Privacy Policy

If you are a visitor to a CoverForce website for any reason or a CoverForce customer who registers or signs into a website maintained by CoverForce, we may obtain various types of information from you concerning your access device. This information may include, but is not limited to, the following information that can itself be used to identify you and allow the holder to contact you:

• Name
• Company Name
• Title
• Email Address
• Phone Number
• Employee Count
• Payroll Information
• Visitor Site Preferences
• Insurance license and National Producer Number (NPN)
• Carrier appointment and producer code information
• Payment method details (processed by our payment processor)

CoverForce may also receive information that is provided by your browser or mobile device. This information includes but is not limited to:

• Browser Information
• Operating System Information
• Mobile Device Information (e.g., device identifier, mobile operating system, etc.)
• IP Address
• Pages Accessed
• Time of Visit
• Time of Last Visit
• Referring Site, Application, or Service, including the relevant Search Queries that led you to CoverForce's website.

If you are an insurance agency, producer or other customer using the Platform, we collect and process the information you and your authorized users submit through it, including commercial insurance application data about your applicants and insureds (which may include nonpublic personal information), the carrier, network or aggregator credentials and producer codes you provide, quotes and other responses returned by carriers, and the inputs you provide to and outputs generated by artificial intelligence features. We process this information on your behalf to provide the Platform and as described in your customer agreement, and, as permitted by that agreement, for our own business purposes, including analytics, research, product and model development and the creation of data products. You are responsible for having the right to submit it and for providing any notices to, and obtaining any consents from, your applicants and insureds that applicable law requires.

If you connect a third-party artificial intelligence assistant or other third-party service to the Platform through a CoverForce connector, information you send through that connection is transmitted to CoverForce at your direction from your account with that third party, and any information returned to that third party is transmitted at your direction and is governed by that third party's terms and privacy practices. CoverForce does not control third-party services.

Nonpublic personal information subject to the Gramm-Leach-Bliley Act is handled in accordance with that Act and applicable state insurance privacy laws, and is not subject to the California Consumer Privacy Act or similar state consumer privacy laws to the extent those laws exempt it.

You should be aware that CoverForce may use information we obtain about you to:

• Enhance or improve the functionality of our websites, products, or services, including to develop, train and improve our products, models and analytics.
• Process transactions and bill for our services.
• Send email messages and updates about CoverForce websites, products and services, including requests for your agreement on policies such as this Privacy Policy and our Terms of Service.
• Send commercial email messages about our websites, products or services, and respond to inquiries.
• Create de-identified, aggregated or statistical data, which we may use and disclose for any lawful purpose.
• Develop, train, test and improve our products, services, models and analytics, and create, use and commercialise analytics, insights, benchmarks and data products, in each case as permitted by any customer agreement that applies to the information.
• Verify your identity, licensure and eligibility to use the Platform, and to prevent fraud and misuse.
• Comply with applicable law, our agreements with insurance carriers and other partners, and legal process.
• Perform any other function that we believe in good faith is necessary to protect the security or proper functioning of CoverForce websites, products, or services.

We may disclose the information we collect to our affiliates; to service providers and contractors who process it on our behalf; to insurance carriers, wholesalers, networks and other insurance market participants in connection with the services you request; to business partners; to professional advisers; to a successor or acquirer in connection with a merger, acquisition, financing or sale of assets; and as described elsewhere in this Privacy Policy.

CoverForce does not sell personal information, and does not disclose personal information to third parties for their own independent marketing purposes. Where we use advertising or analytics technologies on our websites, those technologies may involve disclosures that some state privacy laws treat as "sharing" for cross-context behavioural advertising; you can control these through your cookie preferences using the cookie banner on our websites. If you would like us to stop any disclosure of your personal information, contact us as described below.

In certain instances, you may be able to review and edit the personal information provided to us through your logging onto your account through our websites and by editing your user account preferences. Although many of these account changes occur immediately, removed information may continue to be stored in your web browser cache. We take no responsibility for stored information in your cache, or locations not readily visible to us, and disclaim all liability regarding the existence or misuse of such information. You should be aware that CoverForce may, from time to time, itself retain residual information about you in our backup and/or user database.

CoverForce uses cookies and similar technologies, including analytics and advertising technologies, to allow us to remember your preferences, understand how our websites are used and deliver and measure advertising. For this reason, it is necessary that you enable cookies in your browser settings, and by way of this Privacy Policy disclosure you are informed of our use of cookies and that by visiting our websites you consent to our use of cookies in relation to your computer system.

