Privacy Policy

QuoteSweep LLC

Effective Date: February 28, 2026

1. Introduction

QuoteSweep LLC ("QuoteSweep," "we," "our," or "us") operates a commercial insurance multi-carrier quoting platform (the "Service") that enables independent insurance agents and agencies to obtain comparative insurance quotes from multiple carriers through a single submission. This Privacy Policy describes how we collect, use, disclose, and protect information when you access or use our website at www.quotesweep.com (the "Site"), our web application, and any related services.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use the Service.

2. Definitions

"Agency"

means the insurance agency entity that registers for the Service.

"Agency User"

means any individual authorized by an Agency to access the Service, including agency owners, agents, commercial lines managers, customer service representatives, and account managers.

"Carrier"

means an insurance company whose quoting portal the Service accesses to obtain premium quotes.

"Carrier Credentials"

means the login credentials (usernames, passwords, MFA tokens, and security question answers) that an Agency provides to enable the Service to access authenticated Carrier portals on the Agency's behalf.

"Client Data"

means information about an Agency's insurance clients, including business names, addresses, NAICS codes, payroll figures, revenue, employee counts, loss history, and other underwriting data submitted through the Service.

"Personal Information"

means any information that identifies, relates to, or could reasonably be linked to a natural person or household.

3. Information We Collect

3.1 Information You Provide Directly

3.1.1 Account Registration Information

When you register for the Service, we collect:

• Agency name, address, phone number, and email address
• Agency User names, email addresses, and roles
• Billing and payment information (processed by our third-party payment processor)

3.1.2 Carrier Credentials

To access authenticated Carrier portals on your behalf, you may provide us with your Carrier portal login credentials, including usernames, passwords, multi-factor authentication configurations, and security question answers. These are encrypted at rest using AES-256 encryption and are never stored in plaintext.

3.1.3 Client Data / Insurance Submission Data

When you use the Service to generate quotes, you provide Client Data, which may include:

• Business legal name, DBA, and entity type
• Business address and state(s) of operation
• Federal Employer Identification Number (FEIN)
• NAICS code and industry classification
• Annual revenue and payroll figures
• Number of employees and workers' compensation class codes
• Loss history and claims data (number of claims, amounts, open/litigated status)
• Prior insurance carrier information and policy expiration dates
• Coverage preferences (limits, deductibles, endorsements)
• Contact information for the insured party (name, email, phone)

3.1.4 Support and Communications

If you contact us for customer support or send us communications, we collect the content of those messages, your contact details, and any attachments you provide.

3.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device and browser information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• Usage data (pages visited, features used, quote submissions initiated, timestamps)
• Log data (server logs, error reports, performance metrics)
• Cookies and similar tracking technologies (see Section 8 below)

3.3 Information from Third Parties

We may receive information from:

• Insurance Carriers, including quote results, premium amounts, quote reference numbers, coverage details, and declination reasons returned by Carrier portals during the quoting process
• Agency Management System (AMS) integrations, if you authorize us to import client data from platforms such as HawkSoft, NowCerts, or similar systems
• ACORD form imports, if you upload or transmit ACORD-format data files to pre-fill submission forms
• Third-party analytics and advertising partners

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Providing and Operating the Service

• Authenticating Agency Users and managing accounts
• Accessing Carrier portals using your Carrier Credentials to submit insurance applications and retrieve quotes on your behalf via browser automation
• Populating Carrier portal form fields with Client Data you have submitted
• Displaying, comparing, and exporting quote results
• Generating proposals and comparison documents for your clients
• Tracking quote status, binding workflows, and policy renewals
• Importing data from AMS integrations and ACORD forms

4.2 Improving and Developing the Service

• Analyzing usage patterns to improve product features and user experience
• Monitoring Carrier portal field mapping accuracy and success rates
• Debugging errors and maintaining system performance
• Developing new features and lines of business

4.3 Communications

• Sending transactional messages (quote confirmations, error notifications, renewal reminders)
• Providing customer support
• Sending product updates, newsletters, and marketing communications (with opt-out options)

4.4 Legal and Compliance

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of QuoteSweep, our users, and the public
• Detecting and preventing fraud, abuse, and security incidents

5. How We Share Your Information

We do not sell your Personal Information.

We share information only in the following circumstances:

5.1 With Insurance Carriers

When you initiate a quote, the Service transmits your Client Data to the Carrier portals you have selected. This is the core function of the Service and occurs only at your direction. Each Carrier's use of the data it receives through its own portal is governed by that Carrier's privacy policy.

5.2 With Service Providers

We engage third-party service providers to perform functions on our behalf, including:

• Cloud infrastructure and hosting providers
• Browser automation infrastructure (including TinyFish, Inc., which provides the browser automation API that powers multi-carrier quoting)
• Payment processors
• Analytics providers
• Customer support tools
• Email delivery services

These service providers are contractually obligated to use your information only to perform services on our behalf and in accordance with this Privacy Policy.

