Skip to main content
Index Risk

Terms of Use and Privacy Policy

INDEX RISK, INC. d/b/a Index Risk Insurance Services
Effective Date: Oct 1, 2026

1. Introduction and Scope

Index Risk, Inc., doing business as Index Risk Insurance Services ("Index Risk," "we," "us," or "our"), is a specialty managing general underwriter (MGU) that develops and distributes single-peril property Difference-in-Conditions and deductible buydown insurance products through a national network of wholesale brokers. We respect your privacy and are committed to protecting the personal information we collect and handle in the course of our business.

This Privacy Policy (this "Policy") explains how we collect, use, disclose, and safeguard personal information in connection with our website, our proprietary underwriting platform, our insurance operations, and any other tools, products, or services provided by Index Risk that link to or reference this Policy (collectively, the "Services"). It applies to information handled in the United States and is intended to comply with applicable U.S. federal and state privacy laws.

Because we distribute our insurance products exclusively through wholesale brokers and do not generally market or sell insurance directly to consumers, most personal information we handle relates to our broker partners and business contacts. This Policy nonetheless addresses all individuals whose information we may process, as described below.

2. Who This Policy Applies To

This Policy applies to the following categories of individuals:

  • Website visitors: individuals who visit or interact with our website.

  • Wholesale brokers and producers: individuals at the brokerage firms and producer entities through whom we distribute our products, including their staff, licensing, and account contacts.

  • Individuals associated with insureds: contacts connected to the commercial policyholders for whom coverage is submitted, quoted, bound, or serviced through our platform.

We do not knowingly solicit or transact insurance directly with individual consumers; our distribution is conducted through licensed wholesale brokers.

This Policy does not apply to information collected from our employees, contractors, or vendors. It also does not apply to information that you ask us to share with third parties or that is collected by certain other third parties whose software or services are featured or included in the Services.

By accessing or using the Services, you consent to this Policy. If you do not agree with this Policy, please do not access or use the Services. Information gathered through the Services may be transferred, used, and stored in the United States or in other countries where our service providers or we are located. If you use the Services, you agree to the transfer, use, and storage of your personal information in those countries. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. You agree that all transactions relating to the Services or Index Risk are deemed to occur in the United States, where our servers are located.

3. Information We Collect

3.1 Contact and Account Information

Name, business email address, telephone number, employer or firm name, job title, broker or producer license information, and account credentials used to access our platform.

3.2 Information Used to Quote, Bind, and Service Policies

Information submitted to us by brokers through our Index Connect platform in connection with underwriting and servicing commercial property risks, which may include the names and contact details of individuals associated with a commercial insured.

3.3 Website and Technical Information

When you visit our website, we may automatically collect technical information such as IP address, browser type, device identifiers, pages viewed, and usage data. We use Google Analytics, a web analytics service provided by Google LLC, to help us understand how visitors use our website. Google Analytics uses cookies and similar technologies to collect and analyze information about website usage. Information generated about your use of our website may be transmitted to and stored by Google. For more information about how Google collects and processes data, and the choices available to you, please visit Google's privacy resources. You can also opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

We also use PostHog, a product analytics and error-tracking service, primarily to monitor and diagnose technical errors and to understand how our website and platform perform. PostHog may use cookies and similar technologies to collect usage and diagnostic information, and it includes product analytics functionality that we may use to improve our services. For more information about how PostHog collects and processes data, and the choices available to you, please visit PostHog's privacy policy.

Other than Google Analytics and PostHog as described above, we do not currently use cookies or other tracking technologies for advertising, marketing, or cross-context behavioral purposes (though we may use cookies or other tracking technologies for other purposes, as in Section 7). We reserve the right to use additional cookies or tracking technologies in the future, and we will update this Policy accordingly if we do.

3.4 Information from Third Parties

We may receive information about you from wholesale brokers, capacity providers, data and analytics vendors, and publicly available sources, including for purposes of underwriting, fraud prevention, and regulatory compliance.

4. How We Collect Information

  • Directly from you, when you contact us, register for our mailing list or Services, use our Services, or communicate with our team.

  • Automatically, through your use of our website and platform or other Services, including via cookies and similar technologies.

  • From third parties, including wholesale brokers and data vendors, as described above.

5. How We Use Information

We use personal information for the following business purposes:

  • To underwrite, quote, bind, issue, and service insurance products.

  • To communicate with our wholesale broker partners and business contacts.

  • To operate, maintain, secure, and improve our Services.

  • To detect, prevent, and investigate fraud and other unlawful activity.

  • To perform research and analysis aimed at improving our products and services and developing new products or services.

  • To respond to inquiries and communicate with you regarding our products and services

  • To manage and maintain the systems that provide the Services.

  • To comply with legal and regulatory obligations, including insurance licensing, anti-fraud, and economic-sanctions requirements.

  • To exercise our legal rights.

6. How We Disclose Information

We may disclose personal information to the following categories of recipients:

  • Insurance carriers and capacity providers on whose behalf we underwrite.

  • Reinsurers in connection with the risks we place.

  • Wholesale brokers and producers involved in the relevant transaction.

  • Service providers and vendors that perform functions on our behalf, such as technology, hosting, analytics, and professional services, subject to appropriate confidentiality obligations. When we use service providers or vendors, we require that they use and disclose the personal information received from us only to provide their services to us or as required by applicable law.

  • Regulators, government authorities, and other parties where required by law or to comply with legal process.

