What we collect

• Account info — your name, email address, password (stored hashed), and any phone or state code you provide on your profile.
• Usage info — which pages you visit, what you click, and which agencies you save or compare. We use this to operate the platform and improve the experience.
• Communications — messages you exchange with agencies through the platform, files you attach to those messages, and notifications we send you.
• Quote and application data — the information you provide when requesting quotes or starting an application. We share what's needed with the agencies you choose to engage with.
• Authentication signals — IP address and user agent on each login, failed login attempts, password changes, and 2FA toggles, recorded for security and abuse prevention.

What we don't collect

We don't buy advertising-tracker data about you, we don't fingerprint your browser for ad networks, and we don't sell your personal information to third parties.

Who can see what

• Agencies you contact through the platform see what you send them: your name (or display name), the messages you send, and any quote/application info you submit.
• Admins on our team can view audit logs, message threads flagged for moderation, and account events for compliance and abuse investigation.
• License documents you upload (agency owners) are visible to admin only, never to consumers.

Your controls

• Edit or remove your profile information at any time in Settings → Profile.
• Adjust which platform notifications you receive in Settings → Notifications. Security-critical messages always send regardless of preference.
• Delete your account from Settings → Profile. Some records are retained as required for audit, tax, and dispute purposes.
• Request a copy of your data or ask questions: privacy@whyinsurance.me.

Cookies

We use first-party cookies for session authentication and CSRF protection. We do not use third-party advertising or cross-site tracking cookies.

Security

Passwords are stored hashed (bcrypt). Two-factor authentication is available and recommended on every account. Files uploaded to the platform are scanned before they can be referenced. We log authentication events to detect and respond to abuse.

State residents — additional rights

Depending on where you live, you may have additional rights under state law (for example, California's CCPA/CPRA). To exercise those rights, contact privacy@whyinsurance.me. We respond within the timelines required by the applicable law.

Changes to this policy

We will post a notice on this page when this policy materially changes, and we'll update the "last updated" date above.