1. Who we are and what this policy covers

This Privacy Policy explains how Alcove Insurance Partners, Inc. and the affiliated licensed insurance agencies (collectively, “Alcove,” “Partner Agency,” “Partner Agencies,” “we,” “us,” or “our”) collect, use, share, and protect information about you when you visit www.joinalcove.ai and any related websites, pages, applications, and online or telephonic services that link to this policy (the “Services”), and when you request quotes for or purchase and service personal-lines property and casualty insurance (such as home and auto) through a Partner Agency. By using the Services, you acknowledge that you have read and understand the practices contained herein. By using any of our Services or voluntarily providing your personally identifiable information to us, you acknowledge that we collect and use your information as set forth in this Privacy Policy.

Alcove is a Delaware corporation headquartered at 55 Madison Avenue, Suite 400, Morristown, NJ 07960. Alcove and certain referral-source partners (such as title agencies, mortgage lenders, property managers, and similar businesses) (each, an “Industry Partner”) have ownership interests in certain Partner Agencies, which are the licensed insurance agencies through which insurance is offered and serviced. The Partner Agencies are insurance agencies, not insurance companies; insurance is underwritten and issued by third-party insurance carriers.

Alcove and each Partner Agency are separate legal entities. Alcove provides administrative, technology, operational, staffing-support, compliance-support, and back-office services to the Partner Agencies as an independent service provider, and does not otherwise control the day-to-day insurance operations of any Partner Agency. Each Partner Agency is separately licensed and remains responsible, through its Designated Responsible Licensed Producer (“DRLP”), for its own insurance activities, data-handling decisions, and regulatory compliance. The Industry Partners are independent businesses that Alcove does not control, and each maintains its own privacy practices and disclosures.

To the fullest extent permitted by applicable law, and except for obligations and liabilities that cannot be limited or disclaimed under the Gramm-Leach-Bliley Act (“GLBA”), applicable state insurance-privacy law, or other applicable law, Alcove is not responsible or liable for the acts, omissions, or independent privacy or data-security practices of any Partner Agency, Industry Partner, insurance carrier, wholesaler, payment processor, or other third party that Alcove does not control. Nothing in this policy creates any partnership, joint venture, agency, or fiduciary relationship beyond the relationships expressly described here, and nothing in this policy limits any right or remedy you may have that cannot be waived under applicable law.

This Privacy Policy does not apply to information about you collected by any third parties. Information collected or received by such third parties is subject to their own privacy policies, statements, and practices and under no circumstances is Alcove responsible or liable for any third party’s compliance therewith.

2. A note on financial privacy (GLBA), Personally Identifiable Information (PII) and Protected Health Information (PHI)

Because we help you obtain insurance, much of the information we collect is “nonpublic personal information” (“NPI”) protected under the federal GLBA and its implementing privacy regulation (Regulation P), together with applicable state insurance-privacy laws. Our handling of NPI is governed by GLBA, by this policy, and by any separate GLBA/Regulation P privacy notice we provide to you. Many state comprehensive consumer-privacy laws contain exemptions for information and entities already regulated under GLBA; where those exemptions apply, GLBA and state insurance-privacy rules — not the state comprehensive privacy law — govern that information. Where a state comprehensive privacy law does apply to information we hold (for example, certain website-browsing data that is not GLBA-covered), we honor the rights described in Section 9.

It is possible that certain PII such as addresses, spouse’s name, etc. might be gathered, and, depending on the nature of the policies produced or applied for, PHI may be obtained. As to all such information, we plan to comply with applicable state and federal law, including but not limited to the Health Insurance Portability and accountability Act of 1996 (HIPAA).

As applicable, Alcove considers any individually identifiable health information secured from your clients that might be disclosed in the underwriting or claims process to be private and confidential. Except as otherwise permitted or required by law, to the extent that Alcove receives any such information, its security and lawful disclosure will be consistent with the terms of HIPAA, and any business associate agreement entered with its Partner Agency, as applicable.

