Privacy Policy

1. Who we are

Cubierto is a licensed insurance agency. We operate as Cubierto Insurance LLC (NPN 22236672), licensed in Arizona, Florida, North Carolina, Texas, Nevada and New Mexico. We are not an insurance company; policies are issued by the insurers.

We are part of the Kornugle Group companies (the "Kornugle Parties"): Finazo LLC, Cubierto Insurance LLC, Hogares Mortgage LLC and Kornugle Group LLC.

This policy covers the cubierto.ai website and our WhatsApp service channel.

2. What information we collect

• Your WhatsApp conversations with us: the text, voice notes, photos and documents you send us.
• Your quote and application data: name, date of birth, ZIP code, household size, income (when it applies for government help), the information relevant to the insurance you request, and the identification documents you choose to use (ITIN, passport or consular ID).
• Your contact details: phone number and email address.
• Site usage data: pages visited, device type and browser.

3. How we use your information

• To quote your insurance and check your eligibility (including government help, when it applies).
• To activate your policy with the insurer you choose and service it: changes, renewals and claims.
• To process your conversations with artificial intelligence: our assistant Sofia uses AI to understand you and reply — see the AI Disclosure.
• To improve our service and measure that our advertising works.
• To comply with the law and with each state's insurance regulators.

4. Who we share your information with

This is the complete list. There are no other categories.

• Insurance carriers and enrollment platforms. When you decide to get a quote or enroll, we send the insurer — or the enrollment platform, such as the Health Insurance Marketplace — what is needed to quote and issue your policy. What is submitted to an insurer becomes the responsibility of that insurer under its own privacy policy.
• Service providers under contract. Companies that run our infrastructure on our behalf under confidentiality obligations: cloud hosting, AI model providers that process conversations for us, and communications infrastructure (such as the WhatsApp platform). They may not use your data for their own purposes.
• Advertising measurement with hashed identifiers. To know whether our advertising works we use Meta's Conversions API. Identifiers (such as a phone number) are cryptographically hashed before being shared. We never share the content of your conversations and we never share health information — ever.
• Legal requirements. If a law, a valid court order or an insurance regulator requires it, we share the minimum required.

5. What we never do

• We never sell your data. To anyone.
• We never share your information with immigration authorities.
• We never share the content of your conversations for advertising.
• We never use your health information for advertising.

6. GLBA privacy notice (federal financial privacy law)

As an insurance agency, we are a financial institution under the federal Gramm-Leach-Bliley Act (GLBA). That means your "nonpublic personal information" — the financial and personal data you give us to quote or process your insurance — is protected by federal law.

We share it only as described in section 4: to provide the service you asked for, with your insurance providers and our service providers under contract, or when the law requires it. We do not sell your nonpublic personal information and we do not share it with nonaffiliated third parties for their own marketing.

Where your state's insurance privacy law gives you additional rights to limit how your information is shared (opt-out), we honor them: write to privacidad@cubierto.ai.

7. Use of artificial intelligence

Our assistant Sofia is a virtual agent powered by artificial intelligence and identifies itself as AI from the first message. How it works, its limits, and how to talk to a licensed person are explained in the AI Disclosure, which is incorporated into this policy by reference.

8. How long we keep your information

We keep consent records, conversations and communications for 7 years. This is a requirement of the regulated insurance business — it lets us demonstrate what was quoted, what was purchased and what you authorized.

Health Insurance Marketplace (ACA) enrollment records are kept for at least 10 years, per CMS requirements.

When you ask us to delete your data, we delete everything the law does not require us to keep (see section 9).

9. Your rights

You can request access to, correction of, or deletion of your information by writing to privacidad@cubierto.ai. We respond within 45 days.

Keep in mind: records that insurance law requires us to keep (such as consent records, quotes and policies) cannot be deleted before their legal retention period ends — but they stop being used for anything else.

If your state's law gives you additional privacy rights, we honor those through the same channel.

10. Security

We protect your information with encryption in transit and at rest, access controls (only staff who need your information can see it) and monitoring of our systems. No system is infallible, but the standard we apply is that of the financial sector.

11. Minors

Our services are for adults 18 or older who live in the United States. We do not knowingly collect information from minors, except what you — as the adult responsible for the policy — give us about your dependents to quote or enroll their coverage.

12. Cookies and tracking on this site

cubierto.ai does not use advertising cookies or tracking pixels. The advertising measurement described in section 4 happens server-to-server, with hashed identifiers — not with cookies in your browser.

The application form at /aplicar is operated by our application platform and may use its own technical storage, needed for your application to work (for example, to resume it where you left off).

13. Changes to this policy

If we change this policy, we post the new version here with its update date. If the change is material and we have a way to contact you, we will let you know.

14. Contact

Questions, access/correction/deletion requests, and opt-outs: privacidad@cubierto.ai.

If we do not resolve your concern, you can contact your state's insurance department — the regulator for each state where we are licensed is listed in this site's footer.