Privacy policy.

1. The three roles

AllOneForm works with three groups of people, and information flows differently for each. AllOneForm runs the platform and is responsible for the platform's practices described here. Agencies are the independent insurance agencies and producers who use AllOneForm to collect client information for quoting; each agency is its own business, and an agency's client information belongs to that agency. Clients are the people an agency asks to complete an intake, under the agency's name and branding, for that agency's quote. AllOneForm processes client intake information on the agency's behalf, so the agency can work with it.

If you are a client and you have questions about how your agency uses your information for quoting, your agency is your first contact. We support agencies in answering those requests, as section 9 describes.

2. What this policy covers

This policy covers the AllOneForm website at alloneform.com (the marketing pages, the early access and sign up forms, and the producer login page), the producer backend where agency users sign in, and the client intake pages where clients complete an intake for their agency.

The intake itself shows clients a short privacy promise before they answer questions. That promise is consistent with this policy: the client's information is never sold, it is never shared with anyone outside the client's quote and service, and the only exception is the optional end-of-intake feedback survey described in section 6.

3. Information the website collects from producers and visitors

Early access and sign up forms. The early access form collects your name, your agency name, and your work email. The sign up form collects those, plus how many licensed producers your agency has and, if you choose to tell us, who referred you. When a submission is recorded, we also note how you arrived, such as a campaign tag or the page that referred you, so we can tell which outreach is working. We record the wording version of the early access terms shown when you submitted.

The sign up qualifier saves as you go. Our sign up flow asks a few short questions one at a time (for example, whether you are an agency owner or a solo producer, and your team size) and saves your answers at each step, so a half-finished sign up is not lost. If you give us your email during the flow, your answers become a lead we can follow up. If you never give us an email, the partial answers are kept only under a random identifier stored in your browser; they are not connected to your name in our records and are never used to contact anyone.

Producer accounts. When an agency is set up, we store the account holder's name, agency name, username, and a securely hashed password — we never store passwords in plain text. Agency settings, such as branding, contact details shown to clients, and email template wording, are stored as part of the account.

4. Information agencies collect from their clients through the intake

When a client completes an intake, the answers are the agency's client information. Depending on what the client provides, an intake can include contact details (name, email, phone numbers, address); household and driver details (dates of birth, driver's license numbers, driving history, and Social Security numbers — a Social Security number is optional in the intake and can be skipped); home details, including the mortgage lender's name and the exact mortgagee address; vehicle details and current coverage information; and documents the client uploads, such as their current policy declaration pages.

This information is stored under the agency's account and is visible only to that agency's own signed-in producers. One agency cannot see another agency's clients: the platform keeps each agency's data separate, and a request for another agency's intake returns nothing. AllOneForm's own administrative console shows agencies and platform activity in aggregate — counts and totals. It does not display the contents of any agency's client intakes.

When a client gives consent at the intake's consent step, the platform records the consent choice together with the exact wording shown and the date and time. That record is kept even if the intake is later deleted, so the agency can show what was agreed to.

5. How information is used

Website and lead information is used for one thing: running AllOneForm's early access program — writing to you about early access for your agency, including your walkthrough and your account activation. Submitting a form does not by itself send you any email; follow-up is by us, about your request.

Agency account information is used to provide, secure, and support the agency's account.

Client intake information is used only so the agency can prepare the client's quote and service the relationship. The producer reviews the record, and the agency uses it with insurance carriers to shop the quote — that carrier use is the agency's, under the agency's own obligations as a licensed insurance business. AllOneForm does not send client information to carriers itself, and does not use client intake information for its own marketing.

Platform operation. We use information as needed to operate and secure the platform: keeping agencies' data separated, preventing abuse of the public forms, troubleshooting, and maintaining the consent and activity records described above.

6. Product feedback — the one public exception

At the end of an intake, a client may choose to complete a short feedback survey about the intake experience. Feedback is stored in a separate product data store, apart from the agency's client records, and it is linked to the intake only by a one-way code that cannot be read back to identify the client.

The consent wording shown before the survey states the exception plainly: if a client takes part, their rating and comments may be used publicly, with their first name only. Feedback marked private, withdrawn, or not approved is never published. If an agency deletes the intake a feedback entry came from, the feedback is anonymized at the same time — the first name and comments are removed and the entry is withdrawn from any public use.

No other client information is ever published.

