Privacy

Who’s responsible

Outpost Agencies LLC runs Insurance Preflight and is responsible for the data below. I’m Frankie Cleary, and I run the agency.

What I collect

Once your Microsoft admin approves the connection, the app reads how your Microsoft 365 is set up: settings, who has access to what, licenses and sign-in activity. It doesn’t read the contents of email, messages or files.

If you connect Azure too, the app reads how your Azure backups, network rules and Microsoft Defender are set up, with the Reader role your Azure admin gives it. It doesn’t read the data in your Azure, or any key or password.

I also keep what you tell me: about your business, the contacts and IT team you mention, and your answers to the insurer questions, with who gave each answer and in what role.

When you sign a carrier’s form, I keep the name and title you type, when you signed, and the internet address and browser you signed from. When a carrier’s form asks who its security team should contact, I keep the names, emails and phone numbers you give and put them only on that form and in your own report.

When you sign in, I keep your name, email address and picture, and the sign-in tokens Microsoft or GitHub issues, encrypted. Those tokens only read your profile.

If you ask for access, I keep the name, email and note you send. If you send feedback, it comes to me by email, with your name, your email address and the workspace you sent it from. The portal doesn’t keep a copy.

How I use it

To run your assessments and the recommendations in your workspace. What one assessment finds stays with your workspace, so the next one can build on it. Nothing else. No advertising, no profiling.

If you upload a document, like your incident response plan, the AI reads it and suggests answers to the insurer’s questions it covers, each with the line it rests on. No answer is recorded until you accept it. The file stays in your workspace as the evidence behind those answers.

Storage and deletion

It’s stored encrypted in Microsoft’s cloud until you delete it. A workspace admin can delete an assessment in the portal. Its report, working files and records go right away, and it can’t be undone.

Your workspace keeps the rest, like your answers to the insurer questions, the documents you uploaded, your contacts, members and history. Ask me and I’ll delete the whole workspace.

Two copies last a little longer. Database backups roll over within 7 days, and Microsoft keeps each AI response for 30 days. There’s no minimum time I keep anything.

Other companies involved

I don’t sell your data. The AI runs in my own Azure OpenAI setup, and your data isn’t used to train any models.

To research your industry, some steps let the AI search the public web through Microsoft’s Bing. It writes those searches from what it has read about your company, and Bing’s terms apply to them.

If you book a call, Calendly handles the booking under its own terms.

The trust page has more detail, with links you can check.

Your rights

You can revoke access any time. In Settings, Revoke removes the app from your Microsoft account, and the portal clears its record once Microsoft confirms the app is removed or disabled.

You can also delete “Insurance Preflight” yourself, under Enterprise applications in the Microsoft Entra admin center. Once it’s gone it can’t get new access, and any access it already has runs out within 90 minutes.

You can also ask me to delete everything I hold, and I will.

Contact

Privacy questions go to support@insurancepreflight.com. I read it myself.