Privacy Policy
This policy explains what information BOB collects, how we use it, and the choices you have. In short: we collect what we need to run BOB for you, we don't sell your data, and the client information you enter is yours.
1. Information we collect
- Account information: your name, email address, password (stored by our sign-in provider as a one-way hash, never in plain text), the plan you choose, and your agency or IMO details.
- Information you enter into BOB: your clients' names and contact details (phone and email), policy and case details (carrier, product, premium, dates, status), commissions, chargebacks, costs, goals, activity counts, owner draws, and any notes you type. You decide what goes in.
- Billing information: payments are processed by Stripe. We keep your Stripe customer and subscription identifiers and your plan status. We do not receive or store your full card number.
- Usage information: when you last used BOB, which features you use, and technical data such as browser type, which helps us run and secure the service. Our servers record routine logs of requests.
- Messages and feedback you send us.
Please don't enter Social Security numbers, bank or card numbers, health information, or passwords into BOB. It isn't designed to hold them.
2. How we use it
- To provide, secure, and support BOB, including your dashboards, calculators, reports, and team roll-ups.
- To bill you and manage your trial and subscription.
- To send account emails: confirmation, password reset, billing and service notices. We don't send marketing email without your consent.
- To prevent abuse and fraud, including enforcing one free trial per person. To do that we keep a one-way scrambled fingerprint of each email address that has started a trial. It can't be turned back into the address, and it stays after an account is deleted.
- To improve BOB and fix problems, and to understand how people find us: when you sign up we note which link or site brought you here (for example, a social post or a message) and keep it with your account.
We do not sell your information, and we do not use the client information you enter for advertising.
3. Who can see your data
- You, and nobody else, for the data in your own account.
- Your agency owner, if you joined their team: your results roll up into their team dashboard, as the invite link tells you before you sign up.
- BOB's support team, only to help you or fix a problem. Support views are read-only, require two-step sign-in, and are recorded in an internal audit log.
- Service providers that run BOB for us, under their own security commitments: Supabase (database and sign-in), Render (hosting), Stripe (payments), Resend (account emails), and Cloudflare (bot protection and networking). They may process data only to provide their service to us.
- Others if required: to comply with the law or valid legal process, to protect rights and safety, or in a sale or reorganization of the business, in which case we'll tell you.
4. How we protect it
Data is encrypted in transit. Access to the database is restricted so that the public internet can't read it, each account's data is separated from other accounts, administrator access requires two-step sign-in, and administrator actions are logged. No system is perfectly secure, so please use a strong, unique password and turn on two-step sign-in in Settings. If we learn of a breach that affects you, we'll notify you as the law requires.
5. Your clients' information
You are responsible for the client information you enter and for having the right to do so. As to that information, BOB acts as your service provider: we process it on your behalf, only to provide BOB, and we do not use it for our own purposes.
6. Cookies and local storage
BOB uses essential browser storage to keep you signed in and remember simple preferences, and Cloudflare's bot check on sign-in and sign-up pages. We don't run advertising cookies.
7. Keeping and deleting data
We keep your account and the data you entered while your account exists. If you cancel, we keep it so you can come back, as we explain in our Terms. To export or permanently delete your account and data, email us at the address below. We'll act on it within 30 days. Backups may hold deleted data for a short period before they roll off. We may keep limited records we're required to keep, such as billing records, and the scrambled trial fingerprint described above.
8. Your choices and rights
You can see and edit most of your information in the app. You can ask us for a copy, a correction, or deletion. Depending on where you live, you may have additional rights under privacy laws; contact us and we'll honor them as the law requires.
9. Children
BOB is for adults working in the insurance industry. It isn't directed to anyone under 18, and we don't knowingly collect their information.
10. Changes
We may update this policy. If a change is material we'll tell you in the app or by email before it takes effect. The effective date is at the top of the page.
11. Contact
Privacy questions and requests: support@getbob.agency.