Privacy policy.
Last updated September 17, 2026. This page describes what information Aligned Path Insurance Solutions collects, why, who sees it, how long it is kept, and the choices you have. Questions are welcome at hello@alignedpathinsurance.com.
Who is responsible for your information
Aligned Path Insurance Solutions is the name Caleb Dupae, a licensed insurance producer in Austin, Texas (Texas resident license, NPN 20750662), does business under. Caleb is the person who decides how information collected through this site and the advisor portal is used, and the person to contact about it.
What we collect
Information you give us. Contact and quote forms collect what is needed to evaluate and place coverage: name, contact details, and the coverage information you choose to share. Inquiry forms also offer an optional question about how you found us. When you follow a tool’s inquiry link, the request includes that tool’s name. Its calculator answers and results are not transferred. Insurance applications can include health history, Social Security numbers, and driver's license numbers when the carrier's application requires them.
Information from your advisor. When a financial advisor refers a client, the advisor gives us the client's name, contact details, and the coverage question. On the public quote forms the advisor confirms that they have the client's permission to share it, and we keep that confirmation with the request.
Information from carriers and your existing policies. Carriers and brokerage partners send us underwriting decisions, policy documents, and status updates for the cases we place. If you choose to import an existing policy through the policy import tool, we receive the declarations and coverage details from your current carrier so we can compare them.
Information collected automatically. New collection through Google Analytics and Vercel Web Analytics is disabled. Our hosting and security providers still process connection information needed to deliver and protect the site. Previously collected analytics records remain subject to the providers' retention settings. We do not use a visitor-identification or lead-enrichment service.
Quote-request source. For up to 30 minutes in your browser tab, we keep the first public page you visited, a recognized referral or campaign source, and the tool link used to reach a quote form. If you submit a quote request, this information stays with the request so we can understand which pages help people find us. It does not include health answers, calculator amounts, full referral URLs, or advertising identifiers, and it is not sent to Google or Vercel analytics.
Advisor portal accounts. Advisor portal sign-in is handled by Supabase Auth. We store account details and the case information shared during an engagement. Clients do not have accounts; a client who saves a form to finish later verifies their email with a short-lived code before saving and uses an emailed code to reopen it.
How we use it
To quote and place the coverage you ask about, to keep the referring advisor informed of case progress at the level agreed at referral, to respond when you contact us, and to service policies after placement. We do not sell personal information, and we do not use client information for advertising.
We use software, including AI-assisted analysis running on Google's Gemini service, to read carrier and advisor correspondence about open cases and keep the case record current, so status updates do not depend on someone retyping an email. Validated, high-confidence facts such as the carrier, policy number, and case stage can be applied to the record automatically; anything written for a client or advisor to read is reviewed by Caleb first. This runs under Google's paid API terms, which do not allow Google to use the correspondence to train or improve its models.
Insurance privacy notice
Federal and Texas law give people who apply for or buy insurance specific privacy rights over their nonpublic personal information. This section describes how we handle it.
What we collect and where it comes from. Information you or your advisor provide on quote requests and applications; information about your transactions with us, carriers, and brokerage partners; and, when an application requires it, medical and financial information obtained with your authorization.
What we share. We share nonpublic personal information only as the law permits: with insurance carriers and brokerage partners to obtain quotes and process the applications you have asked us to pursue; with your referring advisor for the cases they refer; with the service providers that run our infrastructure; and with regulators or others when the law requires it. We do not share it with anyone for their own marketing.
Medical information. Health information gathered for an application goes to the carrier that requested it. We obtain any authorization required before disclosing medical information. Your advisor’s involvement does not by itself authorize disclosure of detailed medical information.
Your access. You can ask to see the personal information we have recorded about you, ask for a correction, and ask for an explanation of any adverse underwriting decision we relayed, by emailing hello@alignedpathinsurance.com. This applies whether or not a policy was placed.
How we protect it. Access is limited to the people who need it to place or service your coverage, and the safeguards described below apply to it.
Who we share it with
Insurance carriers and brokerage partners, to obtain quotes and process applications you have asked us to pursue. Your referring advisor, for the cases they refer, at the involvement level agreed at referral. Regulators or others when the law requires it.
Service providers. The companies that run our infrastructure process information on our behalf under their own confidentiality obligations: Supabase (database and file storage), Vercel (hosting), Cloudflare (network and email routing), Resend (transactional email), Google (business email, appointment scheduling, retained analytics, and the Gemini service used for the correspondence analysis described above), Calendly (optional appointment scheduling), and Canopy Connect (the optional policy import). New collection through Google and Vercel analytics is disabled as described above. We update this list when a provider changes.
How we protect it
The site is served over HTTPS and the database provider encrypts everything at rest. On top of that, our own application encrypts Social Security numbers, driver's license numbers, the additional-notes field on applications, and uploaded documents once they pass the upload check and move to long-term storage. Uploaded documents sit in access-controlled storage. Portal accounts support two-factor authentication.
This is encryption in transit and at rest, including encryption performed by our application. Authorized systems and people can decrypt information to process your request; it is not end-to-end encryption. Files first enter a private temporary upload area before validation and application encryption. Please use the secure forms for sensitive documents, and do not put identity numbers or bank details in a general message or notes field.
If a security incident affects your personal information, we will tell you and any regulator entitled to notice within the time applicable law requires, and we will say what happened and what we are doing about it.
How long we keep it
Saved drafts. A quote or application you save to finish later expires 90 days after it was last saved. Once you submit it, the draft is closed and removed by our next daily cleanup; if that close does not go through, the draft still expires on the 90-day date. Drafts never store Social Security numbers, driver's license numbers, or bank details.
Save verification. Email verification codes for saving expire after 10 minutes. A successful verification lets that browser save under the same email for up to an hour. Expired verification records are removed by our daily cleanup.
Quote requests, applications, and case records. We keep these for as long as they are needed to place and service the coverage and to meet carrier, contractual, and legal record-keeping requirements, which vary by product. Texas, for example, requires records of an annuity recommendation to be kept for five years.
Identity numbers on submitted records. Ninety days after you submit a quote request or an application, or sooner once we confirm the policy as issued, an automated daily job clears the fields that hold your Social Security number, driver's license number, bank routing and account numbers, and business tax ID. When a member of our team marks a case as issued and confirms the cleanup, those fields on its records are scheduled for the next daily run. Those numbers exist to get an application to a carrier, and the carrier keeps its own copy under its own rules, so ours has no further use for them. The rest of the record stays, including your date of birth, which we need to service a policy.
That job clears those dedicated fields. It does not read free text or attachments, so a number written into a notes or details box, or printed on a document you uploaded such as a voided check, stays with that note or document until the record itself is deleted. Deletion requests for anything we are not required to keep are handled by hand as described below.
Advisor portal accounts. Account records are kept while the account is active and closed on request.
Your choices
You can ask what we hold about you, ask for a correction, or ask for deletion of information we are not required to keep, by emailing hello@alignedpathinsurance.com. We acknowledge requests within a few business days. We may need to verify your identity before providing, changing, or deleting records, and we explain any records we must retain. Acknowledgment does not mean every request can be completed in that time.
This policy covers alignedpathins.com, alignedpathinsurance.com, and the advisor portal. Our terms of use cover the rest of the relationship. For how we work with advisors generally, see the advisor page.