Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit www.harperinsure.com (the "Site").

Harper Group Corp. ("Harper," "we," "us," or "our") is an AI-native commercial insurance brokerage. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with:

• Our website at harperinsure.com and any related sites that link to this Privacy Policy (the "Site"), and
• Our commercial insurance brokerage and related services (the "Services").

Harper operates in the United States and currently serves U.S.-based commercial businesses. All production systems and data are hosted in U.S. data centers.

By using the Site or Services, you agree to the practices described in this Privacy Policy.

1. Scope and Definitions

• "Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to an individual or household, or to an identifiable business contact (e.g., name, email, phone, driver information).
• "Business Information" means information about a business entity (e.g., business name, EIN, locations, revenue, payroll, operations).
• "Services" means our AI-enabled commercial insurance brokerage services, including quoting, placement, servicing, communications, and related support.

When using the term "Personal Information," the policy refers to "Personal Information and Business Information that is associated with an identifiable individual" (for example, a business owner, employee, driver, or other contact).

2. Information We Collect

Harper collects information directly from users, from website and service usage, and from third parties such as insurance carriers and service providers.

Automatically Collected Information

When visiting the Site, Harper automatically collects certain information about devices and interactions:

• Browser type and version
• IP address and general location (e.g., time zone)
• Operating system and device type
• Referring and exit pages
• Individual web pages viewed, links clicked, and time spent
• Date and time of visits

This automatically collected information is called "Device Information." Harper collects this using:

• Cookies – small data files placed on devices that may include anonymous unique identifiers.
• Log files – records of actions on the Site (e.g., IP address, browser type, ISP, referring/exiting pages, timestamps).
• Web beacons, tags, and pixels – electronic files used to record information about browsing behavior.

Information Collected from User Interactions

When contacting Harper, requesting quotes, or otherwise interacting, the company may collect personally identifiable information including:

• Name
• Business name
• Phone number
• Email address
• Address

Insurance-Related Information

In providing commercial insurance brokerage Services, Harper collects information about businesses and insurance needs:

• Business name, DBA, and entity type
• Employer Identification Number (EIN/FEIN)
• Business locations and property details

Communications Information

Harper may collect and retain information from communications:

• Emails sent to or from Harper
• Text messages (SMS) sent to or from Harper phone numbers
• Phone calls, which may be recorded with explicit consent at the start of the call

This information may contain Personal Information and Insurance Application Data, used to provide Services, maintain records, train internal systems, and improve quality.

Documents Provided

Users or businesses may provide documents such as:

• Loss runs and claims reports
• Financial statements and tax-related documents (where required by carriers)
• Contracts, leases, or other risk-relevant agreements
• Photos and inspection reports

These may be provided by users, prior brokers, or insurance carriers/wholesalers.

Information NOT Intentionally Collected

Harper does not intentionally collect biometric data, medical or health data (the company does not currently offer health or life insurance products), or Social Security Numbers (SSN).

3. Personal Information Use

Harper uses Personal Information for:

1. Providing and improving Services
2. Communicating with users
3. Operating and improving the Site and internal systems
4. Compliance, legal, and security purposes

Harper does not use AI or any automated system to fully and finally determine eligibility for insurance or to bind coverage without human involvement and review by licensed professionals and carriers.

4. Communications

By sending a message or providing a mobile phone number to Harper, users consent to receive text messages related to:

• Quotes and applications
• Policy information and servicing
• Requests for information or documents
• Renewal and follow-up reminders

Users may opt out at any time by replying STOP to any text message received. After replying STOP, Harper sends a confirmation message and will no longer send text messages unless the user re-enables messaging or contacts the company again in a way that requires a response.

Message and data rates may apply depending on mobile plans.

5. Analytics

Harper uses cookies and similar technologies to:

• Remember preferences and improve user experience
• Analyze Site traffic and usage
• Measure and improve marketing efforts

The company may use Google Analytics or similar tools to understand how visitors use the Site.

Third-Party Analytics

Harper may use Device Information and limited identifiers to provide or measure interest-based advertising through third parties. Users can opt out of certain targeted advertising via industry opt-out tools.

Data Sale Policy

Harper does not sell Personal Information. All information is collected for internal usage only.