3. Information we collect

We collect a variety of personal information from and about you through the Services, including both directly from you and automatically as a result of your use of and access to the Services.

You have choices about the information we collect. When you are asked to provide information, you may decline; however you may not be able to use that service or feature. In addition, as noted below, it is possible to change your browser setup to block the automatic collection of certain information.

Information you provide to us:

Identifiers and contact details — name, mailing and email address, telephone number, and date of birth.
Insurance and risk information — details about the property, vehicles, drivers, and household members to be insured; prior insurance and claims history; coverage preferences; and similar underwriting information.
Financial and payment information — information needed to bind and pay for coverage, including payment-card or bank details (typically processed by our payment processors and carriers).
Sensitive personal information — where relevant to insurance coverage, we may collect sensitive personal information such as Social Security numbers (for identity verification or credit-based insurance scores where permitted by law), driver’s license numbers, health and medical information (for health-related coverages), and other information that may be considered sensitive under applicable privacy laws.
Communications — information you provide when you contact us, request a quote, chat with us (including AI-assisted chat), or respond to surveys.

Information we receive from Partner Agencies, Industry Partners and other sources:

Industry Partners and other referral sources — contact and basic eligibility information when an Industry Partner refers you or you engage a Partner Agency through a partner relationship, subject to the Industry Partner’s own disclosures and your consent.
Insurance carriers, wholesalers, and consumer-reporting/data sources — information used to prepare quotes and underwrite policies, which may include motor-vehicle records, loss-history (e.g., CLUE) reports, and credit-based insurance scores where permitted by law.
Service providers and affiliates — information from vendors that support our technology platform, communications, analytics, and servicing.

Information we collect automatically:

We use commonly-used automated information gathering tools on the Services. When you browse our website, we collect information about your computer or mobile device and the network you use to access the Services, as well as information about your use of the Services. This includes software and hardware attributes of the device, unique device ID information, regional and language settings, performance data, network provider, and IP address (a number assigned to your computer when you use the Internet). In addition, information may also be collected passively in the form of log files that record website activity. For example, log file entries are generated every time a user visits a particular page or clicks an image on our website, and collects information on how many "hits" a particular web page is getting (a.k.a. "click-through data"), the dates and times that you use the Services, the pages you visit, the amount of time spent on specific pages, and other similar usage information, and general data (including the name of the web page from which you entered our website). See also the section below captioned “Cookies and tracking technologies” (see Section 7).

4. How we use information

We collect, retain, and use personal information with your consent; as required or permitted by law; for legitimate business purposes; to perform functions or activities on behalf of, or provide services to, Partner Agencies; and/or as necessary to complete any transaction or provide you with information or services you have requested or authorized. These uses include, without limitation: to prepare quotes and applications; facilitate underwriting, binding, and issuance by carriers; service your policy (endorsements, renewals, mortgagee-clause changes, billing, and claims support); communicate with you; operate, secure, and improve the Services; perform analytics; detect and prevent fraud; and comply with legal, regulatory, and licensing obligations. We do not use your NPI for purposes incompatible with the relationship for which you provided it.

5. Artificial intelligence and automated processing

We use artificial intelligence and automated tools to support our Services — for example, to assist with marketing, intake, quoting support, document handling, customer service (including chat), and operational analytics. We design these tools to keep a qualified human involved in decisions that materially affect your coverage, and we do not use them to unfairly discriminate.

Our use of AI in insurance activities is governed by a growing body of federal and state insurance regulation — including the NAIC Model Bulletin on the Use of Artificial Intelligence Systems by Insurers and state counterparts (such as Colorado’s insurance-AI statute and regulations, New York’s Circular Letter on AI and external consumer data, the Texas Responsible Artificial Intelligence Governance Act, and state requirements addressing AI-related notices and the identification of automated chat). Consistent with these frameworks:

Where we use an automated chat or conversational tool, we will identify it as such where required so you know when you are not communicating with a human.
Where required, we will tell you if AI or automated decision systems are used in a way that affects you, and we maintain governance, testing, and oversight intended to prevent unfair discrimination.
You may request human review of, and may contest, decisions to the extent required by applicable law; contact us using Section 17.

6. How and why we share information

We do not sell your NPI. We share information only as needed to provide and service insurance and to run our business, including with:

The Partner Agency and Industry Partner involved in your relationship, to the extent permitted under GLBA § 502 (including the joint-marketing and operational exceptions) and applicable state law, subject to confidentiality and reuse restrictions. Each Partner Agency and Industry Partner is an independent entity responsible for its own subsequent use of information under its own privacy practices, and Alcove does not control those practices.
Insurance carriers, wholesalers, managing general agents, and surplus-lines brokers, to quote, bind, and service coverage.
Service providers and vendors — including our technology-platform provider, communications and analytics vendors, and payment processors — bound by confidentiality and data-security obligations and permitted to use information only to perform services for us.
Regulators, law-enforcement, and other parties when required by law, to comply with legal process, or to protect rights, safety, and against fraud.
A successor in connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

Where we share NPI with nonaffiliated third parties outside a GLBA exception, we provide any opt-out required by GLBA/Regulation P and applicable state insurance-privacy law before doing so.

7. Cookies and tracking technologies

In order to personalize and enhance your experience on the Services, we and our service providers use cookies, pixels, SDKs, and similar technologies to operate the Services, remember your preferences, measure performance, and support analytics and marketing. Cookies are small strings of text that are sent by the Services to your browser and then stored by your browser on your computer’s hard drive or other device. We also use cookies to help diagnose problems with our servers, to administer the Services, and to gather information about the how the Services are used (including information gathered anonymously from users’ clicks, taps, mouse movements, keystrokes and scrolling behavior), as well as to gather broad demographic information. Where a code in the cookie file enables the Services to label you as a particular user, including identifying you by name or other personal information, such cookie files are encrypted in order to protect your information. You can control cookies through your browser settings, and we honor recognized opt-out preference signals (such as the Global Privacy Control) where required by law. Some features may not function properly without certain cookies.

Do Not Track. Some web browsers may transmit “Do Not Track” signals. We currently do not take action in response to these signals, but we do honor recognized opt-out preference signals where required by applicable law.

8. Marketing, calls, and texts — your communication choices (TCPA)

We contact you to service your relationship and, with appropriate consent, to market products and services. Our outreach is governed by the federal Telephone Consumer Protection Act (“TCPA”), the FTC Telemarketing Sales Rule, CAN-SPAM, and state telemarketing and “mini-TCPA” laws. Accordingly:

Calls and texts. By providing your telephone number and agreeing where prompted, you provide prior express written consent to receive calls and text messages from or on behalf of Alcove and the applicable Partner Agency, including by automatic telephone dialing systems and prerecorded or artificial voice, at the number provided. Consent is not a condition of purchasing any product or service.
Message terms. Message and data rates may apply; message frequency varies. Reply HELP for help and STOP to opt out of text messages at any time. We honor do-not-call requests and revocations of consent as required by law.
Email. You can unsubscribe from marketing emails using the link in the email; we will honor opt-outs as required by CAN-SPAM. We may still send non-marketing, transactional messages about your policy or account.

9. Your privacy rights

GLBA opt-out. For NPI, you have the choices described in our GLBA/Regulation P privacy notice, including any right to opt out of certain sharing with nonaffiliated third parties.

Right to access and correct. You have the right to request access to the personal information we maintain about you and to request correction of any inaccurate information. To exercise these rights, please contact us using the information in Section 17. We will respond to your request within the timeframes required by applicable law.

You may opt out of receiving materials or other communications from us by contacting us as provided at the end of this Privacy Policy.