Websites, products, and services maintained by CoverForce may contain links to third party websites, products, or services. These third party websites are not screened for privacy or security by CoverForce. CoverForce is not responsible for the privacy or security practices of those websites.

Please be aware that this Privacy Policy, and any other policies published by CoverForce, including any amendments to them, are not intended to create rights enforceable by third parties or to require disclosure of any personal information relating to users of our websites or services. CoverForce bears no responsibility for the information collected or used by any third-party website, including those containing advertising or solicitation requests. Please review the privacy policy and terms of service for each site you visit through third party links before interacting with such sites.

CoverForce uses the services of various individuals and organizations, including contractors, web hosting providers, payment processors, artificial intelligence model providers, and others, to assist us with the collection, interpretation and use of visitor or user data.

While providing or maintaining our website, products, or services, we may delegate to others the authority to collect, access, use, and disseminate your information. For example, our web hosting provider stores the information that you provide us, and we may hire outside contractors to perform maintenance or assist us in securing our website.

These providers may access and use the information only to provide services to us, and we require them by contract to protect it and not to use it for their own purposes. Our liability in connection with our service providers is governed by the Terms of Service or, where you have one, your customer agreement with CoverForce.

When you visit our website, cookies and similar technologies may be used by our data partners to associate your activity with other information they or others hold about you, including your email or postal address. We, or service providers acting for us, may then send you communications and marketing. You can control these technologies through your cookie preferences on our websites, or contact us as described below.

From time-to-time it may become necessary or advisable for CoverForce to release your information for legal purposes, such as in response to a request from a governmental agency or a private litigant in a filed action. We may disclose your information to others if we believe, in good faith, that it is advisable to do so for the purposes of a civil action, criminal investigation, internal investigation, or other legal matter. If we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also release your information to others when we believe that it is prudent to do so, such as when we have a reasonable belief that you may have engaged in or been the victim of fraudulent or other illegal activities.

If you provide your contact information to CoverForce, we and others covered by this Privacy Policy may send you commercial and non-commercial communications. You may opt out of commercial email at any time by using the unsubscribe link in any such message or by contacting us as described below. We will continue to send transactional and account-related communications.

CoverForce has implemented reasonable security mechanisms to protect customer and user data that may be maintained on CoverForce servers against loss, misuse and unauthorized access, disclosure, alteration, and destruction. Information about our security program is available at https://www.coverforce.com/security. No security system is totally impenetrable, including ours. Despite our best efforts, it may be possible for system invaders, human or robotic, to intercept or access customer information. CoverForce cannot and does not guarantee the security of your information.

We retain information for as long as needed to provide our websites, products and services, to comply with applicable law, our agreements with insurance carriers and other partners and our record-retention policies, to resolve disputes and to enforce our agreements. De-identified and aggregated information may be retained indefinitely.

Our websites, products, and services are not intended for the use of children under 13. We do not knowingly collect personally identifiable information from children under 13. If you are under 13, do not attempt to register or send any information about yourself to us, including your name, address, telephone number, or email address. If a parent or guardian becomes aware that a child has provided us with personally identifiable information, please contact us at legal@coverforce.com. If we become aware that a child under 13 has provided us with personally identifiable information, we will delete such information from our servers.

CoverForce, Inc. invites residents of California to use its websites, products, and services. Therefore, it is our intent to comply with the California Business and Professions Code §§ 22575-22579. If you are a California resident, you may request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. Various provisions throughout this Privacy Policy address requirements of these Californian privacy statutes. For compliance with California law, you may presume that CoverForce collects electronic information from all website visitors. You may contact us at legal@coverforce.com for additional details.

CoverForce will update this Privacy Policy from time-to-time without prior notice as is appropriate and to comply with changes in the applicable laws. All such updates are binding upon you immediately upon posting. When we make material changes this policy, we may choose to notify you by email message and ask you to accept the changes. But in any event, we will publish notice of any such material changes on our website, and your continued use of any CoverForce website, product or service will constitute your affirmative acceptance of those changes.

This section of our Privacy Policy constitutes our California Privacy Act Policy. It supplements the terms contained in our Privacy Policy, but applies only to visitors, users, and all others who reside in the State of California ("consumers" or "you"). Where the terms of the CoverForce Privacy Policy conflict with this policy, this California Privacy Act Policy controls for those individuals. This section of our Privacy Policy is maintained to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, ("CCPA") and other laws as applicable. Any terms of art in this policy have the meaning defined in the CCPA.

Our business requires us to collect and to use information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer ("personal information"). The following categories of information may be collected by CoverForce:

Category One: Identifiers, which may include: a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers.

