AgencyEngine

Privacy Policy

Last updated: May 2026

Introduction

Agency Engine Inc. ("Agency Engine," "we," "us," or "our") operates the Agency Engine platform at agencyengine.app. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our platform, whether you are an insurance agent subscribing to our service or a prospect interacting with an agent's funnel page, booking link, or other public-facing resource.

By using Agency Engine, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

Information We Collect

From Subscribing Agents

When you create an account or subscribe to Agency Engine, we collect your name, email address, phone number, agency name, and business information. We also collect payment information through Stripe (we do not store credit card numbers directly).

From Prospects

When a prospect fills out a form on an agent's funnel page, booking page, or other lead capture form, we collect the information they submit, which typically includes name, email, phone number, and responses to custom form questions. This data is collected on behalf of the subscribing agent's agency.

Automatically Collected Information

We collect device type, browser type, IP address, pages visited, session identifiers, and ad campaign tracking parameters (such as the Google Click ID, “gclid,” from Google Ads) when you visit our platform or an agent's public pages. This data is used for analytics, attribution, and service improvement.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Agency Engine platform
  • Process subscriptions and payments
  • Send transactional communications (account confirmations, billing receipts, security alerts)
  • Power AI features through Anthropic Claude (call summaries, draft generation, lead scoring)
  • Facilitate calls, SMS, and email on behalf of agents through Telnyx and Cloudflare Email Service
  • Sync advertising conversion data to Google Ads and Meta when configured by the agent
  • Block busy times and create events through Google Calendar when connected by the agent
  • Monitor errors and improve reliability through Sentry
  • Validate phone numbers through phone lookup
  • Generate analytics and reports for subscribing agents

Google API Services User Data

When an Agent connects their Google Ads, Google Calendar, or Gmail account to Agency Engine, we access information from Google APIs strictly to provide the integration features the Agent has requested. Agency Engine's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, in connection with Google API access we:

  • Use Google user data only to provide or improve user-facing features that are prominent in the Agency Engine product (campaign-to-policy attribution, offline conversion upload, ad performance reporting, calendar availability, and carrier-domain email intelligence).
  • Do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with the Agent's prior notice.
  • Do not use Google user data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
  • Do not allow humans to read Google user data unless we have the Agent's explicit consent for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable privacy and other laws.

An Agent may revoke Agency Engine's access to their Google account at any time from their Agency Engine settings or directly via Google Account permissions. Upon revocation we delete stored OAuth tokens within 24 hours and cease all further API calls on the Agent's behalf.

For full details on how the Google Ads integration is used inside Agency Engine, see our Google Ads Integration page.

Third-Party Service Providers

We share personal information only with the service providers necessary to operate our platform. We do not sell personal data to any third party. Our service providers include:

  • Supabase (database hosting, authentication) — hosted on AWS infrastructure
  • Cloudflare (application hosting, edge networking, DNS)
  • Stripe (payment processing)
  • Telnyx (voice calls, SMS, phone number provisioning, number validation)
  • Cloudflare Email Service (transactional and agent-initiated email)
  • Anthropic (AI processing via Claude API with zero data retention)
  • Google Ads (offline conversion uploads, when configured by agent via OAuth)
  • Meta / Facebook (Pixel and Conversions API, when configured by agent)
  • Google Calendar (calendar sync, when connected by agent via OAuth)
  • Gmail (inbox integration for carrier email intelligence, when connected by agent via OAuth — only carrier-domain emails are processed)
  • Microsoft Outlook / Office 365 (inbox integration for carrier email intelligence, when connected by agent via OAuth — only carrier-domain emails are processed)
  • Discord (team communication integration, when connected by agency owner via OAuth — only mapped channel messages and voice presence metadata are processed; message content is retained for 90 days)
  • Sentry (error monitoring and performance tracking)

Each provider processes data only as necessary to perform its designated function and is bound by its own privacy policy and data processing agreements.

Data Security

We take the security of your data seriously. All data is transmitted over HTTPS/TLS. OAuth tokens for connected services (Google Ads, Google Calendar, Gmail, Meta, Microsoft, Discord) are encrypted at rest using AES-256-GCM. Our database uses row-level security to ensure strict isolation between agencies — one agency's data is never accessible to another.

AI processing through Anthropic Claude uses a private API with zero data retention — your client data is never used to train AI models.

Our Role as Data Processor

For prospect data collected through agent funnel pages, booking forms, and other lead capture tools, Agency Engine acts as a data processor on behalf of the subscribing agent's agency (the data controller). The agent's agency determines what data is collected and how it is used. Prospects with questions about how their data is handled should contact the agency that collected their information.

Cookies

Agency Engine uses minimal cookies. We use essential cookies for authentication sessions and CSRF protection. On agent public pages (funnels, booking pages), cookies may be set by Google Analytics or Meta Pixel if the agent has configured those integrations. We also use cookies for A/B split testing on funnel pages (stored for 30 days).

Data Retention

We retain account and contact data for as long as an agent's subscription is active. Communication logs (calls, SMS, email) are retained for seven years to meet insurance industry audit and compliance requirements. After account termination, data is available for export for 30 days, after which it is permanently deleted upon request.

Your Rights

Subscribing Agents

You may request access to, correction of, or deletion of your personal data and account at any time by contacting us at privacy@agencyengine.app. Upon receiving a verified deletion request, we will delete your account and associated data, subject to any legal retention requirements.

California Residents (CCPA)

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell personal information. To exercise these rights, contact us at privacy@agencyengine.app.

European Users (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation including the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at privacy@agencyengine.app.

Children's Privacy

Agency Engine is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify subscribing agents by email and update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@agencyengine.app