Effective date: October 1, 2026
Vertex Aegys is a technology platform (SaaS) used by licensed insurance professionals to prepare, manage, communicate about, and service insurance applications and client relationships. This Privacy Policy explains the information the platform may collect, how it is used, when it may be disclosed, and the choices available to users.
Depending on the workflow selected by the user, Vertex Aegys may process information provided by an agent or client, including contact information, identity and insurance-application information, policy and carrier information, financial or banking information needed for an application, health-related information, documents uploaded for a case, and technical/security information necessary to operate the service.
Information is used to provide the user-facing functions of Vertex Aegys, including preparing and maintaining case records, generating requested documents, delivering secure time-limited client links, sending case-related communications, supporting application workflows, maintaining security, troubleshooting, and providing post-submission servicing requested by the user.
When a user chooses to connect a Google account, Vertex Aegys may request the Google OAuth scope https://www.googleapis.com/auth/gmail.send. This permission is used solely to allow the authenticated user to send transactional and case-related email messages generated or initiated through Vertex Aegys, such as secure client links, case notifications, and other communications that the user elects to send through the application.
The gmail.send permission does not give Vertex Aegys permission to read, search, modify, delete, or analyze the user's Gmail inbox or existing email messages, and the application does not request Gmail scopes for those activities.
When an agent enables appointment booking, Vertex Aegys may request the Google Calendar OAuth permissions https://www.googleapis.com/auth/calendar.freebusy and https://www.googleapis.com/auth/calendar.events.owned. The free/busy permission is used only to determine whether the agent's primary calendar is available at a requested time; Vertex Aegys does not need event titles, descriptions, attendees, or other event contents to perform this availability check. The owned-events permission is used only to create appointment events in a calendar owned by the authenticated agent for appointments booked through that agent's Vertex Aegys page. Vertex Aegys does not use Calendar data for advertising, profiling, data brokerage, credit decisions, or generalized AI/ML training, and does not share Calendar data except as necessary to provide the user-requested scheduling feature or as required by law.
Vertex Aegys uses information received from Google Workspace APIs only to provide or improve the user-facing feature for which the user granted access. Google user data is not sold, used for advertising, retargeting, personalized advertising, credit-worthiness decisions, or to train general-purpose artificial intelligence or machine-learning models.
Information may be disclosed to the licensed insurance professional handling the case, the insurance carrier or other recipient selected or authorized as part of the requested insurance workflow, and service providers that support hosting, security, email delivery, logging, or other infrastructure functions, only to the extent necessary to provide the requested service or as required by law. Google user data is not transferred to data brokers, advertising platforms, or information resellers.
Vertex Aegys retains information only for as long as reasonably necessary to provide the requested service, maintain security and case continuity, and satisfy applicable legal, regulatory, insurance, accounting, or record-retention obligations. OAuth credentials or tokens, when retained to keep an authorized Google connection functioning, are protected and are not used for purposes outside the authorization granted by the user. Users may request deletion or correction of personal information associated with their account, subject to applicable legal and regulatory retention requirements.
An agent's public page may offer an IUL Educational Explorer. The age and monthly planning amount a visitor enters are used only to summarize the visitor's planning inputs and present general educational concepts; Vertex Aegys does not use those inputs to calculate or represent policy cash value, death benefit, carrier charges, illustrated rates, caps, participation rates, or future policy performance. The inputs are stored only if the visitor books an appointment, in which case they are shared with that agent together with the visitor's name, phone, email, preferred language and chosen time, and may appear in the appointment confirmation emails sent from the agent's own email account. When a visitor submits the "Request a free consultation" form on an agent's public profile page, Vertex Aegys collects the name, contact details, area of interest, preferred language and message provided, and delivers them only to that agent so the agent can respond. The visitor must confirm that the agent may contact them. Visitors may ask the agent or Vertex Aegys to delete this information.
Sensitive application data is encrypted at rest by the application (AES-256-GCM, field by field) in addition to the encryption provided by the hosting infrastructure. This includes Social Security numbers, bank account and routing numbers, identification numbers, uploaded documents, and health, underwriting, family-history and background answers. Social Security, bank account, routing and identification numbers are shown masked by default inside the agent workspace; viewing a full value is a deliberate action that is logged. Social Security numbers and bank account/routing numbers are automatically deleted from Vertex Aegys no later than 72 hours after the case is submitted, immediately when the licensed agent marks the application as sent to the insurance carrier, or 24 hours after the last time those fields were entered if the case is not submitted. Only a record that the information existed and when it was deleted is kept, never the values. Identification numbers and identification-document images remain encrypted and access-controlled in the secure case workspace because agents may need them to complete a carrier application; they are not included in the 24/72-hour SSN/banking purge and remain subject to the platform's case/document retention and deletion controls. Case files are not sent by email: the licensed agent is notified and works the case inside the secure workspace. Summaries generated as PDF mask identification and banking numbers and do not include health, family-history or background answers. Other uploaded documents are removed a limited time after submission (currently 90 days by default), unsubmitted drafts are automatically deleted after a limited period, and agents can permanently delete a case at any time. Information that a licensed agent copies, downloads, prints or shares outside Vertex Aegys is under that agent's custody and responsibility.
Vertex Aegys uses administrative and technical safeguards designed to protect Google user data against unauthorized access, use, alteration, disclosure, loss, or destruction.
Data transmitted between the user's browser, Vertex Aegys, Google OAuth, and the Gmail API is transmitted over HTTPS/TLS on the production service.
Google OAuth credentials, refresh tokens, and access tokens are handled on the server side and are not intentionally exposed through the public browser interface. Access is limited to the application components and authorized service providers necessary to operate and secure the requested functionality.
Vertex Aegys requests only the gmail.send OAuth permission needed to send transactional emails initiated by the user through the application. Vertex Aegys does not request permission to read, search, modify, delete, or analyze the user's Gmail inbox or existing email messages.
Google user data is used only to provide or maintain the user-requested functionality. It is not sold, used for advertising, transferred for advertising or data-broker purposes, or used to train generalized artificial-intelligence or machine-learning models.
Google authorization may be revoked by the user through the user's Google Account. After authorization is revoked, Vertex Aegys can no longer obtain new Gmail API access through that authorization.
Vertex Aegys's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
For privacy questions or requests to access, correct, or delete personal information, contact the licensed agent shown in the platform or the Vertex Aegys support contact published in the application. Requests may be subject to identity verification and applicable legal or regulatory retention requirements.
This Privacy Policy describes the Vertex Aegys platform. Insurance carriers and other third parties may maintain their own privacy policies and legal obligations for information they receive independently.