Category Two: Information corresponding to California Customer Records personal information categories, such as: a name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

Category Three: Professional or employment-related information, including insurance licensure, National Producer Number and carrier appointments.

Category Four: Internet or other electronic network activity information, including interactions with our websites and Platform.

Category Five: Commercial information, including records of products or services purchased or considered.

Category Six: Inferences drawn from the foregoing.

Personal information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded under the CCPA, such as anything covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you or our business partners. For example, when you call us or our business partners for help to obtain a commercial insurance quote.
• Indirectly from agents and brokers of our clients. For example, the information from our clients who have received it and having been unable to fulfill your request for a commercial insurance quote, have passed it to us as part of us providing services to them.
• Directly and indirectly from activity on our website (www.coverforce.com) when users submit requests for commercial insurance quotes and website usage details are automatically collected.
• From third-parties that interact with us or provide support for the services we perform, including data providers, insurance carriers and licensing databases.

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided. For example, if you provide us with personal information in order for us to fulfill a request for a commercial insurance quote, we will use that information to prepare a fully qualified quote request and, if necessary, connect you to an appropriate business partner.
• To provide you with information, products or services that you request from us.
• To improve our website and to present its contents to you.
• For testing, research, analysis and product development, including developing and improving artificial intelligence and machine learning features.
• For marketing and advertising, including to market our own and our partners' products and services.
• As necessary to protect the rights, property or safety of us, our business partners or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

CoverForce will not collect additional categories of personal information or use the personal information we collected for substantially different or incompatible purposes without providing you notice through this policy.

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for anything other than performance of the contract.

We may disclose the following categories of personal information for a business purpose: each of the categories listed above.

We may also disclose your personal information for a business purpose to the following categories of third parties:

• Our affiliates.
• Service providers.
• Insurance carriers, wholesalers and networks.
• Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

CoverForce does not sell personal information and does not sell or share the personal information of consumers under 16. Advertising and analytics technologies on our websites may involve disclosures that the CCPA treats as "sharing" for cross-context behavioural advertising; you can control these through the cookie banner on our websites or by contacting us as described below.

The CCPA provides California residents with specific rights. This section describes those rights and explains how to exercise them.

You have the right to request that we disclose certain information to you about the collection and use of your personal information over any preceding 12 month period by emailing us at legal@coverforce.com. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you during the preceding 12 months.
• The categories of sources for the personal information we collected about you during the preceding 12 months.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we shared that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing: sales, identifying the personal information categories that each category of recipient purchased; and disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

You have the right to request that we delete any of your personal information that we have collected from you and have retained, subject to certain exceptions, by sending us a request at legal@coverforce.com. Once we have received and confirmed your verifiable consumer request, we will delete your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform actions you authorized.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable exclusively internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other lawful uses of your personal information that are compatible in the context of which you provided it.

You have the right to request that we correct inaccurate personal information we maintain about you. CoverForce does not sell personal information, so no opt-out of sale is required; you can control advertising and analytics technologies on our websites through the cookie banner, or contact us as described below. You have the right to limit our use and disclosure of sensitive personal information to the purposes permitted by the CCPA; we use sensitive personal information only for those purposes.

To exercise your rights regarding access, data portability, correction and deletion of personal information described above, you must submit a verifiable consumer request to us by:

• Visiting https://www.coverforce.com/ and clicking on the links in this policy.
• Emailing us at legal@coverforce.com.

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Our goal is to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option, provided we have valid deliverable addresses for either method. Any disclosures we provide will only address the 12-month period preceding the verifiable consumer request's receipt. In our response, we may also explain the reasons why a request cannot be executed, if applicable. For data portability requests, we will use an ASCII text file or other suitable means to provide your personal information that is readily useable and should allow you to move the information from one entity to another.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or entirely unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with the costs before the request is executed.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Residents of other states with comprehensive consumer privacy laws (including Colorado, Connecticut, Virginia, Texas and Oregon) may have rights to access, correct, delete and obtain a copy of their personal data, and to opt out of targeted advertising, the sale of personal data and certain profiling. To exercise these rights, or to appeal a decision on a request, contact us at legal@coverforce.com. Business-to-business and employment-related information is exempt from some of these laws. Nonpublic personal information subject to the GLBA is exempt.

We reserve the right to amend this California Privacy Policy at our discretion and at any time. All such amendments are binding upon you immediately upon posting to our website.

If you have any questions or comments about this California Privacy Act Policy, our Privacy Policy generally, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under the CCPA, please contact us.