Privacy Policy

AgencyStryde (“AgencyStryde,” “we,” “us,” or “our”) operates a software-as-a-service (SaaS) platform designed specifically for independent insurance agencies. Our platform provides tools for client relationship management, policy renewals, service tracking, sales pipelines, communications, reporting, workflow automations, and agency intelligence.

This Privacy Policy explains how AgencyStryde collects, uses, stores, protects, and shares information in connection with your use of our website, platform, and related services (collectively, the “Services”). By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.

AgencyStryde is headquartered in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States.

We collect information in several ways: information you provide directly to us, information collected automatically through your use of the Services, and information received from third-party services connected to the platform.

The categories of information we collect are described in the sections below.

When you create an AgencyStryde account or set up an agency on our platform, we collect:

• Agency name and business information
• Full name of the account owner and team members
• Work email addresses
• Password (stored in hashed, non-recoverable form)
• Job title and role within the agency
• Phone number (if provided)
• Billing address and business contact information

As part of using the AgencyStryde platform, agencies upload, enter, and manage data about their own insurance clients (“Customer Data”). Customer Data may include:

• Client names, addresses, phone numbers, and email addresses
• Policy information, coverage details, and carrier relationships
• Renewal dates, premium amounts, and coverage history
• Notes, documents, and communication records associated with clients
• Service request details and activity logs
• Sales pipeline data, lead information, and prospect records

AgencyStryde processes Customer Data solely to provide the platform services to the agency. Customer Data ownership is addressed in the Customer Data Ownership section below.

AgencyStryde uses Stripe, a third-party payment processor, to handle all subscription billing and payment processing. When you provide payment information, it is submitted directly to Stripe using Stripe's secure payment collection infrastructure.

AgencyStryde does not store, transmit, or have access to full credit card numbers, card verification codes (CVV), or complete bank account details. Stripe stores and manages all sensitive payment card information in accordance with PCI-DSS compliance standards.

We may retain the following non-sensitive payment references:

• Stripe Customer ID associated with your agency account
• Stripe Subscription ID and subscription status
• Last four digits of the payment card on file (as provided by Stripe)
• Billing address associated with the payment method
• Transaction dates and subscription billing history

For AgencyStryde's Secure Payment Collection feature — which allows agencies to send secure payment links to their own clients — sensitive payment information submitted through those links is automatically deleted after it has been retrieved and is no longer needed. AgencyStryde does not process or store payment card data on behalf of end insurance clients.

We automatically collect certain information about how you access and use the Services:

• Log data, including IP addresses, browser type, operating system, and referring URLs
• Device information, including device type, screen resolution, and browser version
• Pages visited, features accessed, and time spent within the platform
• Actions taken within the platform (e.g., records created, features used, exports performed)
• Error reports and performance data used to maintain and improve the platform

This usage information is used to operate, maintain, and improve the platform, diagnose technical issues, and understand how agencies use AgencyStryde.

AgencyStryde uses cookies and similar tracking technologies to operate the platform and support authenticated sessions. Specifically:

• Session cookies to maintain your authenticated login state
• Preference cookies to remember platform settings and preferences
• Security cookies used to detect and prevent unauthorized access

We may use third-party analytics tools to understand usage patterns and improve the platform. Analytics data is aggregated and does not identify individual users by name. You may configure your browser to refuse cookies, though certain platform functionality requires cookies to operate correctly.

AgencyStryde uses the information we collect to:

• Provide, operate, and maintain the AgencyStryde platform and all associated Services
• Process subscription payments and manage billing through Stripe
• Send transactional communications including account confirmations, billing notifications, and security alerts
• Respond to support requests, questions, and feedback from account holders and team members
• Diagnose technical issues, monitor platform performance, and improve service reliability
• Develop new features and improve existing functionality based on aggregated usage patterns
• Enforce our Terms of Service and applicable platform policies
• Comply with legal obligations and respond to lawful requests from regulatory authorities

AgencyStryde does not use Customer Data for advertising purposes. AgencyStryde does not sell, rent, or trade personal information or Customer Data to third parties for marketing purposes.

Agency customers retain full ownership of all Customer Data they upload, enter, or generate within the AgencyStryde platform. AgencyStryde acts solely as a service provider and data processor with respect to Customer Data.

