SUPERAGENT AI, INC. PRIVACY POLICY

Last Updated: August 11, 2026

1. Introduction

SUPERAGENT AI, Inc. (“SUPERAGENT,” “we,” “us,” or “our”) provides an artificial intelligence workforce platform for insurance agencies. This Privacy Policy explains how we collect, use, disclose, and protect personal information, and the rights you have.

Read Section 2 first. SUPERAGENT handles personal information in two very different roles, and which parts of this Policy apply to you depends on which role is in play.

This Policy covers:

• our websites, including getsuperagent.com, lp.getsuperagent.com, and super-agent.app;
• registration for a free trial, an account, or the Starter Plan application;
• our marketing, sales, events, webinars, and support activities;
• our own use of the SUPERAGENT platform to operate our business; and
• the SUPERAGENT platform, to the extent described in Section 2.2.

This Policy does not cover the privacy practices of our customers, or of any third party website, product, or service you reach through us.

2. Our Two Roles

2.1 When we are the controller (our own data)

We act as a controller (a “business” under California law) for personal information we collect for our own purposes. This includes information about website visitors, prospective customers and the contacts in our sales and marketing databases, trial registrants and Starter Plan applicants, account administrators and billing contacts, event registrants, support requesters, job applicants, and our own personnel.

Sections 3 through 12 and Sections 14 through 21 describe how we handle information in this role, and your rights are exercised directly with us.

2.2 When we are the processor (our customers’ data)

When an insurance agency uses the SUPERAGENT platform, that agency decides what information to put into the platform, whose information it is, who it contacts, and why. The agency is the controller (or “business”). SUPERAGENT is the processor (or “service provider”), and we process that information only on the agency’s documented instructions and under our Data Processing Addendum.

This includes the agency’s leads, customers, and policyholders; the contents of calls, text messages, and emails the agency conducts through the platform; recordings, transcripts, and analysis of those conversations; and information about the agency’s own producers and staff.

If you are a consumer, a policyholder, or a prospect who was called, texted, or emailed by an agency that uses SUPERAGENT, the agency is responsible for that contact and for your privacy rights in that information. We will refer your request to the relevant agency, or assist that agency in responding, but we cannot access or delete an agency’s records on your instruction alone. See Section 13.

3. Information We Collect as a Controller

3.1 Information you give us

3.2 Information we collect automatically

Internet protocol address and approximate location derived from it; device and browser type, operating system, screen and language settings; device and cookie identifiers; pages viewed, referring and exit pages, click paths, search terms, session duration and timestamps; feature usage, in-product events and onboarding progress; error and crash reports and diagnostic logs; and email engagement such as opens and clicks where you have not blocked it.

We collect this through cookies, pixels, tags, software development kits, server logs, and analytics tools. See Section 9.

3.3 Information we obtain from others

Notice to prospective customers. If you are receiving marketing from us and did not give us your details directly, we obtained them from one of the sources above because you appear to work in a role we serve. You can opt out at any time using the unsubscribe link in any message or by writing to privacy@getsuperagent.com, and you can exercise the rights in Section 12.

4. Sensitive Information

We do not seek to collect sensitive personal information as a controller, and we ask that you do not send it to us. The limited exceptions are account credentials and authentication information, which some laws treat as sensitive, and government identifiers such as an EIN that a business provides for billing, tax, or carrier registration purposes.

We do not sell sensitive personal information, and we do not share it for cross-context behavioral advertising. We use it only for the purposes permitted by applicable law without an additional consent, such as providing the service you requested, security, and fraud prevention.

Where a customer causes sensitive information to enter the platform, that is governed by Section 2.2, our Data Processing Addendum, and the customer’s own privacy notice. Our Terms of Service prohibit customers from submitting certain categories, including protected health information without a business associate agreement, biometric identifiers, and information about individuals under eighteen (18).

5. How We Use Personal Information

We use personal information to:

