Security & Data Protection

Encryption

All traffic to and from our website, customer portal, AI assistant, and document upload tools is encrypted in transit using industry-standard TLS (HTTPS). Personal information, uploaded documents, and account data are stored in encrypted form at rest by our hosting and database providers.

Access controls

Customer accounts are protected by individual credentials. Access to production systems and customer records is limited to Insurance Wizard personnel with a legitimate business need, controlled by role-based permissions, and protected by multi-factor authentication where supported by the underlying system.

Document uploads

Files you upload (declarations pages, ID cards, claims documents, etc.) are stored in secure cloud storage, scoped to your account, and accessible only to you and authorized Insurance Wizard staff servicing your policies. Files are retained only as long as needed to provide our services and to meet legal, regulatory, and recordkeeping obligations.

Vendors & subprocessors

We use trusted third-party vendors to host our website and database, deliver email and SMS, process AI conversations, schedule appointments, and integrate quote intake through Canopy Connect. Each vendor is bound by a written agreement that requires appropriate confidentiality and security practices. We do not sell customer data and do not share mobile opt-in data with third parties for marketing.

Retention & deletion

We retain customer information for as long as your account is active and for additional periods required by insurance regulations, recordkeeping rules, and applicable law. You may request deletion of personal information that we are not legally required to retain by emailing shawn@insurancewizard.ai.

What we ask of you

• Use a strong, unique password for your customer portal account.
• Do not share your login credentials.
• Do not paste full Social Security numbers, driver's license numbers, payment card numbers, or banking credentials into the AI chat. Use a secure document upload or call us instead.
• Report suspicious messages claiming to be from Insurance Wizard to shawn@insurancewizard.ai.

Incident response

If we become aware of a security incident affecting your personal information, we will investigate, mitigate, and notify affected customers as required by applicable state and federal law.

Reporting a vulnerability

If you believe you have identified a security vulnerability in our website, customer portal, or other public services, please contact us at shawn@insurancewizard.ai with details and steps to reproduce. We will acknowledge legitimate reports and work to remediate verified issues.

No absolute guarantee

No method of transmission over the internet or method of electronic storage is completely secure. While we use reasonable safeguards to protect your information, we cannot guarantee absolute security.