Privacy Policy

Who we are

SecureProspective is an insurance marketing organization serving independent insurance and annuity producers. In this policy, "we" and "us" mean SecureProspective. "You" means anyone who visits our website, contacts us, or uses a service we operate for advisors.

We are the controller of the personal information described here. Our contact details are in the Contact section.

What we collect

When you visit the website

Our hosting and network provider records standard request information, including IP address, browser and device type, the pages requested, and the time of the request. This is used to serve the site, keep it available, and defend it against abuse. We do not run advertising trackers or sell this information.

When you contact us

If you fill in a form or email us, we receive what you send: typically your name, email address, phone number if you give one, and the content of your message.

The contact form also records which of the three lines you chose, the page you sent it from, and the IP address, browser string and country the request arrived with. Those last three are kept so we can tell a real enquiry from an automated one. The form is protected by Cloudflare Turnstile, a spam check that looks at how the request behaves rather than asking you to solve a puzzle, and that check runs before anything is stored.

When you have an advisor account

For advisors using services we host, we hold the account details needed to run them: name, email address, the organization you belong to, and the content you create in the service, such as drafted and scheduled posts and any media you upload.

What we do not collect

We do not collect client information on behalf of advisors through these tools, and we do not ask for Social Security numbers, account numbers, or health information anywhere on this website.

Connected social accounts

Our social publishing service lets an advisor connect their own social media accounts so they can schedule and publish their own posts. Connecting an account is always initiated by the advisor, and it is always their account, not ours.

When you connect an account, we receive and store:

• an access token issued by that platform, which lets the service act on the account you authorized, and only in the ways you authorized;
• basic profile information used to identify the connection in the interface, such as the account or page name, its identifier on that platform, and its profile picture;
• the posts you publish through the service, and the engagement and reach statistics that platform reports back for them.

Access tokens are stored so the service can publish on your schedule without asking you to sign in again. They are held against your own organization in our database and are not shared with, or usable by, any other advisor.

We use this access to publish the content you create, to read back the performance of those posts, and to show you which accounts and pages are connected. We do not read your private messages, we do not post anything you have not scheduled or approved, and we do not use your social data to build advertising profiles or to train machine learning models.

You can disconnect an account at any time from within the service, and you can revoke our access from the platform's own settings. Disconnecting stops all future access immediately.

Platform-specific terms

Google and YouTube

Our use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including its Limited Use requirements. Where the service connects a YouTube account, it uses the YouTube API Services, and your use of it is also subject to the YouTube Terms of Serviceand the Google Privacy Policy. You can revoke our access to your Google account atmyaccount.google.com/permissions.

Meta (Facebook and Instagram)

Where the service connects a Facebook Page, we access only the pages you select during authorization, and only for the permissions you grant. You can review and remove our access under Settings, then Business Integrations, in your Facebook account.

LinkedIn

Where the service connects a LinkedIn profile or company page, we access it only for the permissions you grant during authorization. You can remove our access under Settings, then Data Privacy, then Permitted Services.

How we use it

• To provide the services you asked for, including publishing what you schedule.
• To answer your questions and stay in contact with you about your work with us.
• To keep our systems available, secure, and free of abuse.
• To meet our legal and regulatory obligations.

We do not sell personal information, and we do not share it with advertisers.

Who else sees it

We keep the number of parties involved deliberately small. Information is shared only with:

• the social media platforms you choose to connect, when we act on your behalf at your instruction;
• infrastructure providers that host, deliver, or protect our services, acting on our instructions and not for their own purposes;
• professional advisors, or a regulator or law enforcement body, where we are legally required to do so.

Our hosted services run on infrastructure we operate and administer ourselves, rather than on a third-party software vendor's platform.

Named plainly, the providers behind this website are Cloudflare, which hosts the site, stores what you send through the contact form, and runs the spam check on it, and Brevo, which delivers the notification email telling us your message arrived. Neither uses your information for its own purposes.

How long we keep it

• Access tokens are kept while an account is connected, and deleted when you disconnect it or close your account.
• Posts and scheduled content are kept while your account is open, so you have your own history.
• Enquiries and correspondence are kept for as long as we are in contact with you and for a reasonable period afterwards.
• Server and security logs are kept for a short operational period and then discarded.

Deleting your data

You can have your information removed in either of these ways.

1. Disconnect an account yourself. In the social publishing service, open the channel and remove it. Its stored access token and profile details are deleted with it.
2. Ask us. Email[email protected] with the subject line Data deletion request, from the email address associated with your account, and tell us what you want removed: a single connected account, or your account and all of its content.

We will confirm receipt and complete the deletion within 30 days, and we will tell you when it is done. If we are required by law to retain something, we will say so and tell you what and why.

Security

Traffic to our services is encrypted in transit. Access tokens and account credentials are held on systems we administer, with access limited to the people who need it to operate the service. No system is perfect, and we do not claim otherwise; if a breach affects your information, we will tell you.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to a particular use of it. Write to[email protected] and we will respond within 30 days. We will not treat you differently for exercising any of these rights.

Children

Our services are for insurance professionals and are not directed to children. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects how we handle your information, we will tell account holders directly rather than relying on you to notice.

Contact

Questions about this policy, or about anything we hold, go to[email protected].