• Provide the Services: create and administer accounts, authenticate users, provision telephone numbers and sending infrastructure, deliver features, and generate output at your direction.
• Onboard you: guide self-onboarding, provision resources, and progress you through setup.
• Review applications: assess Starter Plan applications against the published eligibility criteria and communicate the decision.
• Bill and collect: process payments, manage subscriptions and renewals, meter SUPERcredits, issue invoices and receipts, and collect past due amounts.
• Support you: respond to requests, diagnose problems, and provide training and professional services.
• Send service communications: transactional and legally required notices, including trial conversion and renewal notices, security alerts, and changes to our terms. You cannot opt out of these while you have an account.
• Market and sell: send marketing communications, run events and webinars, measure campaigns, personalize content, and identify and reach prospective customers, subject to Section 12 and applicable law.
• Secure and protect: detect, investigate, and prevent fraud, abuse, spam, security incidents, and violations of our terms, and enforce our agreements.
• Improve and develop: analyze usage to maintain, debug, and improve the Services, and to develop new features, using aggregated and de-identified data wherever practicable.
• Comply and defend: meet legal, tax, accounting, carrier, and regulatory obligations, respond to lawful requests, and establish, exercise, or defend legal claims.
• Corporate transactions: evaluate and complete a merger, acquisition, financing, or sale of assets.

We do not use personal information for automated decision-making that produces a legal or similarly significant effect about an individual. Starter Plan applications are reviewed by a human being.

6. Artificial Intelligence and Automated Processing

6.1 What the platform does. The SUPERAGENT platform uses artificial intelligence to transcribe, translate, summarize, categorize, score, and analyze conversations, to draft messages and campaigns, and to conduct simulated practice conversations. These operations run on personal information that our customers place in the platform, under Section 2.2.

6.2 We do not train foundation models on customer content. We do not use customer content to train, fine-tune, or improve any general purpose or foundation artificial intelligence model, and we contractually require our artificial intelligence model providers not to use content submitted through the platform to train their general purpose models. We do apply a customer’s own corrections and settings to that customer’s own results, and we use aggregated and de-identified usage data to improve the Services.

6.3 Model providers. The platform is built in part on artificial intelligence models licensed from third-party providers, who process content as our subprocessors under contractual confidentiality, security, and use restrictions. Our current subprocessor list is available as described in Section 8.4.

6.4 Scores are not decisions. Sentiment values, quality scores, competency ratings, and categories are directional indicators generated by software. Our Terms of Service prohibit customers from using them as the sole basis for any hiring, promotion, discipline, compensation, or termination decision, and from using platform output as the sole basis for any decision producing a legal or similarly significant effect on an individual. Where a customer uses output in such a decision, the customer is the deployer of that automated decision-making technology and is responsible for the notices, explanations, and human review that law requires.

6.5 Artificial intelligence identification. The platform is configured to disclose at the start of every artificial intelligence voice interaction that the person is interacting with artificial intelligence. Our Terms of Service prohibit customers from disabling or circumventing that disclosure.

6.6 Your rights. Where a state law gives you the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, or to receive information about automated decision-making technology, you may exercise it as described in Section 12, and we will assist the relevant customer where the request concerns customer data.

7. Call Recording, Transcription, and Voice

7.1 On the platform. Our customers use the platform to record, transcribe, and analyze telephone conversations. The agency, not SUPERAGENT, decides which calls are recorded and is responsible for obtaining every consent and giving every notice that law requires, including in the twelve or more states that require the consent of all parties to a call. The platform provides automated recording announcements, and our Terms of Service require customers to keep them enabled.

7.2 What is stored. Where a call is recorded through the platform, we store the audio, the transcript, structured data extracted from the conversation, and the analysis produced from it, in the customer’s account, for the retention period the customer configures, subject to Section 11.

7.3 No voiceprints. The platform is not designed to create voiceprints or other biometric identifiers, and our Terms of Service prohibit customers from attempting to use it that way.

7.4 Our own calls. We record some of our own sales and support calls for training and quality purposes. We give notice at the start of those calls, and you may ask us not to record.

7.5 Your request about a recorded call. If an agency recorded a call with you and you want a copy, a correction, or deletion, contact that agency. If you do not know which agency it was, write to privacy@getsuperagent.com with the date, the telephone number involved, and any name given, and we will make reasonable efforts to identify the customer and route your request. See Section 13.

8. How We Disclose Personal Information

8.1 We do not sell personal information for money. We have not sold personal information for monetary consideration in the preceding twelve (12) months, and we do not intend to.

8.2 Advertising and analytics disclosures, and what that means under state law. We use advertising and analytics technologies on our websites, including the Meta pixel and conversions interface, the LinkedIn insight tag, Google Ads conversion tracking, Google Analytics 4, and Google Tag Manager. Through these, identifiers and online activity may be disclosed to advertising partners in ways that some state privacy laws define as a “sale” or as “sharing” for cross-context behavioral advertising, even though no money changes hands. You can opt out. See Section 12.5 and Section 9.

