Privacy Policy

QuoteVault LLC — Effective 2026-07-09

Who we are

QuoteVault LLC ("QuoteVault," "we," "us," "our") operates a service at https://getquotevault.com that lets consumers request insurance quotes and control which licensed insurance producers may contact them. The insurance verticals QuoteVault supports are automobile, homeowners, life, and renters insurance. QuoteVault is the sender of every call, text message, and email that reaches you through our service; matched producers communicate with you only through QuoteVault's protected relay, using contact points that we own and that mask your real phone number and real email address. Your consent to receive automated calls, text messages, and emails runs to QuoteVault; producers participate in the relay under our contracts and the scope of your consent.

This Privacy Policy explains what personal information we collect from consumers, how we use it, who receives it from us, and the rights you have.

Producer-facing information is described briefly in Section 3 so consumers can see the full picture of what data QuoteVault holds. If you are a licensed insurance producer, your rights under this Privacy Policy apply to you as well.

1. Information we collect from consumers

Information you give us directly

• Contact information. Your real phone number and real email address, provided during the quote-request intake. We do not currently ask for or store your legal name, postal address, or date of birth in your consumer profile. If a specific insurance vertical requires additional details (for example, a vehicle's year, make, model, or VIN for an auto quote), those are described on the intake step for that vertical and are used only to build the quote request.
• State and ZIP code. Used to match you with producers licensed for your state and, during our initial launch, to confirm you are within our service footprint (currently Alabama).
• Contact preferences. The number of producers you consented to be contacted by, the contact methods you selected (call, text, email), and the time-of-day window you chose.
• Consent record. The version of the Consumer Consent Disclosure you agreed to and the timestamp of your agreement.
• Payment information. If you pay the intake fee, payment details you enter are collected and processed by our payment processor (Stripe, Inc.). QuoteVault does not store your full card number.
• Account information. An email address and password if you create a QuoteVault account.
• Support requests. The content of messages you send to us at administration@getquotevault.com.

Information collected automatically

• Technical information. IP address at consent capture (recorded on the consent record for our audit trail), device and browser characteristics, referring URL.
• Log data. Requests to our servers, timestamps, error data.
• Cookies and similar technologies. We use a minimal set of cookies described in Section 6.

Information from third parties

• License verification. We may check a producer's insurance-license status against publicly available state license registries (for example, NIPR or state DOI databases) as part of onboarding and periodic re-verification.
• Fraud and abuse prevention. We may use industry services to detect and prevent fraudulent quote requests or abuse of the relay.

2. How we use consumer information

We use consumer information to:

• Match your quote request to producers who are actively licensed in your state for the coverage you selected.
• Operate the protected message relay: route calls, text messages, and emails between you and matched producers through a QuoteVault relay phone number and relay email address, without disclosing your real phone or email to producers unless you affirmatively release them.
• Send you service messages (a confirmation that we received your consent, a STOP acknowledgment, a HELP reply, notice that your relay window has closed).
• Process the intake fee.
• Respond to your questions and support requests.
• Comply with legal obligations, including recordkeeping requirements under the Telephone Consumer Protection Act and applicable state consumer-protection and insurance laws.
• Detect, investigate, and prevent fraudulent quote submissions, abuse of the relay, and violations of our Terms of Service.
• Improve the service, in aggregate and de-identified form.

We do not use your quote content for advertising, and we do not sell or resell it.

3. Information relating to producers

For completeness so consumers understand the picture: QuoteVault holds each producer's business identity (legal name, agency, National Producer Number, state license numbers and status, and the coverage types the producer is licensed to sell), their business contact information, their account credentials, evidence of active licensure, and their platform activity (which requests they were matched to, messages sent through the relay, and their participation history if they pay a participation fee). This information is used to operate the service, verify licensure, and enforce compliance with our producer contract. Producer information is not used to make marketing decisions about consumers.

4. The protected relay and what producers see

QuoteVault's relay is designed so that a matched producer sees only a mask of your contact information until you affirmatively release your real information:

• Phone. A producer calls or texts a QuoteVault relay number (provisioned from Twilio Inc.). QuoteVault translates between the relay number and your real number so the producer never sees your real number unless you release it. If you send STOP or the relay window expires, the relay is closed.
• Email. A producer emails a QuoteVault relay email address (a per-request address on the relay.getquotevault.com subdomain). QuoteVault translates between the relay address and your real address the same way, using SendGrid Inc.'s Inbound Parse service.

