Privacy Policy

1. Who We Are

InsuranSync (“we”, “us”, or “our”) is the personal information controller responsible for the personal data you provide when using our lead management platform at insuransync.com. You may reach our Data Protection Officer at hello@insuransync.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), role, and organization details provided at registration.
• Lead data: names, contact numbers, email addresses, and other details of insurance leads that you or your agents upload into the platform.
• Usage data: IP address, browser type, pages visited, and actions performed within the Service, collected via server logs and analytics.
• Billing data: subscription plan and payment method details processed by our payment provider. We do not store full card numbers.
• Profile data: avatar images or other optional profile information you choose to upload.

3. How We Use Your Data

We process your personal data for the following purposes:

• To provide, maintain, and improve the InsuranSync platform
• To manage your subscription and process payments
• To authenticate users and prevent unauthorized access
• To respond to support requests and inquiries
• To send transactional emails (e.g., password resets, subscription notices)
• To comply with our legal obligations under Philippine law
• To generate anonymized, aggregated analytics to understand how the platform is used (no individual is identifiable from these reports)

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your data on the following bases:

• Consent — for optional features and marketing communications (you may withdraw consent at any time).
• Contractual necessity — processing required to deliver the Service you subscribed to.
• Legitimate interests — security monitoring, fraud prevention, and product improvement.
• Legal obligation — compliance with Philippine laws and lawful requests from competent authorities.

5. Data Sharing and Third Parties

We may share your data with trusted third-party service providers who assist us in operating the Service, subject to strict confidentiality obligations. These include:

• Cloud infrastructure and hosting providers
• Payment processors (for subscription billing only)
• Email delivery services (for transactional emails only)

We may also disclose personal data when required by law, court order, or other legal process, or to protect the rights, property, or safety of InsuranSync, our users, or the public.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account termination, we retain data for 30 days to allow for data export, after which it is permanently deleted from our systems, unless a longer retention period is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), hashed passwords, access controls, and regular security reviews.

In the event of a personal data breach that may adversely affect you, we will notify the National Privacy Commission (NPC) and affected individuals within 72 hours of discovery, as required by the Data Privacy Act.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data:

• Right to be informed — to know what data we collect and how it is used.
• Right to access — to request a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data under certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to certain types of processing, including direct marketing.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.

To exercise any of these rights, contact us at hello@insuransync.com. We will respond within 15 business days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated “Last updated” date and, where appropriate, by sending an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.