Privacy Policy

Effective September 6, 2026

Introduction

We, at Instnt Insurance Agency, are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website instnt.ai and any related interactions. Our primary goals in processing this information include enhancing the user experience by understanding customer needs and preferences; providing timely support and responding to inquiries or service requests; improving our products and services; and conducting necessary business operations such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure the data we handle is protected against unauthorized access, disclosure, alteration, and destruction.

We have a designated Data Protection Officer (DPO). For any questions about how we manage personal information, contact us at [email protected]. This commitment extends to our collaboration with third-party services that may process personal information on our behalf, all conducted in strict compliance with applicable privacy laws.

Scope and application

This policy protects the personal information of all our stakeholders — website visitors, registered users, and customers. Whether you are browsing instnt.ai, using our services as a registered user, or engaging with us as a customer, we process your personal data to the highest standards of privacy and security. This policy outlines our practices and your rights.

Data collection and processing

We gather personal data through various interactions, including when you use our services or products such as Fraud Loss Insurance, or directly provide information to us. Depending on the interaction, the types of personal information we may process include:

First and last name
Date of birth
National identification numbers (e.g., social security number, passport ID)
Email address and/or phone number
Address and city
IP address and IP-based approximate location
Browser information, language, and fingerprint
Operating system and version
Device ID

We only process information that is essential for delivering our services, complying with legal obligations, or enhancing your user experience. Key purposes include authentication and security, and fraud prevention and risk management.

Data storage and protection

Personal information is stored on secure servers located in the US. For services that require international data transfer, we ensure such transfers comply with applicable laws and maintain equivalent data protection standards. We partner with reputable data hosting providers selected for their adherence to stringent data protection standards.

Encryption. We employ robust encryption to protect data in transit and at rest.
Access control. Access is strictly limited to authorized personnel with a legitimate business need, under controls we review regularly.
Security audits and monitoring. We conduct regular security audits and monitor our systems for unusual activity to prevent unauthorized access.

Data sharing and disclosure

Third-party service providers. We may share your information with third-party providers who perform services on our behalf, on a need-to-know basis and under a contractual obligation of confidentiality. They are prohibited from using your personal information for any purpose other than providing services to Instnt Insurance Agency.

Data processing agreements. Where we share data with providers, we do so under Data Processing Agreements (DPAs) that require appropriate technical and organizational safeguards, consistent with the GDPR and other applicable laws.

Transparency and control. You will be informed of significant changes to our sharing practices and, where applicable, given the option to consent. For any queries, contact [email protected] or +1 332-324-4678.

Cookies and tracking technologies

Cookies are small data files placed on your device that let us remember your preferences and understand website usage; related technologies such as web beacons and pixel tags help us see how you interact with the site. We use these across the following categories, and the specific services we run are named below.

Strictly necessary. Cloudflare Turnstile (abuse protection) and a first-party, cookie-free session identifier used to measure our quote funnel. Our own analytics endpoint stores no personal data and sets no cookie. These do not require consent.
Performance and analytics. Google Analytics 4, Ahrefs Web Analytics, and Microsoft Clarity (session replay and heatmaps). These tell us how the site is used so we can improve it.
Functional. Preferences that enable enhanced functionality and personalization.
Advertising and targeting. LinkedIn Insight Tag, Klaviyo, and Leadfeeder/Dealfront, which support our business-to-business marketing. Some of these may constitute “sharing” or targeted advertising as defined under US state privacy laws.

We may update our use of these technologies to improve our services or comply with legal requirements, and will seek your consent where required.

Your privacy choices and consent

On your first visit, our cookie consent banner lets you accept all, reject non-essential, or customize your preferences by category. You can change or withdraw your choice at any time via the “Your Privacy Choices” control on our site.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of the sale/sharing of personal information; when GPC is detected, we do not load our advertising/targeting services.
You can opt out of marketing emails via the unsubscribe link in any message.

Your rights

In accordance with the General Data Protection Regulation (GDPR) and other applicable laws, you have the right to:

Access the personal information we hold and how we process it (Art. 15).
Rectification of incorrect or incomplete information (Art. 16).
Erasure — the “right to be forgotten” (Art. 17).
Restriction of processing under certain conditions (Art. 18).
Data portability in a structured, machine-readable format (Art. 20).
Object to processing, including for direct marketing (Art. 21).
Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3)).
Lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, contact [email protected]. We may need to verify your identity to protect your information. We will not discriminate against you for exercising your rights.

Compliance with United States privacy laws

For residents of the United States, the following provisions apply. The California Consumer Privacy Act provides California residents specific rights, in addition to those described above.

Right to know the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of third parties with whom it is shared or to whom it is disclosed or sold.
Right to delete personal information we have collected about you.
Right to correct inaccurate information.
Right to limit the use of sensitive personal information to necessary purposes.
Right to opt out. Instnt Insurance Agency does not sell your personal information for money. Certain advertising services described above may involve “sharing” for cross-context behavioral advertising under US state laws; you may opt out at any time via the “Your Privacy Choices” control or by sending the Global Privacy Control signal.
Right to non-discrimination for exercising your rights.
Sensitive and biometric data. We process sensitive personal data only with your prior consent, for specific disclosed purposes; you may withdraw consent at any time by emailing [email protected].

To submit a request, email [email protected] or call +1 332-324-4678; we will verify your request against our records and respond as required by law. To appeal a decision, contact us within 60 days of our response with your original request, the date of our response, and why you believe the decision was incorrect.

Direct marketing and communications

We may use your personal information to send you marketing communications about our products, services, and promotions, in compliance with the GDPR and the ePrivacy Directive. Where required by law, we obtain your explicit opt-in consent before sending marketing communications. Every marketing message (sent via email) includes clear instructions to unsubscribe, and we promptly honor opt-out requests. You can manage your preferences using the unsubscribe link in any message.

Data breach notification

We employ security measures and monitoring to detect and respond to potential data breaches promptly, and assess the nature, scope, and impact of any breach. Where required by law, we will notify the relevant data protection authorities within 30 days, following applicable procedures. If a breach poses a significant risk to your rights and freedoms, we will notify affected individuals within 30 days — typically by email — with clear information about the breach and the steps you can take to protect yourself. If you believe you may be affected, contact us immediately at [email protected] or +1 332-324-4678.

Contact

Data protection / rights requests: [email protected]. General questions: [email protected] or +1 332-324-4678. Instnt Insurance Agency, New York, NY.