INSORA 360

Privacy policy

Last updated: September 21, 2026

Insora (“we,” “us,” or “our”) operates INSORA 360 at insora360.com, a professional profile platform for the insurance industry. This policy explains how we handle information when you visit the website, create an account, build a profile, or use our services. For privacy questions, contact privacy@insora360.com.

1. Information we collect

• Account information: your first and last name, email address, password stored as a cryptographic hash, verification status, and information needed to manage secure sessions and account recovery.
• Profile information you provide: your photo, headline, company, title, location, years of experience, biography, work history, education, specialties, achievements, personal motto, quotes, social links, and related profile content.
• Uploaded content: profile images, cover images, company logos, videos, and other files you choose to upload.
• Company information: company details, website and LinkedIn URLs, your declaration that you are a principal, and domain-verification records. When you request company enrichment, we may retrieve available public company information and a website favicon using the supplied URLs or domain.
• Technical and support information: IP addresses, request and device information, security and error logs, and information you send when contacting us.

2. How we use information

We use this information to create and authenticate accounts; send verification and password-reset emails; save and display profiles and media; enable professional and company discovery; record your sharing choices; verify control of company domains; respond to support and privacy requests; and protect, maintain, and improve the service.

We do not sell personal information, use third-party advertising trackers, or use your profile content to train external AI models.

3. Profile visibility and your choices

You choose whether to publish your personal profile in the public directory. Public profiles and the information and images included in them can be viewed by visitors, shared, and indexed by search engines. Video sharing has a separate setting. You can change these choices in the profile builder. Previously downloaded copies, third-party caches, and search results may remain outside our control.

Company profiles are shared directory entries and can appear in company selection menus. Website verification confirms control of a domain; it is not independent verification of a person’s title or employment.

4. Social platforms, external content, and image processing

Adding a social profile link does not give us access to your account password or private account information. Connecting LinkedIn requires your authorization. We receive basic profile information (such as your name and photo), your LinkedIn account identifier, and email information provided by LinkedIn. We store access and refresh tokens, where issued, encrypted in our account database to support the connection. You choose which details to import before saving your profile, and you can disconnect in the profile builder to remove our stored connection. Previously imported details remain until you remove them. You can also revoke access in LinkedIn’s settings. TikTok direct connections are not currently enabled. Basic LinkedIn profile permissions do not provide a complete work history or access to all posts.

If you add embedded third-party content, loading it may send your IP address and browser information to that platform, which handles the request under its own privacy policy. Following an external link takes you to that provider’s service. Company favicon lookup can disclose the company’s website domain to Google.

The current profile-photo background-removal feature processes the image on your device. Images you subsequently save or upload are stored as part of your profile. The application does not use an external AI service to remove photo backgrounds.

5. Who we share information with

We share published information according to your visibility choices and use providers to operate the platform:

• Render: account services and the account database.
• Cloudflare and OpenAI Sites: website delivery, application hosting, profile data, and uploaded media storage.
• Twilio SendGrid: transactional email delivery, including the recipient address, verification or reset message, and delivery information.
• External platforms: when you open or load their linked or embedded content, or request public company information.

We may disclose information when required by law, to protect people and the service, or in connection with a business transfer subject to applicable privacy obligations. We do not make your password hash, session credentials, or account-verification tokens part of a public profile.

6. Cookies and local storage

We use first-party session cookies to keep you signed in and protect account access. Browser storage may retain preferences, drafts, earlier local profiles, and sample-feed interactions. Clearing browser storage may remove these local copies. Essential cookies are needed for account features. We do not use third-party advertising cookies or cross-site advertising trackers.

7. Retention and deletion

We retain account and profile information while needed to provide the service and for legitimate security, dispute-resolution, and legal requirements. You can edit your profile, remove content, or unpublish it using the available controls. To request account deletion, access, or an export, email privacy@insora360.com. We may need to verify that the request comes from the account holder.

When processing deletion requests, we delete or anonymize information unless retention is required or permitted by applicable law. Backup copies and security records may remain for a limited period under the relevant retention processes. We will explain any applicable limitations when responding to your request.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information; object to or restrict certain processing; or withdraw consent. These rights may be subject to legal exceptions. Contact our privacy team to make a request or ask about a response. We aim to respond within 30 days and will communicate any extension allowed by law. We do not discriminate against people for exercising privacy rights.

9. Security and international processing

We use measures including password hashing, encrypted HTTPS connections, access controls, and ownership checks for account data and uploads. No system can guarantee absolute security. We will provide notices of security incidents where required by applicable law.

Our services and providers may process information in the United States and other locations where they operate. Privacy laws may differ from those in your country. Where applicable, we use the safeguards required for international transfers.

10. Children’s privacy

INSORA 360 is intended for adult professionals and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We update this page when our practices change and show the revision date above. Where required, we will provide additional notice or request consent before a material change takes effect.