Privacy Policy

Thrive Insurance Partners ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.thriveinsurancepartners.com ("Site") or use our services.

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

• Request Insurance Quotes: Name, email, phone number, date of birth, state of residence, health information, lifestyle habits (e.g., nicotine use)
• Apply for Careers: Resume, cover letter, contact information, employment history, references
• Create an Agent Account: Name, email, phone, profile picture, bio, social media links, professional credentials
• Contact Us: Name, email, phone number, message content
• Submit Sales Leads: Client contact information, policy details, notes, attachments

1.2 Automatically Collected Information

When you use our Site, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, navigation paths, referral source
• Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see Section 7)
• Location Data: Approximate geographic location based on IP address

1.3 Third-Party Authentication Data

If you sign in using Google OAuth (Sign in with Google), we receive:

• Your Google account email address
• Your name and profile picture (if publicly available)
• A unique authentication identifier from Google

We do not have access to your Google password. Authentication is handled securely by Google.

We use collected information for the following purposes:

• Provide Services: Generate insurance quotes, connect you with licensed agents, process policy applications
• Account Management: Create and maintain your agent portal account, authenticate logins, manage permissions
• Communication: Send service-related emails, respond to inquiries, provide customer support
• Marketing (with consent): Send promotional emails about new insurance products, educational content, company updates
• Analytics & Improvement: Analyze usage patterns, improve Site functionality, develop new features
• Legal Compliance: Comply with insurance regulations, respond to legal requests, prevent fraud
• Call Center Operations: Manage dialer systems, track call metrics, record calls for quality assurance (with notice)

3.1 We Do NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Service Providers We Use

We share information with trusted third-party service providers who assist in operating our business:

• Firebase (Google Cloud Platform): Authentication, database hosting (Firestore), file storage, cloud functions
• Convoso: Dialer system for outbound call center operations, call logging, agent performance tracking, SMS delivery via 10DLC
• Twilio: A2P SMS platform for 10DLC messaging, SMS routing, delivery confirmation, compliance infrastructure
• Google Analytics: Website traffic analysis, user behavior insights (anonymized data)
• Microsoft Clarity: Heatmaps, session recordings, user experience analytics (anonymized data)
• TinyMCE: Rich text editing for content management (no personal data transmitted)
• Vercel: Website hosting and deployment infrastructure

3.3 Insurance Carriers & Agents

When you request a quote, we share your information with:

• Licensed insurance carriers to generate accurate quotes
• Independent insurance agents who can assist with policy selection
• Underwriting departments for policy applications

3.4 Legal Disclosure

We may disclose information when required by law or to:

• Comply with legal process, court orders, or government requests
• Protect our rights, property, or safety
• Investigate fraud or security incidents
• Enforce our Terms of Service

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Secure Storage: Personal data is stored in Google Cloud Platform (Firebase) with enterprise-grade security
• Access Controls: Role-based access permissions ensure only authorized personnel can view sensitive data
• Authentication: Secure OAuth 2.0 authentication via Google (no passwords stored on our servers)
• Regular Audits: Security reviews and updates to protect against emerging threats
• Data Backup: Automated backups to prevent data loss

Important: While we use reasonable security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.

5.1 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (subject to legal exceptions)
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, email privacy@thriveinsurancepartners.com with subject line "CCPA Request"

5.2 European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

5.3 All Users

Regardless of location, you can:

• Access Your Data: View and update your profile information in your agent portal account
• Opt-Out of Marketing: Unsubscribe from promotional emails via the link in each email
• Delete Your Account: Request account deletion by contacting support
• Restrict Data Collection: Disable cookies in your browser settings (may limit functionality)

We use cookies and similar technologies to enhance your experience on our Site.

6.1 Types of Cookies We Use

• Essential Cookies: Required for Site functionality (authentication, session management)
• Analytics Cookies: Google Analytics and Microsoft Clarity track usage patterns (anonymized)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track effectiveness of marketing campaigns (with consent)

6.2 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data

Disabling cookies may limit certain features of our Site.

