Privacy Policy

This Privacy Policy explains how InsureCompare collects, uses, stores, shares, and protects personal data when you visit our website, create an account, compare insurance products, save comparisons, request products, report product errors, use Insurance AI, or purchase paid access.

InsureCompare is operated by ONEPLANNER TECHNOLOGIES (202503272767 [NS0314486-M]), a software company based in Malaysia. We are not an insurer, takaful operator, insurance agent, insurance broker, financial adviser, or financial planner.

We maintain this Privacy Policy and our related privacy request, security, and subprocessor pages as part of our PDPA-aligned self-audit approach. This is not a third-party certification, accreditation, or official endorsement.

1. Personal Data We Collect

Depending on how you use the service, we may collect:

• Account data, including email address, authentication identifiers, email confirmation status, and login method.
• Authentication and anti-abuse data, including login, signup, password reset, confirmation resend, rate-limit signals, IP-derived request signals, and Cloudflare Turnstile verification results.
• Usage and analytics data, including page views, clicked actions, visitor ID, session ID, referrer, device type, browser, operating system, page title, search parameters, and timestamps.
• Marketplace activity, including saved comparison names, selected products, product categories, product requests, report-error submissions, and related metadata.
• Uploaded product-request files, such as brochures, product disclosure sheets, images, or other documents you choose to submit.
• Billing data, including subscription status, payment provider identifiers, payment event payloads, plan keys, billing period dates, checkout signals, and payment reference information.
• Insurance AI data, including your message, selected product or offer identifiers, recent chat context sent with your request, generated responses, model usage metadata, latency, and error logs.
• Support communications, including emails, request details, and any information you provide when contacting us.
• Client and proposal records that you choose to enter, including client display names, proposal notes, insurance needs, existing policy details, follow-up reminders, and AI-generated proposal summaries.

Do not upload or submit client NRIC numbers, medical records, claims documents, private policy schedules, health information, or other sensitive client data unless you have authority to do so and the information is required for the specific request.

2. How We Use Personal Data

We use personal data for the following purposes:

• To provide, operate, secure, and improve InsureCompare.
• To create accounts, authenticate users, and manage sessions.
• To display comparison tools, save comparisons, process product requests, and investigate reported product errors.
• To operate Insurance AI using selected product context and recent chat context provided with the request.
• To process subscriptions, checkout sessions, payment events, cancellations, billing support, and access control.
• To detect abuse, enforce usage limits, prevent fraud, protect accounts, and investigate security events.
• To measure product usage, diagnose errors, maintain service reliability, and improve user experience.
• To respond to support, privacy, billing, security, or legal requests.
• To comply with applicable law and regulatory obligations.

3. Cookies and Analytics

We use cookies and similar browser storage to keep the service working and to understand usage. This includes an InsureCompare visitor ID that may last up to one year and a session ID that normally expires when the browser session ends.

Browser settings may allow you to block or delete cookies. Some account, analytics, anti-abuse, and paid-access features may not work correctly without required cookies.

4. Third-Party Services and Disclosure

We may share personal data with service providers only as needed to operate the service, process payments, provide authentication, prevent abuse, host data, deliver AI responses, or meet legal obligations. These providers may include:

• Supabase for authentication, database, storage, and sessions.
• Google for OAuth authentication and Gemini AI processing.
• Cloudflare for Turnstile anti-abuse checks.
• Curlec or Razorpay for subscription checkout and payment events.
• Render for application hosting and related infrastructure.
• Google for email services.
• Logging, support, and security providers used to operate the service.

More detail is available on our Subprocessors page.

We may also disclose information if required by law, court order, regulator request, fraud investigation, security incident response, business transfer, or to protect the rights and safety of users, InsureCompare, and others.

5. Cross-Border Processing

Our service providers may process and store personal data in Malaysia or other countries. Where personal data is transferred across borders, we take reasonable steps to use service providers with appropriate security and contractual safeguards.

6. Retention

We keep personal data only as long as it is reasonably needed for the purpose it was collected, unless a longer period is required or permitted for billing, legal, audit, tax, security, abuse prevention, dispute, backup, or service-integrity reasons.

• Account, profile, subscription, saved comparison, client, proposal, and saved tool records are generally kept while your account is active.
• Product requests, uploaded product-request documents, report-error submissions, and support records are kept while needed to operate, improve, investigate, or support the service.
• Analytics, AI usage metadata, comparison usage, abuse-prevention, security, and payment event records may be retained for reliability, billing reconciliation, fraud prevention, security monitoring, and legal compliance.
• After account closure or a deletion request, we may delete, anonymize, or retain limited records depending on the data category and any remaining legal, billing, security, dispute, or integrity need.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure. No online service can guarantee absolute security. You are responsible for keeping your account credentials secure and for telling us promptly about suspected unauthorized access.

8. Your Choices and Rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, withdrawal of consent, restriction of certain processing, deletion of data, or objection to direct marketing. Some requests may be limited where we need to keep data for billing, legal, security, fraud prevention, or service integrity reasons.

To make a privacy request, contact us using the details below. We may need to verify your identity or account ownership before acting on a request.

You can also review the request process on our Data Requests page.

9. Children

InsureCompare is intended for business and adult users reviewing insurance information. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page or communicated through the service where appropriate.