Algorithmic Insurance Services, Inc. dba LIRG (“LIRG,” “we,” “us,” or “our”) is committed to protecting the privacy of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website (lirg.com), apply for insurance or consulting services, or otherwise interact with us by any means, including by electronic mail.

For California residents, this Policy also serves as our Notice at Collection and outlines the categories of personal information we collect and the purposes for which we use it. By engaging with our services, you consent to the practices described below.

We may collect personal information directly from you, automatically through our website, in communications including email, text, chat and other electronic messages between you and us, and from third-party sources.

Information you provide may include identifiers such as your name, home address, email address, telephone number, and date of birth; details relating to insurance policies, coverage, premiums, and claims; application and underwriting information; financial and background information such as credit or loss history where required and payment information, including credit card or debit card information; and communications including correspondence, surveys, and event participation.

We also receive personal information from third parties including affiliates, brokers, reinsurers, consumer reporting agencies, publicly available records, service providers, and other parties you authorize, and may combine that information with other information we have about you.
We may also collect government identification numbers, precise geolocation data, or financial account details which may be considered sensitive personal information under certain laws. If required under applicable law, we will collect and process sensitive personal information only with your consent. We collect and use such information only as permitted by law, for purposes such as underwriting, identity verification, claims management, regulatory compliance, and to fulfill any other purpose for which you provide it. If you choose not to provide or allow us to collect some information, including sensitive personal information, we may not be able to provide you with requested features, services, or information.

We also collect statistics or aggregated information that does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific service feature. We also collect technical information which includes information about your internet connection and usage details about your interactions with us, such as clickstream information to, through, and from our services (including date and time), products that you viewor search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

Personal information is used to provide and administer insurance, reinsurance, and consulting services; underwrite and service policies; manage claims; communicate with policyholders and clients; process billing and payments; validate identity and prevent fraud; conduct audits, analytics, and quality assurance; comply with legal and regulatory requirements; provide you with notices about your services; improve our services; offer products or services that may be relevant to you; and fulfill any other purposes for which you provide it. Marketing communications are optional, and you may opt out at any time by contacting us at either method set forth below, and requesting same.

We do not sell personal information. We do not share it for cross-context behavioral advertising unless you expressly opt in.

We may disclose information to service providers who are bound by contractual obligations to keep personal data confidential and use it only for the purpose for which we disclose it to them; insurers, reinsurers, brokers, adjusters, and fraud-prevention entities; governmental or regulatory authorities and courts and law enforcement as required by law or legal process; our subsidiaries and affiliates for our internal business purposes; professional advisors such as auditors or legal counsel; to fulfill the purpose for which you provide it; for any other purpose disclosed by use when you provide the information; or with your consent. In the event of a merger, acquisition, or transfer of assets, personal information may also be transferred with appropriate safeguards.

Depending upon your place of residency, you may have certain rights related to your personal data, including:

• Right to Be Informed: to be informed about the collection and use of your personal data, including the purpose, storage period, and who it will be shared with.

• Right to Access: to view and request copies of your personal data and information on the categories and specific pieces of personal information collected, processed, the purposes of use, and any disclosures made.

• Right to Delete (Right to Erasure): to request deletion of personal information that we maintain, subject to legal and contractual exceptions.

• Right to Correct (Right of Rectification): to request correction of inaccurate personal information that we maintain, taking into account the information’s nature and processing purpose.

• Right to Opt-Out (Right to Object): to direct us not to sell or share personal information for targeted advertising, profiling and sales, and automated decision- making, or to withdraw consent for further processing.

• Right to Limit Use of Personal or Sensitive Personal Information (Right to Restriction): to restrict the use of such data beyond legally permitted purposes.

• Right to Non-Discrimination: to exercise these rights without adverse treatment.

• Right to Data Portability: to ask for your data to be transferred to another controller or provided to you, which will be done in a machine-readable electronic format.

Important: The exact scope of these rights varies by the law in your location. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise these rights, or to appeal a decision regarding a previous consumer rights request, please contact us at support@lirg.com or 800-676-1237. Requests may only be made by you or an authorized agent, and identity verification will be required. We will respond within 45 days unless an extension of up to 45 additional days is permitted.

We employ commercially reasonable administrative, technical, and physical safeguards to protect personal information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure, including encryption and access restrictions. However, no system can guarantee absolute security, and we cannot guarantee the security of your personal information transmitted to, through, using, or in connection with our services. In particular, email, texts, and chats sent to us may not be secure, and you should carefully decide what information you send to us via such communication channels. Any transmission of personal information is at your own risk.

We retain personal information described in this policy for as long as necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as to provide services, administer claims, comply with legal and regulatory requirements, resolve disputes, enforce agreements, operate our organization, comply with our legal obligations, and for safety, security and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. When retention is no longer necessary, we securely delete or de-identify the data.

We are based in the U.S. If you are located outside of the U.S., your personal data will be transferred to and processed in the U.S. Neither the Data Privacy Framework or standard contractual clauses apply to any transfer. The lawful basis for such transfer and processing, including for that occurring under Article 49(1)(a) and (b) of the E.U. General Data Protection Regulation or the U.K. General Data Protection Regulation, is your explicit consent, contractual necessity, and/or to implement pre-contractual measures taken at your request. The processingwill be performed for the purposes for which you transfer it, including for our legitimate interest, and may include processing by our service providers as described above. Our legitimate interest exists by virtue of the relationship with you as a current or prospective client, for the purpose of preventing fraud, and for direct marketing purposes. By using our service, you agree to this transfer for this processing, and acknowledge that your data will be subject to U.S privacy laws which may include government access for national security purposes. You can withdraw your consent at any time, but this will require you to cease using our service.

You may file any GDPR compliance complaints with a supervisory agency in the member state where you usually maintain your domicile, place of work, or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

We do not knowingly collect personal information from individuals under the age of 16 without parental consent. If such information is inadvertently collected, it will be promptly deleted upon request.

For questions or concerns regarding this Privacy Policy or our privacy practices, please contact: