Privacy Policy

1. Who We Are

Legacy Guard, Inc. ("Legacy Guard," "we," "us," or "our") is a licensed independent insurance agency operating as QuoteIt.insure, iAgentIQ, and related properties. We are licensed in 34 states (NPN: 87604) and headquartered in Madison, Mississippi.

This Privacy Policy applies to all websites, web applications, and services operated by Legacy Guard, including but not limited to:

• legacyguard.insure — Agent recruiting and onboarding portal
• quoteit.insure — Consumer insurance quoting and information portal
• iagentiq.com — Agent platform and CRM portal
• quoteitengine.com — Insurance quoting engine
• my.legacyguard.insure — Legacy Wishes™ policyholder portal
• vitalcommandiq.com — Personal health intelligence dashboard

2. Information We Collect

Information You Provide Directly

When you interact with our websites, apply to become an agent, request a quote, or create an account, we may collect:

• Full name, date of birth, and contact information (email, phone, address)
• National Producer Number (NPN) and state insurance license information
• Social Security Number (for carrier contracting purposes only)
• Health-related information provided for insurance quoting purposes
• Financial information necessary for policy underwriting
• Beneficiary information provided during the application process
• Final wishes and estate planning information entered into Legacy Wishes™
• Payment information for lead purchases or platform subscriptions

Information Collected Automatically

When you visit our websites or use our applications, we automatically collect:

• IP address, browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Session data and interaction logs within our agent platforms
• SMS and communication activity logs within our CRM system

Information from Third Parties

We may receive information about you from:

• Insurance carriers during the underwriting and contracting process
• SuranceBay / SureLC for agent contracting and appointment verification
• Lead vendors providing consumer-expressed interest data
• GoHighLevel (GHL) CRM platform for lead and contact management
• Wearable health device platforms (see Section 5 below)

3. How We Use Your Information

We use the information we collect to:

• Process insurance applications and facilitate carrier contracting
• Provide insurance quotes and product information
• Onboard and support licensed insurance agents
• Operate the iAgentIQ platform, CRM, and QuoteIt Engine
• Send appointment reminders, policy follow-ups, and transactional communications
• Deliver marketing communications where you have provided consent
• Process lead purchases and platform subscription payments
• Fulfill legal and regulatory obligations as a licensed insurance agency
• Improve our services, platforms, and user experience
• Detect and prevent fraud, unauthorized access, and security threats
• Support the VitalCommand IQ health intelligence dashboard where authorized

4. Information Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Insurance Carriers & Partners

To process insurance applications and complete underwriting, we share necessary information with our carrier partners, including Americo, Foresters, American Amicable, Royal Neighbors, Mutual of Omaha, Aflac, CICA, Corebridge, and Gerber Life.

Service Providers

We work with third-party service providers who assist in operating our platforms and services:

• GoHighLevel — CRM and communication platform
• Supabase — Database and authentication services
• Railway — Application hosting and API proxy services
• Netlify / Cloudflare — Website hosting and delivery
• SuranceBay / SureLC — Agent contracting and licensing verification
• Anthropic — AI-powered document processing features
• Google Cloud Vision — OCR document scanning
• Compulife — Insurance quote data services

Legal Requirements

We may disclose your information when required by law, regulation, or legal process, including to state insurance departments, the National Insurance Producer Registry (NIPR), or law enforcement authorities.

Business Transfers

In the event of a merger, acquisition, or sale of Legacy Guard assets, your information may be transferred as part of that transaction. You will be notified via email or prominent notice on our website prior to any such transfer.

5. Wearable & Health Device Data

Legacy Guard operates VitalCommand IQ (vitalcommandiq.com), a personal health intelligence dashboard that integrates with consumer wearable health devices. This section specifically governs how we handle data from these integrations.

