1. Information We Collect

A. Account Information

When you register, we collect:

1. Email address (used as your login identifier)
2. First and last name
3. Password (stored in hashed form — we never store or view your plaintext password)

B. Insurance Profile Information

To generate AI estimates and analyze your coverage, you may voluntarily provide:

1. Policy details: Carrier name, policy number, premiums, effective/expiration dates
2. Driver profile: Date of birth, address, marital status, education, occupation, credit score range, driving record (accidents, violations, years licensed)
3. Vehicle information: Year, make, model, VIN, annual mileage, safety features, deductible selections
4. Coverage selections: Bodily injury limits, property damage, comprehensive/collision deductibles, endorsements
5. Additional drivers: Names, dates of birth, driving records of household drivers
6. Discount eligibility: Homeownership, bundling, military status, defensive driving course completion

C. Usage Data

We automatically collect:

1. AI estimate results and historical rate snapshots (Premium tier)
2. Browser type, IP address, and device information
3. Pages visited and features used
4. Session cookies required for authentication

2. How We Use Your Information

We use the information we collect to:

1. Provide our core service: Generate AI-powered insurance rate estimates across multiple carriers based on your profile
2. Operate your account: Authenticate your login, manage your subscription tier, and store your policy data
3. Improve our estimates: Refine our estimation engine accuracy (using aggregate, de-identified data only)
4. Communicate with you: Send password reset links, account notifications, and service updates
5. Ensure security: Detect fraud, enforce our Terms, and protect against unauthorized access

3. How We Store and Protect Your Information

1. Your data is stored in an encrypted database hosted on Microsoft Azure
2. Passwords are hashed using ASP.NET Identity's secure hashing algorithm and are never stored in plaintext
3. All data transmission between your browser and our servers uses HTTPS/TLS encryption
4. Access to production data is restricted to authorized personnel only

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

4. Information Sharing and Disclosure

We do not sell your personal information.

We may share information only in the following circumstances:

1. Service providers: Third-party services that help us operate the platform (e.g., Microsoft Azure for hosting). These providers are bound by confidentiality obligations.
2. Legal compliance: When required by law, regulation, legal process, or enforceable government request.
3. Safety and rights: To protect the rights, property, or safety of Sygma, our users, or the public.
4. Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your information would remain subject to this Privacy Policy.

Important: Our AI estimates are generated entirely within our platform. We do not transmit your personal information to insurance carriers. Estimates are algorithmic calculations, not actual insurance quotes.

5. Cookies and Tracking

We use the following types of cookies:

1. Essential cookies: Required for authentication and session management. These cannot be disabled.
2. Functional cookies: Remember your preferences (e.g., selected state, credit range) to improve your experience.

We do not use third-party advertising cookies or tracking pixels.

6. Your Rights and Choices

A. Access and Correction

You can view and update your insurance profile, driver information, and vehicle details at any time through the Policy Form page.

B. Account Deletion

You may request deletion of your account and all associated data by contacting us at privacy@sygmadata.com. Upon deletion, all your policy data, estimates, quotes, and historical snapshots will be permanently removed.

C. Data Export

You may request a copy of your personal data in a portable format by contacting us.

D. Marketing Opt-Out

If we send marketing emails, you may unsubscribe at any time via the link in each email. Administrative emails (password resets, security alerts) are not subject to opt-out.

7. GDPR (European Users)

If you are in the European Economic Area, you have the following additional rights under the General Data Protection Regulation:

1. Right to withdraw consent for data processing at any time
2. Right to access, rectify, or erase your personal data
3. Right to data portability (receive your data in a machine-readable format)
4. Right to restrict or object to processing
5. Right to lodge a complaint with your local data protection authority

To exercise any of these rights, contact privacy@sygmadata.com.

8. CCPA (California Users)

Under the California Consumer Privacy Act, California residents have the right to:

1. Know what personal information we collect and how it is used
2. Request deletion of personal information
3. Opt out of the sale of personal information (we do not sell personal information)
4. Non-discrimination for exercising your privacy rights

To exercise these rights, contact privacy@sygmadata.com.

9. Children's Privacy

Our Site and services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@sygmadata.com.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

1. Account data: Retained until you request account deletion
2. Policy and estimate data: Retained while your account is active
3. Historical rate snapshots: Retained for up to 24 months
4. Server logs: Retained for up to 90 days

After account deletion, residual copies may remain in backup systems for up to 30 days before being permanently purged.

11. Third-Party Links

Our Site may contain links to third-party websites (e.g., insurance carrier websites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon posting. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Sygma Data, LLC
Privacy Department
privacy@sygmadata.com

© 2026 Sygma Data, LLC. All rights reserved.