This Privacy Notice explains how Insurvas (“Insurvas,” “we,” “us,” or “our”) handles information within the Insurvas CRM (the “Platform”), a private, invite-only workspace provided to participating insurance agencies, call centers, licensed and unlicensed agents, retention and accounting teams, and other authorized account users. It supplements, and should be read together with, any agreement between Insurvas and your organization. Where this notice and that agreement differ with respect to the Platform, your agreement controls for Platform activities.
1. Information We Collect
- Account and profile data — your name, work email, assigned role and permissions, call center or agency affiliation, account status, and authentication credentials.
- Lead, policy, and deal data you submit — customer and insured contact details, policy and carrier information, coverage and premium amounts, application and underwriting notes, call dispositions, transfer and intake records, retention and chargeback outcomes, and commission and invoicing records.
- Payment and draft information — where entered to support premium drafts or failed payment fixes, limited banking or draft details and the status of payment-related tasks.
- Usage and device data — IP address, browser and device type, pages viewed, actions taken, timestamps, and security events collected through server logs and essential cookies.
- Support communications — messages you send us through in-Platform support channels, connected messaging tools, or by email.
2. How We Use Information
We use information to:
- authenticate users and keep Platform accounts secure;
- provide and operate Platform features for lead intake, transfers, deal flow, retention, payment fixes, invoicing, commissions, team management, and reporting;
- maintain the availability, integrity, performance, and auditability of the Platform;
- provide support and respond to requests from authorized users;
- detect, prevent, and investigate fraud, abuse, or security incidents; and
- comply with legal obligations and enforce the agreements that apply to the Platform.
3. Your Role and Responsibilities
Your organization decides what customer, lead, policy, payment, and billing information is entered into the Platform and why. For that information, your organization acts as the controller and Insurvas acts as a processor handling the data on your organization’s behalf and instructions. You are responsible for ensuring you have a lawful basis and any required consents, authorizations, and disclosures — including compliance with telemarketing, do-not-call, and consumer-protection rules — before entering personal information about customers, insureds, or other third parties.
4. Sensitive and Financial Information
The Platform may contain financial account or draft details, payment status, and personal identifiers relating to customers and insureds. We treat this information as confidential, restrict access through role-based permissions, and process it only to provide and support the Platform. You remain responsible for handling such information in accordance with applicable laws, industry rules, and your professional obligations.
5. How We Share Information
We share information only as needed to operate and support the Platform:
- within your organization, according to each user’s role and permissions;
- with Insurvas personnel and authorized service providers who need access to support the Platform;
- with service providers and sub-processors that host, secure, or support the Platform under contracts requiring appropriate safeguards; and
- when required by law or legal process, or to protect the rights, safety, and security of users and the Platform.
We do not sell personal information, and we do not use Platform data for advertising.
6. Service Providers and Sub-processors
We rely on a limited set of trusted providers to deliver the Platform, which may include Supabase for authentication, database, and file storage; our cloud application hosting provider; and the messaging and email providers used for in-Platform notifications and support. These providers process data on our behalf under their respective terms and data-protection commitments.
7. Cookies and Similar Technologies
The Platform uses cookies and similar technologies that are necessary to sign you in, keep your session secure, remember preferences, and maintain reliability. You can control cookies through your browser, but disabling essential cookies may prevent the Platform from working.
8. Data Security
We protect information using encryption in transit, role-based access controls, row-level security, least-privilege permissions, session controls, and audited infrastructure. No system is perfectly secure. You are responsible for safeguarding your credentials and promptly notifying us of any suspected unauthorized access.
9. Data Retention
We retain information for as long as your account and your organization’s relationship with us remain active, and afterward only as needed to comply with legal, accounting, reporting, dispute, and agreement-enforcement obligations. We delete or de-identify information when it is no longer required.
10. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to or withdraw consent for certain processing. Because much of the data in the Platform is controlled by your organization, please direct requests about customer or policy data to your organization; we will assist our customers in responding. To exercise rights regarding your own account information, contact us through insurvas.com.
- California residents: we do not sell or share personal information for cross-context behavioral advertising.
- EEA/UK residents: our lawful bases include performing our contract with your organization, legitimate interests in operating and securing the Platform, and compliance with legal obligations.
11. International Data Transfers
Insurvas is based in the United States, and information is processed and stored in the United States. If you access the Platform from outside the United States, you understand that your information will be transferred to and processed there.
12. Children’s Privacy
The Platform is a business tool intended only for authorized adult professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 through the Platform.
13. Changes to This Notice
We may update this notice from time to time. We will revise the “Last updated” date above and, for material changes, provide notice through the Platform or by email.
14. Contact Us
Questions about this notice or our privacy practices can be directed to Insurvas through insurvas.com, or to your organization’s administrator for questions about customer and policy data.