Devices and Platforms We Integrate With

• WHOOP — Activity, recovery, sleep, and cardiovascular data
• Withings — Body composition, heart health, and activity data
• Garmin — Activity, GPS, sleep, and heart rate data (pending developer approval)

What Wearable Data We Collect

With your explicit authorization through each platform's OAuth process, we may collect:

• Heart rate, HRV (heart rate variability), and cardiovascular metrics
• Sleep quality, duration, and sleep stage data
• Activity levels, steps, calories, and recovery scores
• Body composition data including weight, BMI, and body fat percentage
• Workout data including exercise type, duration, and intensity

How We Use Wearable Data

Wearable and health device data collected through VitalCommand IQ is used exclusively to:

• Display personal health dashboards and trend visualizations within VitalCommand IQ
• Generate personalized health insights and AI-powered coaching recommendations
• Calculate physiological age estimates and wellness scores
• Provide exercise and recovery recommendations within the platform

Revoking Access

You may revoke our access to your wearable device data at any time by disconnecting the integration within your VitalCommand IQ account settings, or by revoking authorization directly through your device manufacturer's account settings (WHOOP app, Withings account, Garmin Connect). Revocation will stop future data collection but does not automatically delete previously collected data — see Section 8 for data deletion requests.

6. Cookies & Tracking Technologies

Our websites use cookies and similar tracking technologies to enhance your experience and understand how our platforms are used.

Types of Cookies We Use

• Essential Cookies: Required for core platform functionality including login sessions and security
• Analytics Cookies: Help us understand website traffic and usage patterns (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant advertising on third-party platforms where applicable
• Preference Cookies: Remember your settings and preferences across visits

Most browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of our platforms.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• TLS/SSL encryption for all data transmission
• Encrypted database storage through Supabase with row-level security
• HMAC-SHA256 signed authentication tokens for platform access
• Role-based access controls limiting data access to authorized personnel
• CORS lockdown on all API endpoints via Railway proxy
• Regular security reviews of platform integrations and data flows

While we take significant precautions to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong, unique passwords and to report any suspected security vulnerabilities to us promptly.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:

• Insurance application and policy data: Retained for a minimum of 7 years per state insurance regulations
• Agent contracting records: Retained for the duration of the agency relationship plus 5 years
• CRM and communication logs: Retained for 3 years for compliance and audit purposes
• Website analytics data: Retained for 26 months in aggregated form
• Wearable health data: Retained for the life of your VitalCommand IQ account; deleted within 30 days of account closure or upon written request
• Legacy Wishes™ data: Retained indefinitely while the associated policy is active, or until your written request for deletion

To request deletion of your data outside of required retention periods, contact us at privacy@legacyguard.insure.

9. Your Rights & Choices

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Opt-Out: Opt out of marketing communications at any time via unsubscribe links or by contacting us directly
• Right to Data Portability: Request your data in a portable, machine-readable format where technically feasible
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@legacyguard.insure or write to us at the address below. We will respond within 30 days of receiving a verifiable request.

10. Children's Privacy

Our websites and platforms are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately at privacy@legacyguard.insure.

11. Third-Party Links

Our websites may contain links to third-party websites, including carrier websites, the SureLC contracting portal, lead vendor platforms, and other insurance resources. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party websites you visit through links on our platforms.

12. SMS & Text Messaging

Legacy Guard and its agents may use two-way SMS messaging to communicate with clients and prospects through our iAgentIQ CRM platform, operating via the phone number (601) 706-3907 and agent-assigned numbers.

Consent

By providing your mobile phone number on any of our forms or to a Legacy Guard agent, you consent to receive text messages related to insurance quotes, appointment reminders, policy follow-ups, and related communications.

Message Frequency & Costs

Message frequency varies based on your interactions with us. Standard message and data rates may apply depending on your carrier plan.

Opt-Out

You may opt out of SMS communications at any time by replying STOP to any text message you receive from us. You may also opt out by contacting us directly. After opting out, you will receive a single confirmation message.

Help

For help, reply HELP to any text message or contact us at privacy@legacyguard.insure.

13. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information: identifiers, personal information listed in Cal. Civ. Code §1798.80(e), commercial information, internet activity information, geolocation data, and inferences drawn from the above.

Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom it is shared.

Right to Delete

You have the right to request deletion of personal information we have collected about you, subject to certain exceptions permitted by law.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

How to Submit a Request

To exercise your California privacy rights, contact us at privacy@legacyguard.insure with "California Privacy Rights Request" in the subject line.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform capabilities. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you by email or by posting a notice on our websites.

Your continued use of our websites or services after the effective date of any updated policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: