Legal
Privacy policy
Last updated 2 September 2026
The short version
We collect business information needed to respond to a licensed organization’s technology enquiry, implement an approved workflow, operate authorized accounts, and preserve required records. We do not sell enquiry data or use it to market insurance to the public.
Public technology enquiries
The public form collects organization name and type, business contact name, professional role, business email, request type, workflow needs, and an explicit confirmation that the sender is acting professionally for a licensed insurance company, licensed broker, or licensed agent.
Do not submit policyholder, applicant, claimant, payment-card, or other consumer information. The form is not an insurance application, quote request, claim notice, or payment instruction.
Approved organization accounts and historical records
If an organization receives an approved implementation, authentication may provide an account identifier, name, and business email. We store no authentication password.
Configuration, analysis, audit, and billing records created under an approved agreement may be retained for governance, support, security, contractual, regulatory, and examination purposes. Records created before the August 2026 repositioning are preserved and are not exposed through a public self-service account.
Hash-chained audit entries are append-only by design. A request affecting those records must be evaluated against contractual, legal, regulatory, security, and evidentiary retention obligations rather than handled as a casual field edit.
Approved implementations must define tenant separation, role-based access, retention, and authorized export before customer data is accepted. Customer-supplied data remains identified as customer-supplied; sample, synthetic, and illustrative data must be labeled and may not be presented as a real client result.
AI assistant
The assistant explains the technology and high-level methodology to professional visitors. Question text is sent to the model provider that generates the response. Do not enter confidential organization data or any policyholder, applicant, claimant, or other consumer information. The assistant has no access to private workflow records.
Service providers and disclosure
Infrastructure providers used for hosting, managed database services, authentication, payment administration, analytics, and AI processing handle data on our instructions. We may disclose information when legally required and will provide notice unless prohibited.
Our payment systems are for approved B2B technology invoices. Captive Feasibility does not collect insurance premium or claims funds.
Retention and rights
Technology enquiries are ordinarily retained for two years. Approved organization and historical records are retained according to the applicable agreement and legal, regulatory, security, and audit requirements.
An authorized contact may request access, correction, or deletion by using the technology enquiry form and identifying the request as a privacy matter. We will verify authority before disclosing or changing organization records.
Security
Data is encrypted in transit. Public self-service study and payment routes are disabled. Private records are restricted by authenticated role, and owner administration is separately authorized. No internet-connected service is impenetrable; we do not claim otherwise.
Contact
Use the technology enquiry form for privacy questions. Technology-product and data-handling questions go to Captive Feasibility; insurance questions go to the relevant licensed insurance organization or qualified professional. See Insurance Technology Platform — We Do Not Sell Insurance. Captive Feasibility operates from Des Moines, Iowa, and data is processed in the United States.