Privacy Policy

1. Introduction

X Assure, operated by eDesk Inc. ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our insurance technology platform, including X Assure VA, X Assure Voice, X Assure Books, and X Assure AI services (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and job title when you create an account.
• Insurance Documents: Policy documents, ACORD forms, loss runs, and other insurance-related files you upload for processing.
• Communication Data: Messages, support requests, and correspondence with our team or virtual assistants.
• Payment Information: Billing details processed through our secure payment providers.

2.2 Information Collected Automatically

• Usage Data: How you interact with our Services, features used, and time spent.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: We use cookies and similar technologies to enhance your experience and analyze usage patterns.

3. How We Use Your Information

• Provide, maintain, and improve our Services
• Process and analyze insurance documents using AI technology
• Connect you with trained virtual assistants for insurance operations
• Facilitate voice communication and call handling services
• Generate financial reports and bookkeeping insights
• Send service updates, security alerts, and support messages
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• SOC 2 Compliance: Our infrastructure meets SOC 2 Type II standards
• Regular Audits: Continuous security monitoring and penetration testing
• Secure Infrastructure: Hosted on enterprise-grade cloud platforms with 99.9% uptime

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Trusted third parties who assist in operating our Services (cloud hosting, payment processing, analytics)
• Virtual Assistants: Our trained VA team members who require access to perform assigned tasks
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

6. Data Retention

We retain your information for as long as your account is active or as needed to provide Services. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required for legal compliance, dispute resolution, or enforcement of our agreements.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@xassure.com.

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information (which we do not engage in). We will not discriminate against you for exercising your CCPA rights.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data in compliance with applicable laws.

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: