Privacy Policy

This Privacy Policy explains how Bindloops (“Bindloops,” “we”) collects, uses, and protects information when insurance agencies (“Customers”) and their authorized users use the Bindloops platform, and when visitors use this website. Bindloops provides software to insurance agencies; for data that an agency’s clients submit, the agency is the data controller and Bindloops acts as a service provider / processor (and, where applicable, a HIPAA Business Associate) on the agency’s behalf.

1. Information we collect

• Account & business data from Customers: names, work email, phone, agency details, licensing/state data, and billing information (processed by our payment provider).
• End-client datathat Customers and their clients input into the platform (e.g., contacts, policies, financial and, where applicable, health information). Bindloops processes this on the Customer’s behalf under our agreement.
• Usage & technical data: log data, device/browser information, and activity within the platform, for security and to operate the service.

2. How we use information

• To provide, maintain, and secure the platform.
• To support Customers and respond to requests.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.
• To improve our services (in aggregated or de-identified form where feasible).

We do not sell personal information.

3. Sharing & sub-processors

We share information with service providers that help us operate the platform, under contractual data-protection commitments — for example [Supabase] (database/hosting), [Twilio] (telephony/SMS), [Plaid] (bank connectivity, where used), [Meta] (messaging, where used), [Resend] (email), and [Vercel/Fly] (hosting). We may disclose information if required by law. We do not sell personal information.

SMS / Text Messaging

When you provide your mobile number and opt in (via our booking/quote form or by texting START), you may receive recurring SMS from your insurance agent (powered by Bindloops): appointment reminders, policy and application status updates, and conversational follow-ups. Message and data rates may apply; message frequency varies. Reply STOP to opt out at any time, or HELP for help. Mobile opt-in data and consent are not shared with, or sold to, any third parties or affiliates for marketing purposes. Consent is specific to the agent you contacted.

Cuando proporcionas tu número móvil y das tu consentimiento (a través de nuestro formulario de agenda/cotización o enviando START por mensaje), puedes recibir mensajes SMS recurrentes de tu agente de seguros (con tecnología de Bindloops): recordatorios de citas, actualizaciones de pólizas y solicitudes, y seguimiento conversacional. Pueden aplicar tarifas de mensajes y datos; la frecuencia varía. Responde STOP para cancelar en cualquier momento, o HELP para ayuda. Los datos de suscripción y el consentimiento SMS no se comparten ni se venden a terceros ni afiliados con fines de marketing. El consentimiento es específico del agente que contactaste.

4. Health information (HIPAA)

Where a Customer uses Bindloops to process Protected Health Information, Bindloops acts as a Business Associate and handles such information pursuant to a Business Associate Agreement (BAA) and applicable HIPAA requirements. [Confirm BAA program with counsel.]

5. Security

We use technical and organizational safeguards including encryption of sensitive data, tenant isolation, and access controls. No method of transmission or storage is 100% secure, but we work to protect information using reasonable industry practices.

6. Your rights

Depending on your jurisdiction (e.g., CCPA/CPRA in California, or GDPR where applicable), you may have rights to access, correct, delete, or port your personal data. For end-client data, requests are generally directed to the relevant agency (the controller). Contact [privacy-email] to exercise your rights; we respond as required by applicable law.

7. Retention

We retain information for as long as needed to provide the service and to meet legal, regulatory, and contractual obligations, then delete or de-identify it.

8. Children

The platform is not directed to individuals under 18.

9. Changes

We may update this policy and will post the current version here with its date.