6. Do Not Track

Some browsers send "Do Not Track" (DNT) signals. Harper currently does not respond to DNT signals and does not change data collection practices when receiving such signals. Users can control cookies and tracking technologies through browser settings and industry opt-outs.

7. How We Share Personal Information

Harper shares Personal Information only as reasonably necessary to provide Services, fulfill legal obligations, and operate its business, including obtaining quotes and providing financing options.

AI Vendor Partnerships

For AI vendors, Harper uses enterprise channels that state they do not use customer data to train their foundation models.

Legal Disclosures

Harper may disclose information if it believes in good faith that doing so is necessary to:

• Comply with applicable laws, regulations, legal processes, or governmental requests
• Respond to subpoenas, court orders, or regulatory inquiries
• Protect the rights, property, or safety of Harper, its customers, or others

Business Transfers

If Harper is involved in a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be transferred as part of that transaction, subject to contractual confidentiality protections and applicable law.

Non-Sale Policy

Harper does not sell or rent Personal Information or customer lists to data brokers or ad networks.

8. Artificial Intelligence

Harper is an AI-native brokerage, but insurance decisions are not fully automated.

AI System Uses

Harper uses AI systems to:

• Classify and extract information from documents (quotes, policies, endorsements, applications)
• Draft emails and messages for internal review before sending
• Assist with organizing and prioritizing tasks, follow-ups, and workflows
• Provide internal guidance to staff during calls and servicing

Final decisions are always reviewed and approved by licensed human insurance professionals and carriers, not made solely by AI.

Model Training

Harper's proprietary and fine-tuned models are trained exclusively on data generated from Harper's operations, including:

• Customer communications (emails, texts, call transcripts)
• Insurance applications and internal data structures
• Policy documents, quotes, endorsements, and appetite guides
• Internally labeled operational data created by Harper staff

Quality Controls

Controls include:

• Evaluation against "golden" labeled datasets
• LLM-as-a-judge quality assessments
• Monitoring for systematic errors and bias
• Human review and override for high-risk uses

AI Restrictions

Harper does not use AI for health or life insurance risk determinations or public-sector eligibility determinations.

9. Data Retention

Harper retains Personal Information:

• For as long as necessary to provide Services and maintain relationships with users, and
• As required under state insurance regulations and record-keeping requirements, which typically require retention for 5–7 years (and sometimes longer for certain records).

The company may retain anonymized or aggregated information that does not identify users. Where legally and operationally feasible, Harper will delete or de-identify Personal Information upon request, subject to regulatory obligations.

10. Data Security

Harper maintains a comprehensive information security program designed to protect Personal Information against unauthorized access, use, alteration, and disclosure. However, no system is completely secure, and the company cannot guarantee absolute security.

11. International Data Transfers

Harper currently serves U.S. commercial businesses and operates infrastructure in the United States. If users access the Site from outside the U.S., their information will be transferred to and processed in the United States, where data protection laws may differ from those in other jurisdictions.

12. Your Privacy Rights

Your rights depend on your state of residence and applicable insurance and privacy laws. Subject to legal and regulatory requirements, users may have the right to:

• Request access to Personal Information Harper maintains about them
• Request that the company correct inaccurate information
• Request deletion of certain information, subject to regulatory record-keeping obligations
• Opt out of certain marketing communications

Because Harper is a regulated insurance brokerage, the company may be required to retain certain records even if deletion is requested. Harper will explain any denial or limitation of requests where required by law.

Users may submit privacy requests using the contact information in Section 15.

EU/UK Residents

Harper primarily serves U.S. customers. If users are EU/UK residents using the Site or contacting the company, they may have rights under the GDPR/UK GDPR, including rights of access, correction, deletion, restriction, and portability. All data is processed in the United States.

13. Children's Privacy

The Site and Services are intended for business customers and adults. Harper does not knowingly collect Personal Information from children under 13. If the company learns that it has collected such information, it will take steps to delete it as required by law. If users believe a child has provided Personal Information, they should contact Harper.

14. Changes to This Privacy Policy

Harper may update this Privacy Policy from time to time to reflect changes to its practices, technologies, or legal requirements. When changes are made, the company will update the "Effective Date" at the top of this page. If changes are material, Harper may provide additional notice (such as by email or a notice on the Site).

15. Contact Us

If users have questions about this Privacy Policy, Harper's privacy practices, or would like to submit a request or complaint, they may contact the company at: