Casey procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | medium | “ We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Customers and quoted prospects: We typically retain records for five (5) to seven (7) years following the end of the relationship, consistent with applicable insurance regulatory requirements. Prospects and leads: We retain lead information for a period appropriate to our marketing and follow-up activity, generally not exceeding twenty-four (24) months from last meaningful interaction, unless a longer period is required by law. Automatically collected data: We retain analytics and log data for the period necessary for the purposes described in this Privacy Policy. When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it, or, if deletion is not immediately possible (for example, because information has been stored in backup archives), we will securely store and isolate it from further processing until deletion is possible.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We will use and retain collected Personal Information consistent with Section 8 of this Privacy Policy.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our operations and data hosting are primarily located in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on appropriate transfer mechanisms recognized under applicable law, such as standard contractual clauses or other lawful bases for transfer. By using the Services, you acknowledge and consent to the transfer and processing of your information in the United States.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To enhance our ability to provide relevant quotes, evaluate risk, and serve your insurance needs, we may collect information from: Public databases, government regulatory sources, and motor vehicle records providers; Insurance industry data services, including loss-run aggregators, claims databases, and premium/loss data providers; Consumer reporting agencies (for credit reports, background checks, and related information, subject to FCRA requirements); Marketing partners, data enrichment providers, and social media platforms; and Insurance carriers, wholesale brokers, MGAs, and other industry counterparties.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Business transfers. We may share or transfer your information in connection with a merger, acquisition, sale of assets, financing, reorganization, or bankruptcy, subject to customary confidentiality obligations. We do not sell your Personal Information. We do not sell or rent Personal Information, and we do not share Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We may share de-identified or aggregated data that does not identify you.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share Personal Information only as described below and with appropriate safeguards: Service providers and subprocessors. We share information with vendors who help us operate the Services, including hosting, analytics, email and telephony providers, payment processors, and AI model providers. All such providers are bound by written agreements limiting their use of the information to the services they provide to us. Insurance-industry counterparties. When you ask us to pursue an insurance quote or placement on your behalf, we share the information necessary to prepare and submit the request with insurance carriers, wholesale brokers, managing general agents (MGAs), program administrators, premium finance companies, reinsurers, and related insurance-industry service providers. We do not share your information with these parties for quoting purposes until you have indicated you would like us to seek a quote. Affiliates. We may share your information with our affiliates, including our parent company Casey Labs Inc., under terms that require them to honor this Privacy Policy. Consumer reporting agencies and background check providers. We may obtain consumer reports, credit reports, or background checks as permitted by the FCRA and applicable state law, and we may furnish information to such agencies as required or permitted by law. Legal obligations and safety. We may disclose your information where required by law, in response to valid legal process, or where necessary to protect our rights, your safety, or the safety of others. ” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our Services are intended for adults and businesses. We do not knowingly collect, solicit, or market to individuals under 18 years of age. If we learn that we have collected Personal Information from a person under 18, we will take reasonable measures to delete that information promptly. If you believe a minor has provided us with information, please contact us at dpo@caseyinsure.com.” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.