Specifically:

• Customer Data belongs to the agency, not to AgencyStryde
• AgencyStryde processes Customer Data only to deliver the contracted Services
• AgencyStryde does not analyze, use, or share Customer Data for any purpose outside of providing the platform
• Agencies may export, download, or request deletion of their Customer Data at any time
• Upon account termination, agencies may request a complete export of their data prior to deletion
• AgencyStryde employees do not access Customer Data except when required to provide technical support, and only with appropriate authorization

AgencyStryde does not sell Customer Data or personal information. We share information only in the limited circumstances described below:

• Infrastructure and technology vendors that operate the platform under appropriate data processing agreements (see Third-Party Services below)
• Stripe for payment processing and subscription management
• Professional advisors such as attorneys, accountants, or auditors under confidentiality obligations
• Law enforcement or government agencies when required by applicable law, valid legal process, or to protect the rights, safety, or property of AgencyStryde, our users, or the public
• A successor entity in connection with a merger, acquisition, or sale of substantially all assets, in which case data would remain subject to this Privacy Policy or a materially equivalent policy

We require all third-party service providers with access to personal information to maintain appropriate data security practices and to use the information only for the purposes for which it was shared.

AgencyStryde takes the security of your information seriously. We implement and maintain multiple layers of technical and organizational safeguards:

• Encryption in transit: All data transmitted between your browser and AgencyStryde is encrypted using TLS (Transport Layer Security)
• Encryption at rest: Data stored within our database infrastructure is encrypted at rest
• Role-based access controls: Platform features and data access are restricted based on the user's assigned role and permissions
• Secure authentication: Passwords are hashed and never stored in recoverable plaintext. Session management follows security best practices
• Access logging: Platform access and sensitive operations are logged for security monitoring and audit purposes
• Managed cloud infrastructure: AgencyStryde is hosted on Vercel and Supabase, both of which maintain enterprise-grade security controls, redundancy, and compliance programs
• Employee access controls: AgencyStryde team members are granted the minimum level of access necessary to perform their job responsibilities

No system can guarantee absolute security. While we take these measures seriously, no method of transmission or storage is 100% secure. In the event of a security incident that affects your information, we will notify you in accordance with applicable law.

We retain account information and Customer Data for as long as your agency maintains an active AgencyStryde subscription. Upon account cancellation or termination:

• Agencies may request a full data export prior to account closure
• Account data is retained for a limited period following cancellation to support potential reactivation
• After the retention period, account data and Customer Data are permanently deleted from our systems
• Aggregated, non-identifiable usage data may be retained for platform analytics and improvement purposes
• Billing records and transaction logs may be retained as required by applicable financial regulations

To request data deletion or an export of your data, contact us at support@agencystryde.com.

Depending on your location and applicable law, you may have certain rights regarding your personal information. AgencyStryde supports the following rights for all users:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request correction of inaccurate or incomplete personal information
• Deletion: You may request deletion of your personal information, subject to applicable legal retention requirements
• Export: You may request an export of your agency's Customer Data in a portable format
• Objection: You may object to certain processing activities in accordance with applicable law
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at support@agencystryde.com. We will respond to verifiable requests within a reasonable timeframe consistent with applicable law. We may request verification of your identity before processing certain requests.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us to learn more about your California privacy rights.

AgencyStryde uses the following third-party infrastructure and service providers to operate the platform. Each provider has been selected for their security standards and data protection practices:

These providers are authorized to process your information only as necessary to deliver their respective services. We do not authorize them to use your information for their own marketing or business purposes.

AgencyStryde is not responsible for the privacy practices of external websites or services that may be linked to from our platform.

AgencyStryde is a business-to-business platform designed for use by licensed insurance professionals and their employees. Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at support@agencystryde.com.

AgencyStryde may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other business reasons. When we make material changes to this policy, we will:

• Update the Last Updated date at the top of this page
• Post the updated policy at www.agencystryde.com/privacy-policy
• Notify account administrators via email for material changes that affect how we process Customer Data

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after a policy update constitutes your acceptance of the updated terms. Prior versions of this policy are available upon request.

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is being handled, please contact us: