Privacy Policy

Interim notice. Last updated August 4, 2026.

InsuraReg is provided by InsuraReg Tracking Management Services, LLC, which decides what information is collected and why. The platform is operated on InsuraReg's behalf by Grayduck Partners, LLC, which processes information only on InsuraReg's instructions. A fuller policy is being prepared with counsel; this notice describes current practice.

What we hold about producers

• Name, contact information, mailing and business addresses, date of birth, and National Producer Number.
• State license records, lines of authority, expiration dates, continuing-education records, and carrier appointments, sourced from the NIPR Producer Database.
• Documents uploaded by you or by InsuraReg staff, such as license and CE certificates.
• Account information (email address and a hashed password) and an audit log of security-relevant actions, including sign-ins and document access.

Social Security numbers

A full Social Security number is used in two places: to resolve a producer's National Producer Number through NIPR when it is not already known, and to submit a license renewal, which every state requires to carry a taxpayer identification number.

It is used for that request and then discarded. It is not written to our database, our audit records, or our application logs, and it is masked in any stored copy of the request or response sent to NIPR. We do not store payment card numbers at all.

Who else touches this information

• NIPR is both the source of licensing data and the destination for renewal filings. InsuraReg holds its own NIPR account and is responsible for its use.
• Railway hosts the application and database.
• Cloudflare R2 stores uploaded documents, which are served through links that expire after 15 minutes.
• Resend delivers email such as renewal reminders and messages from InsuraReg staff.

Each is bound to use the information only to provide its service. We do not sell personal information, and we do not use it to train machine-learning models.

Security

Information is encrypted in transit and at rest, access is limited by role and requires authentication, and security-relevant actions are recorded in an application audit log. No system is perfectly secure and we do not claim otherwise.

Retention and your choices

Records are kept while InsuraReg maintains your account. Because InsuraReg decides what is collected and how long it is kept, requests to access, correct, delete, or export your information should go to InsuraReg at [email protected], and Grayduck will assist in fulfilling them.

Scope

InsuraReg is operated in the United States and is intended for United States residents aged 18 or over. Questions about this notice can be sent to [email protected].