6.3 Do Not Track

Some browsers support "Do Not Track" (DNT) signals. Our Site does not currently respond to DNT signals due to lack of industry standards.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately atprivacy@thriveinsurancepartners.com and we will delete it promptly.

We retain your personal information for as long as necessary to:

• Provide the services you requested
• Comply with legal obligations (e.g., insurance regulations require 7-year retention of policy records)
• Resolve disputes and enforce agreements
• Maintain business records for accounting and tax purposes

You may request deletion of your account at any time, subject to legal retention requirements.

9.1 10DLC and A2P Overview

10-Digit Long Code (10DLC): A standard U.S. phone number used for Application-to-Person (A2P) SMS messaging. A2P Messaging: Automated messages sent from our business systems to your phone for insurance quotes, confirmations, and customer service.

Our SMS campaigns are registered with major U.S. wireless carriers through Twilio's 10DLC infrastructure to ensure deliverability and compliance with carrier network standards.

9.2 Types of SMS Messages We Send

• Transactional Messages: Quote confirmations, policy updates, login verification codes, payment confirmations, claim status notifications (no opt-out available)
• Marketing Messages: New insurance products, promotional offers, educational content, company announcements (opt-out available)
• Informational Messages: Account alerts, renewal reminders, license status updates, compliance notifications

9.3 SMS Consent & TCPA Compliance

By providing your phone number through our quote request, account creation, or carrier consent forms, you grant express written consent for:

• Transactional SMS messages about quotes, policies, and account management
• Marketing SMS messages about insurance products and services (if opted-in)
• Informational SMS alerts related to your account
• SMS messages delivered using automated telephone dialing systems
• Prerecorded or artificially-generated voice messages (for calls)

Important: This consent is NOT a condition of purchasing insurance or services. You may opt-out at any time.

9.4 SMS Opt-Out & Revocation

To unsubscribe from SMS marketing messages:

• Text "STOP" to the 10DLC number used to deliver the message
• Email: privacy@thriveinsurancepartners.com with "SMS OPT-OUT" in subject line
• Call: (800) 555-1234 and request SMS opt-out
• Update account settings: In your agent portal, adjust SMS preferences

Opt-out requests are processed and honored within 24 hours. You will continue to receive transactional SMS messages (these cannot be opted out of per TCPA rules).

9.5 SMS Message Frequency Disclosure

• Marketing Messages: Expect 2-3 promotional SMSes per month (frequency may vary based on active campaigns; not guaranteed)
• Informational Alerts: Variable frequency based on renewal dates, application status, account activity
• Transactional Messages: Sent as needed—no restriction on frequency

9.6 SMS Data & Carrier Information

SMS messages are delivered through Twilio (10DLC infrastructure). Your phone number, message content, and delivery status are shared with Twilio.

• Twilio: View Twilio Privacy Policy
• Wireless Carriers: AT&T, Verizon, T-Mobile, and other carriers receive message delivery notifications and may log routing information

Your carrier may charge standard SMS rates depending on your wireless plan. Thrive Insurance Partners does not charge for transactional or marketing SMS messages.

9.7 SMS Audit Logging & Compliance Maintenance

We maintain detailed audit logs of all SMS messaging activity, including:

• Message send/delivery timestamps
• Recipient phone numbers (encrypted)
• Message content and campaign type
• Bounce/failure notifications
• Opt-out requests and timestamps

These logs are retained for a minimum of 2 years to demonstrate compliance with TCPA, FCC, and carrier regulations. Access is restricted to authorized compliance and legal personnel only.

9.8 Prohibited SMS Use

We never use SMS for:

• Sending messages to email addresses (SMS to numbers only)
• Sending messages to opted-out numbers (except transactional)
• Falsifying sender identity or company name
• Spamming, harassing, or abusive communication
• Sharing your number with third parties for their marketing (unless you explicitly opt-in)

9.9 Mobile Data Sharing Restrictions

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We use Google Cloud Platform (Firebase), which complies with international data transfer frameworks including the EU-U.S. Data Privacy Framework.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this page
• Posting a notice on our Site homepage
• Sending an email to registered users (for significant changes)

Your continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: