Privacy Policy
Draft v0.1 · Effective date: [DATE] · Last updated: [DATE]
Working draft - not yet in effect. This document is a draft pending legal review. Bracketed items in square brackets are placeholders to be finalized. It does not supersede the currently operative agreement until published with an effective date.
1. Who we are
Underwrite.com is a service operated by [Stand Protect, Inc.] (“Stand,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with the Underwrite.com platform, websites, and related services (the “Service”).
2. Who this policy covers
This policy applies to:
- •Brokers and agents who use the Service (“Users”);
- •Insureds, applicants, and homeowners whose information is submitted to or processed through the Service in connection with a placement; and
- •Website visitors.
Where a broker submits information about their client, the broker is generally responsible to that client for how the information is collected and used; we process that information to provide the Service on the broker’s behalf and as described here.
3. Information we collect
Depending on how you interact with the Service, we may collect:
- •Account and contact information - name, business email, phone, brokerage or agency name, license information, and authentication details.
- •Insured and property information - information you submit about applicants, insureds, homeowners, and properties, including addresses, property characteristics, coverage details, and uploaded documents such as policies, quotes, and applications.
- •Enrichment and hazard data - property, valuation, and risk data associated with a submitted property (see § 4 on sources).
- •Usage and device information - log data, IP address, device and browser information, and how you interact with the Service.
- •Communications - messages, support requests, and related records.
The specific categories of personal information we handle are summarized for California residents in § 9.
4. Where the information comes from
We collect information from: (a) you, when you register, submit data, or communicate with us; (b) brokers, who submit information about their clients and properties; (c) third-party data providers and public sources, from which we obtain property, valuation, hazard, and related enrichment data; and (d) automatically, through your use of the Service.
Some property and enrichment data is obtained through data subscriptions held by Stand and made available to the Service. This data is licensed for use within the Service subject to the applicable provider terms. [Confirm with legal that the description of sourcing and the scope of use match the Verisk / e2value / other provider agreements before publishing.]
5. How we use information
We use personal information to: provide, operate, and secure the Service; process submissions and generate comparisons, extractions, and other outputs; enrich property records; verify eligibility and authenticate Users; communicate with you; provide support; detect and prevent fraud, misuse, and security incidents; comply with legal and data-provider obligations; and maintain and improve the Service. We may use aggregated or de-identified data that does not identify any individual for analytics and product improvement.
6. How we share information
We share personal information with:
- •Service providers who process data on our behalf (for example, hosting, authentication, and document-processing vendors), under contracts limiting their use of the information.
- •Data providers as necessary to obtain enrichment data or comply with their licensing terms.
- •Our affiliates. Underwrite.com operates within the [Stand Protect, Inc.] corporate family, and we may share information with affiliated entities to operate and support the Service, consistent with this policy.
- •Insurance-transaction participants - for example, carriers or other parties involved in a placement, as directed or authorized by the User to carry out the requested service.
- •Legal and safety - where required by law, legal process, or to protect rights, safety, and the integrity of the Service.
- •Business transfers - in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
We do not sell personal information for money. [Confirm treatment of “sale” and “sharing” for cross-context behavioral advertising under CPRA - see § 9.]
7. Data retention
We retain personal information for as long as needed to provide the Service, comply with legal, regulatory, and data-provider obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and legal requirement. [Confirm retention schedule, including insurance-related recordkeeping obligations, with legal.]
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Report concerns to [security@underwrite.com].
9. Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have rights regarding your personal information, subject to exceptions and to any applicable exemptions for information governed by financial-privacy laws (see § 10).
Categories of personal information we may collect include identifiers; professional and employment information; commercial information; internet or network activity; geolocation associated with a property; and inferences. [Confirm the full category list and map to CPRA definitions.]
Your rights may include the right to: know and access the personal information we hold about you; correct inaccurate information; delete personal information; and opt out of any “sale” or “sharing” for cross-context behavioral advertising, if applicable. You may also be entitled to non-discrimination for exercising these rights.
How to exercise your rights: contact us at [privacy@underwrite.com] or [request link/phone]. We will verify your request as required by law. You may use an authorized agent where permitted. [Add “Do Not Sell or Share” and “Limit Use of Sensitive Personal Information” links/mechanisms if applicable.]
10. Insurance information and GLBA
Some information processed through the Service may be nonpublic personal information subject to the Gramm-Leach-Bliley Act (GLBA) and state insurance privacy laws. Personal information subject to those laws may be treated in accordance with their requirements, and certain state privacy-law rights may not apply to it. [Confirm the GLBA/insurance-privacy analysis and the interaction with CCPA/CPRA exemptions with counsel - this is platform-specific and important.]
11. Cookies and analytics
We use cookies and similar technologies to operate the Service, remember preferences, and understand usage. You can manage cookies through your browser settings; disabling some cookies may affect functionality. [Describe any analytics providers and honor any applicable opt-out/Global Privacy Control signals.]
12. Children
The Service is intended for insurance professionals and is not directed to children, and we do not knowingly collect personal information from children under [13/16].
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we will post the updated policy with a new effective date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.
14. Contact us
Privacy questions or requests: [privacy@underwrite.com] · [Stand Protect, Inc., address].
By using Underwrite you also agree to our Terms of Service.