  • Successors in interest, in connection with a merger, acquisition, financing, or sale of assets.

We may also disclose your personal information to third parties when we believe, in good faith and in our sole discretion, that such disclosure is reasonably necessary to (a) enforce or apply the terms and conditions of the Services, including investigation of potential violations thereof, (b) protect the rights, property or safety of us, our users or other third parties, (c) submit insurance claims, cooperate with insurance investigations, and fulfil insurance subrogation activities, (d) prevent a crime or protect national security, or (e) detect, prevent or otherwise address fraud, security or technical issues.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising in exchange for money or other valuable consideration.

7. Cookies and Tracking Technologies

To assist us in collecting and storing non-personal information, we may employ a variety of technologies, including "Cookies," local browser storage, and "web beacons," "pixels," or "tags." A "Cookie" is a small amount of data a website operator, or a third party whose content is embedded in that website, may store in your web browser and that the website operator or, as applicable, the third party, can access when you visit the website. A web beacon, pixel or tag is a small, usually-transparent image placed on a web page that allows the operator of that image, which may be the operator of the website you visit or a third party, to read or write a Cookie.

As explained above, we also use Google Analytics and PostHog on our website, both of which rely on cookies and similar technologies. Google Analytics helps us understand website usage, and PostHog is used primarily for error tracking and to monitor how our website and platform perform, as described in Section 3.3 above. Aside from these services, we do not currently use cookies or tracking technologies for advertising, marketing, or cross-context behavioral purposes.

You can typically manage or disable cookies through your browser settings, and you may opt out of Google Analytics using the Google Analytics opt-out browser add-on. Disabling cookies may affect certain website functionality. We reserve the right to use additional cookies or tracking technologies in the future, and we will update this Policy accordingly if our practices change. More information about managing Cookies is available here. To learn how to manage privacy and storage settings for your local browser storage, please refer to the end user documentation for your browser.

8. Transparency and Choice; Do Not Track Signals

You may request access to your personal information by sending an email to hello@indexrisk.com. We will try to locate and provide you with your personal information and give you the opportunity to correct this data, if it is inaccurate, or to delete it, at your request. But, in either case, we may need to retain it for legal reasons or for legitimate business purposes. You may also remove any content that you post to the Services using the deletion or removal options within the Services. However, we (and you) are not able to control information that you have already shared with other users or made available to third parties through the Services.

We ask individual users to identify themselves and the information requested to be accessed, corrected, or removed before processing such requests, and we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, would be extremely impractical (for instance, requests concerning information residing on backups), or relate to information that is not associated with your personal information. In any case, where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort. We may also require you to verify your identity to our satisfaction before providing you with access to personal information.

Please be aware that if you request us to delete your personal information, you may not be able to continue to use the Services. Also, even if you request that we delete your personal information, we may need to retain certain information for a limited period of time to satisfy our legal, audit and/or dispute resolution requirements.

We support the development and implementation of a standard "do not track" browser feature that provides customers with control over the collection and use of information about their web-browsing activities. Once a standardized "do not track" feature is released, we intend to adhere to the browser settings accordingly.

You can opt out of receiving marketing e-mails from us by clicking on the "unsubscribe" link in the e-mails. Please note that it may take up to ten (10) business days for your opt-out request to be processed. Also, even if you opt out of marketing e-mails, we may continue to send you certain account-related e-mails, such as notices about your account and confirmations of transactions you have requested.

You may be aware that there are various state data privacy laws currently in effect in the United States. Our Services are not currently subject to any state laws providing comprehensive rights in connection with personal information. However, we do provide notice and transparency about our collection and use of personal information as described in this Policy.

9. Residents of Canada

If you have an objection to the use of your personal information as described in this Policy, you may file a complaint by sending an email to hello@indexrisk.com. We will attempt to accommodate your objection or complaint, but you understand that, to the extent you object to our processing of personal information that is necessary for us to provide the Services to you, certain features and functionalities of the Services may no longer be available to you. Nothing in this Policy prejudices your rights to file a complaint with the Office of the Privacy Commissioner of Canada, and/or with any other applicable data protection authorities.

10. Data Security

We maintain robust administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide our services, and to satisfy our legal, regulatory, accounting, and insurance recordkeeping obligations. When personal information is no longer needed, we take reasonable steps to securely delete or de-identify it.

12. Third-Party Links and Data Providers

Our website may contain links to third-party websites, including those of our wholesale broker partners. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies.

From time to time, we may also contract with third-party data providers and use their application programming interfaces (APIs) to enrich the data used in, and to optimize, our underwriting processes. These providers may supply property, catastrophe, geographic, or other risk-related data. Where such data enrichment involves personal information, we handle that information in accordance with this Policy and require our data providers to maintain appropriate confidentiality and data protection obligations.

13. Children's Privacy

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal information from children under the age of 18. If we learn that we have collected such information, we will take reasonable steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes will be communicated as required by applicable law. We encourage you to review this Policy periodically. IF YOU DO NOT AGREE TO CHANGES TO THIS PRIVACY POLICY, YOU MUST STOP USING THE SERVICES AFTER THE EFFECTIVE DATE OF SUCH CHANGES (WHICH IS THE "LAST UPDATED" DATE OF THIS PRIVACY POLICY).

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Index Risk, Inc.

d/b/a Index Risk Insurance Services

3390 Mary Street, Suite 116, Miami, FL 33133

Email: hello@indexrisk.com