Home › Privacy

Privacy policy

Effective October 23, 2026

The short version: we don't sell or share your personal information, we don't use advertising or tracking cookies, we never keep the documents you upload, and you can delete your account or opt out of us saving anything from your chats at any time.

This policy covers the Insureability website and the services on it (ZIP code pages, address reports, Ask Shirley, neighbor premiums, alerts and accounts). "Insureability," "we" and "us" mean the operator of this website. Insureability is not an insurance company, agency or broker.

1. What we collect

Information you give us

Account information: your email address; your plan and billing status; branding you add for client reports (name, brokerage, phone or email, license number, logo); reports you create (address, optional "prepared for" name); the ZIP codes you watch; teammates' email addresses you add.
Ask Shirley: the questions you type, the ZIP code you enter, and documents you upload (photos or PDFs of insurance letters, bills or policy pages). See Documents you upload for exactly what happens to them.
Neighbor premiums: your yearly premium, policy year and type, and optionally a home-size range, a year-built range and whether you were dropped by an insurer.
Privacy requests: your email address and what you ask us to do.

Information collected automatically

Network information: when your browser contacts our servers, they receive your IP address. We store only a one-way scrambled version (a "hash") of it, to enforce free-use limits and stop abuse. We can't turn it back into your IP address.
On your device: we save a few settings in your browser's storage so the site works: your sign-in session, the last ZIP code you used, your "don't save" choice, and on-device report branding. These are not tracking cookies, and we don't read them for any other purpose. You can clear them in your browser settings.
Server logs kept by our hosting providers (see section 3), such as IP address, browser type and pages requested, used for security and reliability.
Visit counts: we use Cloudflare Web Analytics to count visits and see which pages are popular. It sets no cookies, doesn't follow you to other sites and doesn't identify you; we see only totals.

We do not use advertising cookies, tracking cookies, social-media pixels or cross-site tracking.

Documents you upload

When you send a photo or PDF to Ask Shirley, it goes to our AI service provider to be read and explained, and is then discarded. We never store the document itself. From it we may keep anonymous details: the ZIP code, type of document, insurer, premium and change from last year, policy type and year, dwelling coverage amount, deductible, and the stated reason for a non-renewal. These details are saved without your name, address, policy number, email or IP address, and we don't try to link them back to you. A clear current premium may be added to that ZIP code's neighbor premiums.

Every answer has an Undo that removes those details, and you can stop us saving anything at all (see Your choices).

Address lookups

When you check an address, your browser sends it directly to public services to find the location and its hazard zones: the U.S. Census Bureau geocoder, CAL FIRE and FEMA map services, the county's public property records service (in the counties we use, to show the home's year built and size; it receives the location, not your name), the Photon address-suggestion service (Komoot, based on OpenStreetMap) and OpenFreeMap map tiles. Those services receive the address and your IP address under their own privacy policies. We don't store addresses you look up, unless you save a branded report.

2. How we use it

To provide the services you ask for: explanations, reports, alerts, neighbor premium figures, your account and team.
To build ZIP-code-level statistics shown on the site (for example, typical premiums and how many non-renewals neighbors reported). We show these only once at least five people in a ZIP code have contributed, so no one household can be picked out.
To improve Ask Shirley: questions and answers, with any thumbs up or down, are reviewed automatically to write better answers. They're kept for 30 days, then deleted. Please don't type your name, address or policy number into the chat.
To send emails you asked for (sign-in links, alerts, weekly updates, receipts) and important notices about your account.
To prevent abuse, enforce limits, secure the site and comply with the law.

We don't use your information for advertising, and we don't make decisions about you that have legal or similarly significant effects.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We haven't done so in the past 12 months.

We use service providers who process information only on our behalf, under contracts that limit their use of it:

Anthropic (AI processing for Ask Shirley). Anthropic does not use data sent through its API to train its models.
Cloudflare (our servers and database for accounts, chat and alerts).
GitHub (hosting the website's public pages).
Resend (sending email).
Stripe (payments). Stripe collects your card details directly; we never see or store your card number.

We may also disclose information if required by law or legal process, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of the business (in which case this policy continues to apply to your information).

Anonymous, ZIP-code-level statistics that can't identify anyone may be published on the site or shared with others.

4. How long we keep it

Uploaded documents: not kept; discarded once your answer is written.
Chat questions and answers: 30 days.
Sign-in links: 30 minutes. Sign-in sessions: 90 days.
Account information: until you delete your account. We delete it within 45 days of a deletion request, except records we must keep by law (for example, payment records Stripe keeps for tax purposes). So each email address gets one free trial, we keep a one-way scrambled code of the address (it can't be turned back into your email) noting that a trial was used.
Scrambled IP addresses: up to 12 months.
Privacy requests: 24 months, as California law requires.
Anonymous neighbor premiums and document details: kept as statistics, because they aren't linked to you.

5. Your choices

Private chat: turn on the Private switch at the top of Ask Shirley. Your questions, answers and document details won't be saved. Your choice is remembered on that device.
Global Privacy Control: if your browser sends this signal, we treat it as that same opt-out automatically.
Undo: remove the details from any single document right after the answer.
Delete my account: on your account page, one tap deletes your account and everything tied to it, and cancels any paid plan.
Emails: change the ZIP codes you watch or stop alert emails on your account page at any time.
Don't share neighbor premiums: simply don't submit one; it's always optional.

6. Your California privacy rights

If you live in California, you have the right to:

Know and access the personal information we've collected about you, its sources, why we collect it, and who we disclose it to.
Delete personal information we've collected from you.
Correct inaccurate personal information.
Opt out of the sale or sharing of your personal information. We don't sell or share it, so there's nothing to opt out of, but you can still tell us.
Limit the use of sensitive personal information. We don't use sensitive personal information to infer anything about you.
Not be discriminated against for using these rights. We won't deny service, charge a different price or give you a different level of service because you used them.

Categories we collect, in the terms California law uses: identifiers (email address, scrambled IP address); commercial information (your plan and purchases; premiums you share); internet activity (server logs); geolocation (ZIP code; addresses you save in reports); professional information (branding you add for client reports). Sources: you, your browser, and public records. Purposes: section 2. Disclosed for business purposes to: the service providers in section 3.

California's "Shine the Light" law: we don't share personal information with third parties for their own direct marketing.

7. Make a request

Use this form for any request about your information. We'll confirm we received it within 10 business days and respond within 45 days (we may extend this once by another 45 days and will tell you if we do). To protect you, we'll verify the request by email; for account requests, it must come from the email on the account. You can use an authorized agent; we'll ask for proof of their authority and may ask you to confirm your identity directly.

8. Other details

Children: Insureability is for adults dealing with home insurance. It isn't directed to children under 16, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.
Security: we use encrypted connections (HTTPS), scramble IP addresses, keep only what we need, and limit who can access data. No system is perfectly secure, so please don't send us more than the service needs.
Do Not Track: we don't track you across sites, so there's nothing for a Do Not Track signal to switch off. We honor Global Privacy Control as described above.
Outside the U.S.: Insureability is for California homes and is run in the United States. If you use it from elsewhere, your information is processed in the U.S.
Accuracy: answers and figures on Insureability are general information from public records and automatic tools, not legal or insurance advice.
Changes: if we change this policy, we'll update the date at the top. For significant changes, we'll also tell account holders by email before they take effect.