Privacy Policy

Account information. When you create an account we collect your name, email address, and authentication credentials managed by our identity provider. If you enable multi-factor authentication, we store the associated enrollment factor - never your one-time codes. We do not have access to your password.

Yisrael Workspace and Business Profile information. During Yisrael Workspace Setup and thereafter, we collect business legal name, contact details, locations, operations, payroll and revenue figures, prior carriers, loss history, and the additional industry-specific responses relevant to your class of business.

Documents. Files you upload or that we generate on your behalf - declaration pages, loss runs, policies, endorsements, certificates, invoices, proposals, and supporting materials - together with their filenames, versions, and upload metadata.

Platform activity. Messages exchanged with your advisor, certificate requests, quote and proposal activity, renewal milestones, document requests, task and workflow records, and the notifications generated by those events.

Technical metadata. IP address, browser type, and basic request timing, used for security, rate limiting, and abuse prevention.

We use your information to deliver brokerage services and operate your Business Workspace: evaluating your risk profile, marketing your account to appropriate carriers, preparing quotes and proposals, issuing and tracking certificates of insurance, managing renewals, servicing policies, and communicating with you. We do not sell your data, and we do not use it for advertising.

Carrier submissions disclose only the information underwriters require to quote. You will know which carriers receive your information.

The Yisrael Workspace may use artificial intelligence to organize information, summarize documents, extract structured data from files you upload, draft communications, and help you navigate the workspace. These features are organizational aids.

The assistant does not provide legal, tax, or accounting advice, does not make insurance coverage decisions, and does not bind coverage. Coverage decisions remain subject to review by licensed insurance professionals and the applicable insurance carriers. AI-generated summaries may be incomplete or inaccurate; the underlying document or issued policy controls.

Content processed by these features is sent to our AI service providers solely to return a result to you and to us. We do not authorize those providers to use your business information to train general-purpose models.

Platform notifications - new proposals, completed certificates, advisor messages, renewal activity, and requests for additional information - are generated automatically by platform events and delivered inside your workspace notification center. Notification records contain the event type, a short summary, and a link to the related record.

We may also send service and transactional email tied to your account and your insurance program. These are not marketing messages and are necessary to service your account; where we send optional messages, you may unsubscribe from them.

Data is transmitted over TLS and stored in an access-controlled backend with row-level security enforced at the database layer. Access is role-based: clients can reach only their own workspace records, and licensed staff access is scoped to their role. Document storage buckets are private, and files are served through short-lived signed links rather than public URLs.

Sensitive credentials are managed as encrypted secrets and never embedded in client code. Multi-factor authentication is available on accounts. We follow least-privilege access internally and review our security posture on an ongoing basis. No system can be guaranteed perfectly secure, and we do not represent otherwise.

The platform maintains audit records of significant actions - document uploads, downloads and deletions, message activity, policy and renewal changes, certificate request status, and administrative role changes. Each entry records who acted, what changed, and when.

These logs exist for security, accountability, and insurance recordkeeping. They are visible to authorized staff and, where applicable, surfaced to you as your workspace activity timeline.

We share information only with: (a) insurance carriers and wholesale markets actively quoting your account, (b) service providers that operate our infrastructure - hosting, database, storage, email delivery, and AI processing - under confidentiality obligations, and (c) regulators or counsel where required by law. We never trade or sell your data.

We retain information you submit through Yisrael Workspace Setup and generate in your Yisrael Workspace based on your relationship with us:

• If you complete setup but do not become a client, your information (including any uploaded documents) is retained for up to 18 months from submission, after which it is permanently deleted from our systems.
• If you become a client, your file is retained for the duration of our relationship and for 6 years after your policy is no longer in force, consistent with insurance recordkeeping requirements in Colorado, New York, and Hawaii.
• After a client relationship ends and the required retention period has passed, records are archived and permanently deleted, including any associated documents in storage.
• We maintain an internal audit log of deletions (record identifiers and timestamps only, no personal or business content) to demonstrate compliance with this policy.

You may request earlier deletion of your information if you did not proceed with coverage through us, except where we are required to retain records by law.

You may request access to, correction of, or deletion of the personal information we hold about you, subject to legal and regulatory limits. Email contact@yisraelagency.com to make a request.

Privacy questions go to contact@yisraelagency.com.