8.3 Categories of recipients.

8.4 Subprocessors. A current list of the subprocessors that process customer content, with their function and location, is available at getsuperagent.com/subprocessors or on request to privacy@getsuperagent.com. We give notice of new subprocessors as required by our Data Processing Addendum.

8.5 Contractual protection. Every service provider and processor is bound by a written contract that limits their use of personal information to the purposes we specify, prohibits sale, requires confidentiality and appropriate security, and requires deletion or return on termination.

8.6 Text messaging consent is never shared. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

9. Cookies, Analytics, and Your Choices

9.1 What we use. Strictly necessary cookies for authentication, security, and load balancing; functional cookies for preferences; analytics cookies to understand usage; and advertising cookies and pixels for marketing measurement and targeted advertising.

9.2 Managing cookies. You can manage non-essential cookies through our cookie banner and preference control, available on every page of our websites. You can also block or delete cookies in your browser, though some features may not work.

9.3 Global Privacy Control. We honor the Global Privacy Control and other recognized universal opt-out mechanisms as a valid request to opt out of the sale and sharing of personal information and of targeted advertising. We honor these signals for all visitors, regardless of the state you are in, and we do not condition our recognition of the signal on your location.

9.4 Do Not Track. Browser Do Not Track headers are not standardized. We respond to the Global Privacy Control instead.

9.5 Analytics providers. We currently use [Google Analytics 4] and [FullStory]. You can opt out of Google Analytics using Google’s browser add-on.

9.6 Email tracking. Our marketing emails may contain pixels that tell us whether the message was opened and which links were clicked. Blocking images in your email client generally prevents this.

10. Marketing Communications and Text Messages

10.1 Email. You can unsubscribe from marketing email at any time using the link in any message, through our preference center, or by writing to privacy@getsuperagent.com. We will act within ten (10) business days. Service and legal notices continue while you have an account.

10.2 Text messages from SUPERAGENT. If you opt in to receive text messages from us, for example by submitting your mobile number on a form, during account setup, or by texting us, we collect your mobile number and a record of your consent, including the date, the source, and the language you were shown.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out and HELP for assistance, or contact us at privacy@getsuperagent.com. We honor opt-out requests made by any reasonable means, in any channel. Opting out of text messages does not affect your other interactions with us.

Your mobile information will not be sold or shared with third parties or affiliates for promotional or marketing purposes. We will not share your opt-in to a text message campaign with any third party for purposes unrelated to providing you the services of that campaign. We do share your mobile number and consent status with the vendors that help us deliver messages, such as our messaging platform and telephone carriers.

10.3 Telephone. If you give us your telephone number, we may call you about your account or your inquiry. Marketing calls are made only with the consent applicable law requires, and you can withdraw consent at any time.

11. Retention

We keep personal information only as long as necessary for the purposes described in this Policy, and then delete or de-identify it. Our current standard periods:

We may retain information longer where a legal hold, an investigation, a dispute, or a legal obligation requires it.

12. Your Privacy Rights

12.1 The rights. Depending on where you live, you may have the right to:

• know and access the categories and specific pieces of personal information we hold about you, the sources, the purposes, and the categories of recipients;
• receive a portable copy in a readily usable format;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale or sharing of personal information and of targeted advertising;
• opt out of profiling in furtherance of decisions producing legal or similarly significant effects;
• limit the use and disclosure of sensitive personal information;
• withdraw consent where processing is based on consent;
• not be discriminated against or retaliated against for exercising a right; and
• appeal a decision on your request.
  

12.2 How to exercise. Submit a request at [getsuperagent.com/privacy-request], by email to privacy@getsuperagent.com, or by mail to the address in Section 21. Account holders can also access, correct, export, and delete much of their information directly in their account settings.

12.3 Verification. We verify your identity before acting, using information we already hold, and we may ask for additional information for a request seeking specific pieces of personal information. We do not use verification information for any other purpose.

12.4 Authorized agents. An authorized agent may submit a request with written permission signed by you, and we may ask you to confirm the authorization directly.

12.5 Opting out of sale, sharing, and targeted advertising. Use the “Do Not Sell or Share My Personal Information” link in our website footer, set the Global Privacy Control in your browser, or write to privacy@getsuperagent.com. See Section 9.3.

12.6 Timing. We respond within forty-five (45) days, and may extend once by a further forty-five (45) days with notice to you. Opt-out requests are honored within fifteen (15) business days, and immediately where a universal opt-out signal is received.

