Privacy policy
This Privacy Notice explains how Geniusflow AI ("Geniusflow AI", "we", "us") collects, uses, and shares personal data. Geniusflow AI acts as the data controller for personal data collected through this website, our quiz funnel, and our SaaS platform for insurance agents and agencies.
Who we are
Geniusflow AI is the legal entity responsible for this site and service. For privacy questions, contact privacy@geniusflow.ai.
Information we collect
- Contact data: name, email, phone number, state.
- Quiz responses: age range, coverage goals, basic health flags, budget.
- Account data: login credentials and profile for agent/agency users.
- Usage and device data: IP address, browser/device identifiers, pages viewed, analytics events.
- Communications: support messages, call recordings or transcripts of AI voice calls placed with your consent.
- Cookies: essential cookies for sign-in and security; analytics cookies to improve the product.
How we use your data and legal basis
- Provide the service, match leads with licensed agents, and operate accounts — performance of a contract.
- Send transactional messages, follow-ups, and AI voice calls you consented to — consent and contract.
- Security, fraud prevention, and abuse monitoring — legitimate interests and legal obligation.
- Product analytics and improvement — legitimate interests.
- Marketing communications — consent, which you can withdraw at any time.
How we share your data
We share personal data only with the following categories of recipients:
- Stripe, Inc. ("Stripe") — our payment processor and Merchant of Record for subscription orders. Stripe handles payment processing, billing, sales tax calculation and collection, invoicing, refunds, and related transaction-level customer service. Payment card and billing data is collected directly by Stripe under Stripe's Privacy Policy.
- Licensed insurance agents and agencies we connect you with, where you have submitted a quiz or requested a call.
- Service providers / subprocessors for hosting, database, email/SMS delivery, AI voice calling, and product analytics, bound by data-processing terms.
- Professional advisers (legal, accounting) and authorities when required by law or to protect rights and safety.
We do not sell your personal information.
Data retention
We retain personal data only as long as necessary for the purposes above: lead and quiz data for up to 24 months after last activity; account data for the life of the account plus up to 24 months; billing records as required by Stripe and tax/accounting law (typically 7 years); call logs and recordings for up to 12 months. After these periods, data is deleted or anonymised.
Security
We use appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, encryption at rest, role-based access controls, audit logging, least-privilege service credentials, and regular review of vendors and access.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data; object to processing; and withdraw consent at any time. You may opt out of marketing by replying STOP to texts or unsubscribing from emails. EU/UK residents may lodge a complaint with their supervisory authority. To exercise a right, email privacy@geniusflow.ai; we will respond within 30 days.
International transfers
We and our service providers may process personal data in the United States and other countries. Where data is transferred from the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Cookies
We use essential cookies for sign-in and security and analytics cookies to understand product usage. You can manage cookies through your browser settings.
Changes
We may update this notice from time to time. Material changes will be posted on this page with an updated effective date.