State privacy rights. Depending on your state of residence and subject to the GLBA and other exemptions described in Section 2, you may have rights to: confirm whether we process your personal data and access it; correct inaccuracies; delete; obtain a portable copy; and opt out of “sale,” “targeted advertising,” and certain “profiling.” You also have the right to appeal a denial of a request and to be free from discrimination for exercising your rights. As of 2026, comprehensive consumer-privacy laws are in effect in states including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Indiana, Kentucky, Rhode Island, Minnesota, Maryland, and Tennessee, among others; we honor the rights available to you under your state’s law.

California residents. Subject to the GLBA exemption, the California Consumer Privacy Act (as amended by the CPRA) gives you rights to know, access, correct, and delete personal information; to opt out of the “sale” or “sharing” of personal information and the use of sensitive personal information beyond permitted purposes; and to non-retaliation. We do not sell or share (for cross-context behavioral advertising) the personal information of consumers we know to be under 16. California’s “Shine the Light” law may also apply.

Nevada residents. Nevada law permits Nevada residents to opt out of the sale of their covered information. To submit such a request, please contact us using the information in Section 17. We do not currently sell covered information as defined under Nevada law.

Vermont residents. Under Vermont law, we will not share information we collect about Vermont residents with companies outside of our corporate family unless the law allows or you provide authorization. We will not share information about your creditworthiness with our affiliates except with your authorization or consent, and we will not share information about your creditworthiness with nonaffiliated third parties except as permitted by law.

How to exercise your rights. Submit a request by emailing support@joinalcove.ai. We will verify your identity before responding and will respond within the time required by applicable law. You may use an authorized agent where permitted; we may require proof of authorization.

10. Data retention

We retain information for as long as needed to provide the Services, maintain your insurance relationship, and comply with legal, regulatory, recordkeeping, and audit obligations (including insurance and AfBA-disclosure recordkeeping requirements), after which we delete or de-identify it consistent with our retention schedule. These retention periods can vary depending on the type of information collected and the context.

11. How we protect information (GLBA Safeguards)

Because security is important to us, we employ reasonable safeguards designed to promote the security of our systems and protect your personal information from unauthorized destruction, use, modification, or disclosure. Personal information is protected using various physical, administrative and/or technical safeguards in transit and at rest.

We maintain a written information-security program designed to meet the GLBA Safeguards Rule and applicable state requirements, including risk assessment, access controls, multi-factor authentication, encryption of sensitive data in transit and at rest where appropriate, vendor oversight, and incident response and breach-notification procedures. No system is perfectly secure, but we work to protect your information. While we try to ensure the protection of your personal information, we cannot guarantee that our safeguards will be effective or sufficient. In addition, you should be aware that Internet data transmission is not always secure and we cannot warrant that information you transmit utilizing the Services is secure. In addition, it is possible that your email communication may be accessed or viewed by another Internet user while in transit to us.

Breach notification. In the event of a data breach involving your personal information, we will notify you and applicable regulatory authorities as required by applicable federal and state breach notification laws, including state insurance data security laws and regulations. Notifications will be provided within the timeframes required by law and will include information about the nature of the breach and steps you can take to protect yourself.

12. Children’s privacy

The Services are intended for adults (18+) and are not directed to children under 13. In compliance with the Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501-06 and 16 C.F.R. §§ 312.1-312.12, we do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it. By using the Services, you represent that you are 13 years of age or older.

13. Third-party sites and services

The Services may link to third-party sites and tools (including life insurance carriers and Industry Partners) that we do not control. Their privacy practices are governed by their own policies, which we encourage you to review. Alcove is not responsible for the content or the privacy or data-security practices of those third parties.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, where required by law, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

15. Contact us

Alcove Insurance Partners, Inc. — Attn: Privacy Officer

55 Madison Avenue, Suite 400, Morristown, NJ 07960

Email: PRIVACY@JOINALCOVE.AI | Web: www.joinalcove.ai