Your real phone number and real email address are stored encrypted at rest in our database. A producer sees them only after you affirmatively release them by replying YES to a producer's release request over SMS, or by using the release control in your QuoteVault account. Release is per-producer and per-quote-request: releasing to one producer does not release to the others in your pool.

5. Recipients of your information

• Matched producers. Limited to the masked contact information described in Section 4, plus any real contact information you affirmatively release.
• Service providers who process data on our behalf. Payment processing (Stripe, Inc.), telecommunications and messaging relay (Twilio Inc.), email relay (SendGrid Inc.), hosting and application infrastructure (Vercel Inc.), database hosting (Supabase, Inc.), error monitoring (Functional Software, Inc. d/b/a Sentry). Each of these processes data only to provide services to QuoteVault under a data processing agreement.
• Legal and safety. To comply with a subpoena, court order, or other lawful process; to enforce our Terms of Service or agreements with producers; to protect the rights, property, or safety of QuoteVault, our users, or others.
• Business transactions. If QuoteVault is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to notice to you and the terms of this Privacy Policy.
• An advertising platform, on our public marketing pages only. Meta Platforms, Inc. receives, from our public marketing pages only, the fact that a browser viewed one of those pages, as described in Section 6. Meta is not a service provider processing data on our behalf, and it may use that information for its own advertising purposes. It receives nothing from the quote request flow, nothing you enter into a quote request, and nothing about your messaging consent.

We do not sell your personal information. We use limited advertising measurement on our public marketing pages, described in Section 6. We do not use the information you provide in a quote request, or any fact about your messaging consent, for behavioral advertising.

Mobile information and messaging consent — carve-out

Mobile opt-in data and messaging consent are not shared with third parties for marketing. The personal information you provide to opt in to text messaging with QuoteVault — including your mobile phone number and the fact that you consented to receive automated calls or text messages — is not sold, rented, shared, leased, or otherwise transferred to any third party or affiliate for that third party's or affiliate's own marketing, advertising, or promotional purposes.

This carve-out is a standalone commitment. Nothing elsewhere in this Privacy Policy, including the "Service providers who process data on our behalf" bullet in Section 5 or the advertising measurement described in Section 6, overrides it. The advertising technology described in Section 6 does not run on any page where you enter a mobile phone number or give messaging consent, and it never receives your mobile opt-in data or the fact that you consented. Service providers who process your information on QuoteVault's behalf under a data processing agreement — for example, Twilio Inc. delivering a text message you sent — receive that information only to provide the relay service to you and to QuoteVault, and are contractually barred from using it for their own marketing.

Matched producers exchange messages with you only through QuoteVault's relay under the scope of your consent; they do not receive your real phone number or real email address at match time. Any messages a producer sends to you are subject to the QuoteVault Consumer Consent Disclosure and the producer contract. If you affirmatively release your real contact information to a producer, that release is your decision, made in response to a specific request from a specific producer, on a specific quote request — it is not a "sharing" of your mobile opt-in data with a third party for that party's own marketing, and revoking your QuoteVault consent does not require the producer to stop contacting you outside the relay if you released real contact information to them (you would contact the producer directly).

6. Cookies and similar technologies

We use only cookies necessary to operate the service:

• Authentication cookies to keep you signed in.
• CSRF-protection tokens to protect against cross-site request forgery.
• Session state to persist quote-flow progress within an intake session.

We also use privacy-preserving analytics to count page views and understand which pages people use. Our analytics provider sets no cookies, assigns you no persistent identifier, and does not track you across other websites. It records the page visited, the referring page, and approximate region derived from your IP address. It never receives your name, phone number, email address, or any information you enter into a quote request.

Advertising measurement on our public information pages. On our public information pages — How It Works, Coverage, Trust & Compliance, Questions, and About — we use the Meta Pixel, an advertising technology provided by Meta Platforms, Inc. It sets a cookie and reports to Meta that a browser viewed one of those pages, so that we can measure whether our advertising reaches people. Meta may use that information for its own advertising purposes.

