Privacy Policy

1. Introduction

XMOD ("we," "our," or "us") is a Workers' Compensation intelligence product built on the HALO IQ platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. XMOD is offered exclusively to licensed commercial lines insurance brokers and their authorized representatives.

By accessing or using XMOD, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the application.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, agency or brokerage name, license information, and professional credentials.
• Client Data: Information about your clients' Workers' Compensation policies, including experience modification rates (X-Mods), loss runs, claims data, payroll information, and policy details that you choose to upload or enter.
• Communications: Information you provide when you contact us for support or feedback.

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with XMOD, including features used, time spent, and actions taken.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage patterns.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve XMOD services
• Process and analyze Workers' Compensation data to generate insights, reports, and recommendations
• Communicate with you about your account, updates, and support requests
• Ensure the security and integrity of our platform
• Comply with legal obligations and industry regulations
• Develop new features and improve user experience
• Generate aggregated, anonymized analytics to improve our services (individual client data is never shared)

4. Data Sharing and Disclosure

We do not sell your personal information or your clients' data. We may share information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our platform (e.g., cloud hosting, analytics) under strict confidentiality agreements.
• Legal Requirements: When required by law, subpoena, or legal process, or to protect the rights, property, or safety of XMOD, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• With Your Consent: When you explicitly authorize us to share information.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection practices
• SOC 2 Type II compliant infrastructure

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Client data uploaded to XMOD is retained according to your subscription terms and applicable regulatory requirements. You may request deletion of your data by contacting us, subject to legal and regulatory retention obligations.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Opt out of certain data processing activities
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@haloiq.ai.

8. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at the address below.

9. Children's Privacy

XMOD is a business-to-business service intended for licensed insurance professionals. We do not knowingly collect personal information from individuals under 18 years of age. If we learn that we have collected information from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of XMOD after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: