1Fort raises **$7.5M** to transform business insurance with AI: [Read More](/content/blog/1fort-raises-7-5m-to-transform-business-insurance-with-ai/index.html)

## **1Fort Privacy Notice**

**Last Revised: August 11, 2025**

This Privacy Notice describes how 1Fort Inc. (“we”, “us”, “our”) collects, uses and discloses information about users of our website ( [www.1fort.com](/content/site-root.html)), platform, applications, services, tools and features (collectively, the “Services”) including insurance brokers, clients of insurance brokers, insured businesses, website visitors, and any other individuals who use or interact with the Services. For the purposes of this Privacy Notice, “you” and “your” means you as the user of the Services. Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use or access the Services. We update this Privacy Notice at least every 12 months.

**UPDATING THIS PRIVACY NOTICE**

We may modify this Privacy Notice from time to time, in which case we will update the “Last Revised” date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

**OUR COLLECTION AND USE OF INFORMATION**

When you use or access the Services, we may collect certain categories of information about you from a variety of sources.

California Notice at Collection (CCPA/CPRA). We collect the categories of personal information (PI) below for the purposes and retention periods noted. We disclose PI to service providers and contractors under written contracts that limit use to specified business purposes and require comparable privacy and security protections. We do not sell or share personal information as those terms are defined by California law.

- **Identifiers** (e.g., name, email, phone, IP address): used for account creation, security, support, and communications; disclosed for business purposes; retained for the life of the account plus 3 years.  
- **Customer records** (e.g., billing address, policy identifiers, payment transaction metadata): used for underwriting, billing, customer service, and compliance; disclosed for business purposes; retained for 7 years (tax/audit).  
- **Internet or other electronic activity** (e.g., device and log data, pages viewed, interaction data): used for security, debugging, analytics, and service improvement; disclosed for business purposes; retained for 12 months.  
- **Approximate geolocation** (e.g., city/region inferred from IP): used for fraud prevention, security, and content localization; disclosed for business purposes; retained for 12 months.  
- **Professional/employment data** (e.g., role/title, broker license number if applicable): used for broker/partner management and compliance; disclosed for business purposes; retained for the life of the relationship plus 3 years.  
- **Commercial information** (e.g., quotes, purchases, premiums, program selections): used to provide the Services, analytics, and reporting; disclosed for business purposes; retained for the life of the account plus 3 years.  
- **Inferences** (e.g., security/cyber risk scores or similar): used for product features, analytics, and service improvement; disclosed for business purposes; retained for 24 months.  
- **Sensitive personal information** (e.g., account log‑in and password; payment card details; government ID where required by an insurer or law; any health‑related information you provide): used for authentication, payments, compliance, and fraud prevention; disclosed for business purposes; retained only as necessary for permitted purposes or as required by law.

For PHI, retention and use are governed by our BAA and HIPAA (see HIPAA/PHI Addendum).

We retain personal information for no longer than is reasonably necessary for the purposes disclosed or as required by law. Where specific periods are not listed above, we use criteria such as the nature of the data, the reason it was collected, legal requirements, and the potential need to investigate or defend against claims.

**Information Collected Directly From You**

Some features of the Services may require you to directly provide certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services may include:
- Basic contact details, such as name, address, phone number, email. We use this information to invite you to use the Services, create and maintain your account and provide the Services, and to communicate with you (including to tell you about products or services that may be of interest to you).  
- Account information, such as username, security questions that you select and the answers you provide. We use this information to provide the Services and to maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.  
- Payment information, such as credit or debit card information and billing address. We use this information to process your payment and provide the Services.

We never use user data—whether obtained directly from you or via third-party APIs—to develop, improve, or train generalized artificial-intelligence or machine-learning models.

**Information Collected Automatically**

We may use cookies or other tracking technologies to automatically collect certain information about your interactions with the Services, which we use to tailor your experience, provide you with offers or promotions, run analytics, and better understand user interactions with the Services. Such information may include:  
- Device information, such as device type, operating system, unique device identifier, and internet protocol (IP) address.
- Location information, such as approximate location.
- Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, clickstream data, and ad impressions. Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies.

**Information Collected From Other Sources**  
We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information may include:  
- Analytics data we receive from analytics providers such as HubSpot and Google Analytics.  
- Information we receive from career websites, such as LinkedIn, Monster, or Indeed, which we use to process your application for employment.  
- Information we receive from consumer marketing databases or other data enrichment companies, which we use to better customize advertising and marketing to you.  
- Information we receive when you choose to link any social media platforms to your account.

**OUR DISCLOSURE OF YOUR INFORMATION**

We may disclose your information to any of the following categories of third parties for legitimate purposes subject to this Privacy Notice:

- Our affiliates or others within our corporate group.
- Vendors or other service providers and contractors who help us provide the Services.
- Third parties to whom you request or direct us to disclose information, such as through your use of social media.
- Professional advisors, such as auditors, law firms, or accounting firms.
- Third parties in connection with or anticipation of an asset sale, merger, bankruptcy, or other business transaction.

We may also disclose your information as needed to comply with applicable law or any obligations thereunder.

**SOCIAL FEATURES**  
Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms. Social Features include features that allow you to access our pages on third-party platforms. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service.

**THIRD‑PARTY WEBSITES AND LINKS**  
We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms.

**CHILDREN’S PRIVACY**  
Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database.

**HIPAA / PHI ADDENDUM (WHEN WE ACT AS A BUSINESS ASSOCIATE)**  
When we provide services to a covered entity (e.g., a health plan or health care provider) or another business associate, we may receive Protected Health Information (PHI).

**DATA SECURITY AND RETENTION**  
Data Protection Mechanisms. We protect all customer data—especially sensitive data—using AES-256 encryption at rest and TLS 1.2+ encryption in transit.

**YOUR CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)**  
If you are a California resident, you have the following rights regarding your personal information, subject to certain exceptions:

- Right to Know/Access.
- Right to Delete.
- Right to Correct.
- Right to Opt Out of Sale/Sharing.

**HOW TO CONTACT US**  
Should you have any questions about our privacy practices or this Privacy Notice, please email us at [hello@1fort.com](https://1fort.ai/privacy#) or contact us by mail at 335 Madison Ave, New York, NY 10017 or by phone at (646)-389-0780.
