Built for the US market · prices in USD30 live calculators
English
Sign in
InsuranceQuoteWidget
Start free

By line of business

Life

Health

Medicare

Disability & LTC

Annuities

P&C

Auto

Business

Specialty

Security and data

Insurance lead data security, stated plainly

Calculator leads hold personal and financial details: income, debts, health-related costs, contact information. Here is what we do to protect them, in plain terms and without claims we cannot back up.

Start freePrivacy policy

InsuranceQuoteWidget isolates each agency's workspace, supports two-factor sign-in, serves everything over HTTPS, encrypts stored credentials at rest, and leaves card payments to Stripe so we never see full card numbers. Leads belong to the agency that collected them, consent is stored with each lead, and data requests have a documented route.

How we protect agency and consumer data

  1. Workspace isolation

    Each agency works in its own workspace. Contacts, leads, widgets and settings are separated from every other account.

  2. Two-factor sign-in

    Turn on two-factor authentication so a stolen password alone cannot open your account and its leads.

  3. HTTPS everywhere

    Calculators, the app and lead submissions are served over HTTPS, so data is encrypted in transit.

  4. Encrypted credentials

    Credentials you store with us, such as your SMTP settings for white-label email, are encrypted at rest.

  5. Payments through Stripe

    Card payments are handled by Stripe. We never see or store full card numbers.

  6. Rate-limited submissions

    Lead submissions are rate limited, at about 30 per minute, to blunt spam floods against your forms and webhooks.

  7. Your leads stay yours

    Leads belong to the agency whose calculator collected them. We do not sell, share or resell them.

  8. Consent stored with the lead

    The visitor's consent is recorded with their submission, using the wording your agency wrote.

  9. Deletion and data requests

    Agencies and individuals can ask for access to or deletion of data through our data request process.

Do the calculators collect sensitive information?

Some inputs are financial — income, savings, debts, existing coverage — and some, such as expected care costs, touch on health. The calculators do not ask for Social Security numbers, policy numbers or medical history. Collect only what you need, and tell visitors in your own privacy notice how your agency uses their submission.

Some states have specific laws about consumer health data. The compliance center has a section on privacy and sensitive health inputs to discuss with your counsel.

Which parts of security are the agency's responsibility?

We secure the software, the workspace and the data in transit and at rest. You secure your sign-ins, decide who on your team gets a seat, protect the destinations your webhooks post to, and handle leads properly once they reach your CRM. A lead copied into a spreadsheet is outside our protection.

Use HTTPS webhook endpoints only, enable two-factor sign-in for every seat, and remove seats when producers leave the agency.

Can another agency see my leads?

No. Each agency's workspace is isolated, and contacts are de-duplicated per agency, never across agencies. The same consumer can appear in two agencies' contacts if they used both agencies' calculators, but neither agency can see the other's record, inputs or attribution.

For marketers running several client agencies, each client account keeps its own contacts and webhooks.

FAQ

Questions agencies ask

Answers first, details after.

Is lead data encrypted?

Data travels over HTTPS, so it is encrypted in transit, and credentials you store with us are encrypted at rest. Leads in your CRM are protected by that CRM's own security once delivered.

Do you have security certifications?

We do not claim any certification on this site. If your carrier or compliance team has a vendor questionnaire, send it through the contact form and we will answer it factually.

Can I require two-factor sign-in for my team?

Two-factor sign-in is available for accounts. We recommend every seat turns it on, particularly producers who access leads from phones.

Do you see my clients' card details?

We never see full card numbers. Payments for your subscription are handled by Stripe. The calculators themselves never ask visitors for payment details.

Who owns the leads my calculators collect?

Your agency. Leads sit in your workspace and go to your email, contacts and webhook. We do not sell, share or resell them, and we do not run any lead marketplace.

How does a consumer ask for their data to be deleted?

Through our data request page, or by contacting the agency whose calculator they used. The agency also controls copies in its own CRM, so it needs to delete those too.

How do you stop spam submissions?

Lead submissions are rate limited, at about 30 per minute, which blocks floods of automated submissions without affecting genuine visitors.

Is the embed safe for my website?

The inline embed renders in an isolated shadow DOM, so it cannot alter your page's styles and your styles cannot break it. Load the script only from the snippet your account gives you.

Where can I read the privacy policy?

In the privacy policy, with related notices on lead consent and cookies.

InsuranceQuoteWidget

Check it against your own checklist

Open a Producer account, turn on two-factor sign-in and inspect what a lead stores. Questions from your compliance team are welcome.

Start freeCompare plans

Free Producer plan · 14-day trial on paid plans · cancel any time

Start freePricing