12.7 Appeals. If we deny your request, you may appeal by replying to our decision or writing to privacy@getsuperagent.com with the subject line “Privacy Appeal.” We will respond to an appeal in writing within forty-five (45) days, explaining the reasons for our decision. If we deny the appeal, you may complain to your state attorney general, and we will provide the contact information for doing so. California residents may also contact the California Privacy Protection Agency.

12.8 Data minimization commitment. We limit our collection of personal information to what is reasonably necessary and proportionate to provide or maintain the products and services you request, and to the compatible purposes described in this Policy, and we do not process it for unrelated purposes without your consent.

12.9 California-specific disclosures. In the preceding twelve (12) months, we collected the categories of personal information listed in Section 3, from the sources in Section 3, for the purposes in Section 5, and disclosed them to the recipient categories in Section 8. We disclosed identifiers and internet activity information for business purposes, and we shared identifiers and internet activity information for cross-context behavioral advertising as described in Section 8.2. California’s privacy law does not exempt business-to-business or employment-related personal information, so these rights apply to our business contacts, our personnel, and our job applicants as well.

12.10 Nevada. Nevada residents may direct us not to sell certain personal information by writing to privacy@getsuperagent.com.

13. If You Were Contacted by an Agency That Uses SUPERAGENT

If you received a call, text, or email from an insurance agency that uses our platform:

The agency is responsible. The agency decided to contact you, chose the content, and is responsible for having the consent that law requires. Your privacy rights in that data are exercised with the agency.

To stop contact immediately, reply STOP to a text, use the unsubscribe link in an email, or tell the caller you do not want to be contacted. The platform honors opt-outs automatically across channels and removes you from the agency’s campaign. State clearly that you are revoking consent, and it will be honored across all channels for that agency.

If you cannot identify the agency, write to privacy@getsuperagent.com with the date and time, the telephone number that contacted you, and any name or agency mentioned. We will make reasonable efforts to identify the customer, route your request, and add the number to a platform-level suppression list.

To complain about conduct, contact us at privacy@getsuperagent.com or security@getsuperagent.com. We investigate complaints and may suspend a customer’s campaigns or account.

14. International Transfers

We operate in the United States and our infrastructure is located in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses, the United Kingdom Addendum where applicable, and supplementary technical and organizational measures. A copy of the relevant transfer mechanism is available on request.

15. Security

We maintain a written information security program with administrative, physical, and technical safeguards appropriate to the nature of the information and the risk, including encryption in transit and at rest, role-based access control and least privilege, multi-factor authentication, logging and monitoring, vulnerability management and penetration testing, secure development practices, subprocessor diligence, personnel background screening where permitted and security training, and a documented incident response plan.

No system is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law and without undue delay. Report a suspected vulnerability or incident to security@getsuperagent.com.

16. Children

The Services are for business use by adults. We do not knowingly collect personal information from anyone under eighteen (18) years of age. Our Terms of Service prohibit customers from submitting information about individuals under eighteen (18) to the platform. If we learn we have collected such information, we will delete it. Contact privacy@getsuperagent.com if you believe we have.

17. Third Party Sites and Integrations

Our websites and the platform link to and connect with third-party products at your direction. Those products are governed by their own privacy policies, and we are not responsible for their practices. Review them before connecting.

18. Legal Bases (for individuals in the EEA, the UK, and Switzerland)

Where the General Data Protection Regulation or the United Kingdom GDPR applies, we rely on: performance of a contract, to provide the Services and manage accounts and billing; legitimate interests, to secure and improve the Services, prevent fraud, conduct business-to-business marketing, and establish or defend legal claims, balanced against your rights; consent, where required, for example for non-essential cookies and certain marketing, which you may withdraw at any time; and legal obligation, for tax, accounting, and regulatory duties.

You have the right to lodge a complaint with your supervisory authority.

19. Changes to This Policy

We may update this Policy. When we make material changes, we will update the effective date, post the revised Policy, and give notice by email or in the Services at least thirty (30) days before the change takes effect, except where a change must take effect sooner to comply with law or to address a security risk. We review this Policy at least annually. Prior versions are available on request.

20. Accessibility

If you need this Policy in an alternative format, contact privacy@getsuperagent.com and we will provide one.

21. Contact Us

SUPERAGENT AI, Inc. — 2 Embarcadero Center, San Francisco, CA 94111, United States

Privacy and rights requests: privacy@getsuperagent.com

Security and abuse: security@getsuperagent.com

Legal notices: legal@getsuperagent.com

General: hi@getsuperagent.com

We aim to respond to privacy inquiries within ten (10) business days and to formal rights requests within the periods in Section 12.6.