7. What never happens

We never sell personal information that identifies a person. We never market to an agency's clients, and we never share one agency's client list or intake information with another agency. We never use client intake information to advertise anything to the client. Your website details are never added to any marketing list beyond AllOneForm's own early access contact.

8. De-identified and aggregated information

We may create and use statistical information that has been aggregated and de-identified — for example, how many intakes were completed across the platform in a month, or the average time an intake takes. Before any such use, information is combined and stripped so that it does not identify, and cannot reasonably be used to identify, any individual client, household, or agency. De-identified information is no longer personal information. We may use and share de-identified, aggregated information for product improvement, research, and business purposes. This reservation never applies to information that identifies a person: identifiable client information is never sold and is never used to market to clients, as section 7 states.

9. Your choices and rights

If you are a producer or website visitor: you may ask us what details of yours we hold, ask us to correct them, or ask us to delete them. If your early access details are recorded and you want them removed, contact us (section 15) or reply to any email from us, and we will delete them. You may also decline further early access emails at any time by telling us.

If you are an agency client: your intake information belongs to your agency. Contact your agency to ask for access to, correction of, or deletion of your information; agencies can delete an intake from the platform, and we will support the agency in responding to your request. When an agency deletes an intake, the intake's contents are removed from the agency's records and its feedback is anonymized as section 6 describes. The consent record described in section 4 is retained after deletion as proof of consent.

Minnesota residents have rights under Minnesota law regarding their personal data, including the rights to know, correct, and delete personal data and to opt out of the sale of personal data. We do not sell personal information that identifies a person; the requests described above are how to exercise the remaining rights with us or with your agency. Insurance information held by agencies is also governed by the Minnesota Insurance Information and Privacy Protection Act (Minn. Stat. ch. 72A), which gives you rights to see and correct information an agency or insurer holds about you — your agency can help you with those requests.

10. How information is protected

Information travels between your browser and the platform over an encrypted (HTTPS) connection. Sensitive identifiers in an intake — Social Security numbers and driver's license numbers — are shown on producer screens masked to the last four digits; the full values appear only in the export package the agency itself generates to hand its own record to its rater. Each agency's data is separated from every other agency's, producer access requires signing in with a username and password, and passwords are stored only as secure hashes. Access within AllOneForm is limited to operating and supporting the platform, under the aggregate-only limit described in section 4.

No system is perfectly secure, and we cannot guarantee absolute security — but the practices above are how the platform is actually built and run today, and we will update this section if they change.

The website and platform are hosted with established infrastructure providers (currently Cloudflare for the website and Render for the application and database), who process information only to provide hosting to us.

11. Website measurement, cookies, and storage

Our page measurement is first-party and deliberately light. It sets no cookies. Page views are counted in aggregate by day, page, general source (such as search or social), and device type (phone, tablet, desktop, or automated traffic).

To estimate how many distinct visitors we had in a day, your browser stores a random identifier on your device (in local storage, under the name aof_vid). Only a one-way hash of that identifier, mixed with the date, reaches our server. It changes meaning every day, so it cannot be used to follow you across days or to identify you. The sign up flow stores a random lead identifier (aof_lead_key) in local storage so the step-by-step save described in section 3 can work. The producer backend uses one strictly necessary session cookie to keep a signed-in producer signed in; it is not used for advertising or cross-site tracking.

We do not use third-party advertising or analytics trackers on the website.

12. Retention

Early access and sign up details are kept while early access is being offered and while we are working your request, unless you ask us to delete them sooner. Client intakes are kept until the agency deletes them. Consent records are kept after an intake is deleted, as sections 4 and 9 describe. Anonymous partial sign up answers (no email given) are not used to contact anyone and are removed when a completed record replaces them.

13. Who the service is for

The platform is a business tool for insurance agencies, and the intake is completed by adults on behalf of their own household. Household information about family members — for example, other drivers — is provided by the person completing the intake. The service is not directed to children.

14. Changes to this policy

If we change this policy in a way that matters, we will post the updated version at this address with a new effective date, and, where the change affects information we already hold, we will take reasonable steps to bring it to the attention of affected agencies and contacts. Earlier versions are available on request.

15. Contact

AllOneForm
1602 142nd St W
Rosemount, MN 55068
Email: support@alloneform.com

Questions about an agency's use of your intake information should go to that agency first; we will support the agency in responding.

This policy replaces the earlier short privacy note that appeared at this address. The Terms of Service cover use of the Service itself.