5.3 With Your Agency

If you are an Agency User, information about your account activity and usage of the Service may be visible to your Agency's administrators (owners and admins).

5.4 For Legal Reasons

We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, regulation, or legal process; respond to lawful requests from governmental authorities; enforce our agreements and policies; protect the rights, property, or safety of QuoteSweep, our users, or others; or detect, prevent, or address fraud, security, or technical issues.

5.5 Business Transfers

In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Security

We take the security of your information seriously and implement industry-standard measures to protect it:

• Carrier Credentials are encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext and are never visible to QuoteSweep personnel.
• All data in transit is protected using TLS 1.2 or higher.
• Access to production systems is restricted to authorized personnel on a need-to-know basis and protected by multi-factor authentication.
• We conduct regular security assessments and vulnerability testing.
• Browser automation sessions are ephemeral; Carrier portal sessions are terminated after each quoting operation.
• Client Data is logically isolated between Agencies to prevent cross-tenant data access.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account Information: Retained for the duration of the account relationship and for 3 years after account closure for legal and compliance purposes.
• Client Data and Quote Results: Retained for as long as the Agency account is active. Agencies may delete individual client records and quote history at any time through the Service.
• Carrier Credentials: Retained only while the credential is active. Agencies may remove credentials at any time via the Carrier Panel settings. Upon removal, credentials are permanently deleted from our systems within 30 days.
• Usage and Log Data: Retained for 12 months for analytics and debugging, then aggregated or deleted.
• Support Communications: Retained for 2 years after resolution.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

You may control cookies through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Service.

9. Your Rights and Choices

9.1 Access and Portability

You may request a copy of the Personal Information we hold about you. Agency administrators can export Client Data and quote history through the Service at any time.

9.2 Correction

You may update your account information directly through the Service or by contacting us. You may update or correct Client Data at any time through the quote form or client management interface.

9.3 Deletion

You may request deletion of your account and associated data by contacting us at privacy@quotesweep.com. Agencies may delete individual Carrier Credentials, client records, and quote history at any time through the Service. Upon account deletion, we will remove or de-identify your data within 90 days, except as required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

9.4 Opt-Out of Marketing

You may opt out of marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us. Opting out of marketing will not affect transactional or service-related communications.

9.5 Carrier Credential Removal

You may remove any Carrier Credential at any time through the Carrier Panel settings page. Removal permanently deletes the encrypted credential from our systems.

10. State-Specific Privacy Rights

10.1 California (CCPA/CPRA)

If you are a California resident, you have the right to know what Personal Information we collect, the right to delete your Personal Information, the right to opt out of the sale or sharing of your Personal Information (we do not sell Personal Information), the right to non-discrimination for exercising your rights, and the right to correct inaccurate information. To exercise these rights, contact us at privacy@quotesweep.com.

10.2 Colorado, Connecticut, Virginia, and Other States

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others) may have similar rights to access, correct, delete, and port their data, as well as the right to opt out of certain processing activities. Contact us at privacy@quotesweep.com to exercise these rights. If we decline your request, you may appeal by contacting us with the subject line "Privacy Appeal."

11. Browser Automation and Carrier Portal Access

The Service uses browser automation technology (powered by TinyFish, Inc.) to interact with Carrier portals on your behalf. This section explains how that technology works in relation to your data:

• Agency Direction: Browser automation sessions are initiated only when an Agency User submits a quote request. The Service acts at your direction and on your behalf.
• Credential Use: Your Carrier Credentials are decrypted in memory solely for the purpose of authenticating to Carrier portals during a quoting session. Credentials are never logged, cached outside of the encrypted vault, or shared with any party other than the Carrier portal for which they are intended.
• Session Isolation: Each browser automation session is isolated and ephemeral. Sessions are terminated and their runtime environments destroyed after the quoting operation completes.
• Data Flow: Client Data flows from QuoteSweep to the Carrier portal form fields. Quote results (premiums, coverage details, reference numbers) flow from the Carrier portal back to QuoteSweep. No Client Data is stored or retained by the browser automation infrastructure beyond the duration of the session.
• Carrier Terms: Your use of Carrier portals through the Service remains subject to each Carrier's terms of use and privacy policies. You represent that your use of the Service with each Carrier is authorized under your agency appointment and carrier agreements.

12. Third-Party Links and Services

The Service may contain links to third-party websites, including Carrier portals, AMS platforms, and payment processors. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

13. Children's Privacy

The Service is designed for use by insurance professionals and is not directed at individuals under the age of 18. We do not knowingly collect Personal Information from children. If we learn that we have collected Personal Information from a child, we will take steps to delete it promptly. If you believe a child has provided us with Personal Information, please contact us at privacy@quotesweep.com.

14. International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our Site with a new effective date and, where appropriate, notifying you by email. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Exhibit A: Sub-Processors

The following third-party sub-processors may process data in connection with the Service. This list is updated periodically.

Last updated: February 27, 2026