Privacy Policy

InsureC is the data controller for the personal data described in this policy. We operate from Estonia, and we process personal data under the GDPR and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

For anything in this policy, including to exercise any of the rights set out below, contact legal@insurec.net.

• When you request access: your name, work email address, brokerage or agency name, and any optional message.
• When you use the platform: the data you enter — client records, policy details, claims, and related documents.
• When you upload a book export: the file you submit for a Monday Report, and the analysis produced from it.
• When you browse the site: technical data such as IP address, device and browser type — but only through the optional cookies described below, and only if you have agreed to them.

• To provide the service — granting and managing access, running the platform, producing the reports you ask for. Legal basis: performance of a contract.
• To answer you — responding to an access request or an enquiry, and keeping the service secure and working. Legal basis: our legitimate interests.
• To measure and promote the site — optional analytics and advertising cookies, and product emails you signed up for. Legal basis: your consent, which you can withdraw at any time.
• To meet our obligations — accounting and tax records. Legal basis: compliance with a legal obligation.

A book export or a platform record can contain personal data about your clients, who are not our customers and never dealt with us directly. For that data you remain the controller and we act as your processor: we handle it on your instructions, only to produce the output you asked for, and for no purpose of our own.

We do not sell it, we do not share it for anyone's marketing, and we do not use your client or policy data to train AI models.

A Monday Report upload, and everything derived from it, is deleted after 30 days, or immediately if you ask. Access request details are kept while we are in contact with you and for a reasonable period afterwards. Platform data is kept while your account is active and deleted on request or after closure.

Cookies that are strictly necessary to run the site — keeping you signed in, remembering your language, and storing your cookie choice — are always active. Beyond those we can load optional analytics cookies, which tell us which pages are used and how fast they load, and optional advertising cookies, which let us measure our campaigns. None of the optional ones load unless you agree to them, and you can change or withdraw that choice at any time.

The Cookie Policy lists each cookie, what it stores, and how long it lasts.

Change your cookie preferences. You can also block cookies in your browser settings, or write to legal@insurec.net.

We share personal data only with the service providers we need to run InsureC: cloud hosting and database infrastructure, email delivery, and — where you have consented — analytics and advertising providers. Each acts on our instructions under a written data processing agreement, and none of them may use your data for their own purposes.

We do not sell personal data, and we do not share it with third parties for their own marketing.

Some of these providers process data outside the European Economic Area. Where that happens, the transfer is covered either by a European Commission adequacy decision or by Standard Contractual Clauses, together with the additional safeguards those clauses require.

Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to how we process it, to receive it in a portable format, and — where we rely on consent — to withdraw that consent at any time without affecting what was lawful before you did.

To exercise any of these, write to legal@insurec.net. We respond within one month, and will tell you if a complex request needs longer, up to two further months. Exercising these rights is free.

If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the supervisory authority in the EU country where you live or work.

Data in transit is encrypted using TLS 1.2+. Data at rest is encrypted using AES-256. Access is limited to what is needed to run the service. There is more detail on the security page.

We may update this policy from time to time. If we make material changes we will notify active users by email. The “Last updated” date at the top of this page reflects the most recent revision.

Questions or concerns about this policy? Email legal@insurec.net. We aim to respond within 2 business days.