Privacy Policy

1. Scope and Controller Identity

This Privacy Policy outlines how CODE4 ENTERPRISES LLC, an Arizona limited liability company doing business as Insure Assist AI (“we”, “our”, “Company”), collects, processes, and protects personal data securely on behalf of our B2B agency clients. For the purposes of the GDPR and CCPA, CODE4 ENTERPRISES LLC operates primarily as a Data Processor for insurance records, while the subscribing agency operates as the Data Controller.

2. Data We Collect

• Direct Account Data: Administrator names, corporate email addresses, and billing details required to manage your SaaS subscription.
• Automated Telemetry: IP addresses, browser types, and usage diagnostics specifically gathered to identify system errors, monitor performance, and maintain application security.
• AI Processing Data: The contextual insurance data, including policy details, endorsements, and ACORD inputs, transmitted via our API to generate automated workflows.

3. Artificial Intelligence Data Usage Limits

As a B2B AI platform processing sensitive insurance data, we employ strict isolation architectures. Under no circumstances do we utilize Customer Processing Data, policyholder PII, or insurance records to train, fine-tune, or improve foundational AI models. Data processed for extraction is kept strictly within private, isolated cloud environments.

4. Sub-processors and Data Sharing

We do not “sell” or “share” your data for cross-context behavioral advertising as defined by the CCPA/CPRA. We share data only with vetted enterprise infrastructure sub-processors (including Google Cloud Platform, Stripe, Firebase, Resend/Loops, and Sentry) strictly necessary to deliver our services. All sub-processors are bound by stringent Data Processing Agreements (DPAs).

5. Data Security Measures

We implement enterprise-grade technical and organizational safeguards. Data is encrypted in transit using strict TLS 1.3 and at rest utilizing AES-256 block ciphers. Our platform is built entirely on Google Cloud Platform's highly secure, SOC 2 compliant physical and network infrastructure with strict tenant data isolation.

6. International Data Transfers

If you are transmitting data from the European Union (EU) to our US-based infrastructure, we legally facilitate these transfers leveraging Standard Contractual Clauses (SCCs) actively approved by the European Commission, ensuring your regional data rights travel securely with your information.

7. Data Retention and Deletion

Account and active insurance policy records are retained securely during your active subscription to power real-time Certificate of Insurance generation and operations. Upon account cancellation, data is retained for a 30-day grace period to facilitate export, after which all project data is permanently purged. You may formally request the immediate deletion of your tenant data at any time (“Right to Erasure”).

8. Exercise Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have the absolute right to access, rectify, delete, restrict processing, or port your personal data. California residents hold the explicit right to opt out of any theoretical “sale” of data. To exercise these rights or for legal inquiries, please contact CODE4 ENTERPRISES LLC at privacy@insureassistai.com.