We limit it in three specific ways:

1. It does not run on the quote request flow. The Meta Pixel is not loaded on any page where you enter or review your personal information — including the quote intake steps, the consent screen, payment, and every page behind sign-in. Nothing you type into a quote request, and no fact about your messaging consent, is available to it.
2. We do not send it your contact information. We do not enable Meta's "Advanced Matching" or any equivalent feature, so we do not transmit your name, phone number, or email address — hashed or otherwise — to Meta.
3. You can decline it. We ask for your agreement before loading it. If you decline, or if you have not answered, it is not loaded. You can change your answer at any time, and we honor a Global Privacy Control signal sent by your browser as a decline.

Apart from that advertising measurement, we do not use advertising cookies or third-party trackers, and we do not allow our analytics data to be used for advertising.

7. How long we keep information

• Consent records are kept for the period required by federal and state law and to demonstrate the terms you agreed to if a dispute arises. Consent records are treated as a compliance record, not marketing history.
• Quote requests and matching activity are kept for the operational life of the request (through the seven-day relay window and any follow-up dispute) plus the period required for our tax and financial records and for legal-hold obligations.
• Released contact information — where you have affirmatively released your real contact information to a specific producer for a specific quote request — is kept for as long as we are required to demonstrate that release occurred and its scope.
• Suppression records — where you have revoked consent or opted out — are kept indefinitely so that any future re-consent request from a suppressed number is honored as revoked and cannot silently resume messaging.
• Payment records are kept as required by tax and financial-recordkeeping law.
• Account records are kept for as long as your account is active plus a reasonable post-closure window for dispute resolution.

We do not commit to a fixed retention schedule for released or quote data beyond what applicable law requires or what our audit trail needs, because a fixed schedule we do not follow would be its own compliance liability. When you request deletion under Section 8, we honor the request for information we are not legally required to retain.

8. Your rights

Rights available to all consumers

• Access. You can see the quote requests and consent records associated with your account through your QuoteVault account.
• Correction. You can update your account information through your QuoteVault account or by contacting us.
• Revocation of consent. You can revoke consent to be contacted at any time (see the Consumer Consent Disclosure for the methods).
• Deletion. You can request deletion of information we hold about you that we are not legally required to retain. Contact administration@getquotevault.com.

California residents (CCPA / CPRA)

You have the rights to know what personal information we collect, to delete it (subject to legal-retention exceptions), to correct inaccuracies, to opt out of sale or sharing for cross-context behavioral advertising (QuoteVault does not sell your personal information and does not share it for cross-context behavioral advertising), and to limit use of sensitive personal information.

The "Mobile information and messaging consent — carve-out" above operates as a standalone commitment on top of these CCPA rights: your mobile opt-in data and your consent to receive automated calls or text messages are, in every case, excluded from any category that CCPA's "sale" or "sharing" definitions would otherwise reach. QuoteVault does not sell, rent, share, lease, or otherwise transfer that information to any third party or affiliate for that party's own marketing, advertising, or promotional purposes, and nothing in this section changes that.

You may exercise these rights by emailing administration@getquotevault.com. You have the right not to be discriminated against for exercising these rights. Categories of personal information collected, disclosed, and (not) sold in the preceding twelve months mirror Sections 1, 5, and this Section 8.

Virginia, Colorado, Connecticut, and Utah residents (VCDPA / CPA / CTDPA / UCPA)

You have similar rights to access, delete, correct, and opt out of the sale of your personal data and out of targeted advertising, and (in some states) to appeal a decision. QuoteVault does not sell personal data or engage in targeted advertising as those terms are defined by these laws. To exercise these rights, email administration@getquotevault.com.

Nevada residents

You may direct us not to sell your personal information (we do not sell it) by emailing administration@getquotevault.com.

We will respond to verifiable requests within the timelines required by applicable law.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information: encryption in transit (TLS), column-level encryption at rest for real phone number and real email address, access controls, audit logging, and incident response procedures. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

10. Age

The Service is intended for adults. Consistent with Section 2 of our Terms of Service, QuoteVault is not directed to individuals under eighteen (18) and we do not knowingly collect personal information from individuals under eighteen. If you believe an individual under eighteen has provided personal information to us, contact administration@getquotevault.com and we will delete it.

11. International users

QuoteVault operates in the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. By using the service, you consent to this transfer.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Effective" date at the top and preserve prior versions internally. If a change is material, we will provide reasonable notice (in the service or by email) before the change takes effect.

13. Contact us

• Email: administration@getquotevault.com
• Website: https://getquotevault.com
• Mailing address: 28003 State Highway 181 Apt 2203, Daphne, AL 36526