Do Not Track" signals. Our website does not sell or share the information you enter on it, so a Global Privacy Control signal has nothing to act on there. To opt out of the Apollo disclosures described above, use Section 7.

6. How long we keep personal information

We keep personal information for as long as we need it for the purposes in Section 3 and for as long as insurance record-keeping and other laws require, under our records retention policy. The main periods are:

• Client policy and transaction records: at least 5 years after the policy ends or the transaction, as insurance record-keeping law requires.
• Policy reviews and coverage recommendations we sent you: at least 7 years.
• Records of consents you gave us: for the length of our relationship plus 5 years.
• Policy documents you uploaded that we never reviewed: deleted automatically after 2 years.
• Quote requests and reviewed policy reviews that did not lead to a policy: at least 5 years.
• Waitlist emails: until a year after the related product launches, or sooner if you ask us to remove you.
• Business contact details we used for email outreach: deleted 2 years after our last contact, except your do-not-contact request.
• Do-not-contact requests: kept permanently, so we never contact you again by mistake.

When a period ends, we delete the information or keep it only in de-identified form — unless a legal claim, audit, or investigation requires us to keep it longer.

7. Your California privacy rights

If you are a California resident, you may make the following requests about your personal information. We honor these requests for California residents whether or not a particular law requires us to.

• Right to know: the categories of personal information we have collected about you, its sources, why we collected it, the categories of third parties we disclosed it to, and a copy of the specific pieces of personal information we hold about you.
• Right to delete: personal information we collected from you, subject to legal exceptions — for example, records we must keep under insurance law, or information needed to complete a transaction you requested.
• Right to correct: inaccurate personal information we hold about you.
• Right to opt out of sale or sharing: as described in Section 5, Apollo.io may add business contact details it receives from us to its own database. If you opt out, we will stop emailing you, add you to our do-not-contact list, delete your details from our Apollo account, and ask Apollo to remove them from its database. The quickest way is the unsubscribe link in our emails or policygauge.com/unsubscribe. You can also ask Apollo directly through its Privacy Center at apollo.io/company/privacy-center.
• Right to limit use of sensitive personal information: we use sensitive personal information (such as account login information, or sensitive details inside documents you upload) only to provide the services you request and for other purposes the law permits, and not to infer characteristics about you. You may still make this request, and we will confirm how your information is used.
• Right to non-discrimination: we will not deny you services, charge you a different price, or provide a different level of service because you exercised any of these rights.

8. How to make a privacy request

• How to submit: Email brian@policygauge.com with "Privacy Request" in the subject line, or call us at (415) 582-0802, and tell us which right you want to exercise. If you email, please send it from the email address you used with us, if you can.
• How we verify your identity: we match the information in your request against what we already have — usually by confirming your request through the email address on file. To receive specific pieces of personal information, or to delete or correct sensitive information, we may ask for two or three additional details we already hold (such as your business name and phone number). We use the information you give us for verification only for that purpose.
• Authorized agents: someone you authorize may submit a request for you with your signed written permission. We may also ask you to verify your identity directly with us.
• Response timeline: we will confirm that we received your request within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and may take up to 45 more days. If we cannot complete a request, we will explain why.
• Cost: requests are free. You may request a copy of your information up to twice in any 12-month period.

9. If we contacted you by email

We may email businesses that appear in public records — such as state contractor-license and business-registration records — about insurance services that may fit them. We find business contact details from those records, from the business's public website and domain registration, and through Apollo.io, which we also use to send these emails. Apollo may keep business contact details in its own database, which it makes available to its other customers; see Sections 5 and 7 to opt out.

If you don't want to hear from us, use the unsubscribe link in any of our emails, visit policygauge.com/unsubscribe, reply "unsubscribe," or email brian@policygauge.com. We will stop emailing you, add your address to our do-not-contact list, delete your details from our Apollo account, and ask Apollo to remove them from its database. You can also use any of the rights in Section 7, including asking us to delete your information. If you unsubscribed by mistake, email us and we will restore your preference — only at your request.

10. Text messages

If you give us your mobile number and opt in, we may send text messages about your quote, policy review, or service. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP to opt out or HELP for help.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure.

12. Children

Our services are for businesses and adults. They are not directed to children under 16, and we do not knowingly collect personal information from them.

13. Changes to this policy

We will post any changes on this page and update the "Last updated" date. If we make a material change in how we use or disclose personal information, we will tell you before the change applies to information we already have.

14. Contact us

Questions or requests about this policy: brian@policygauge.com or (415) 582-0802. Policy Gauge, a DBA of Gauge Insurance Solutions LLC · Brian Platter, licensed agent · CA License #6018474.