Finance MCP Privacy Notice
Last updated:
01Who is responsible
Insurely AB, company registration number 559103-5646, Kungsgatan 9, 111 43, is the controller for the processing described here. Our data protection officer can be reached at privacy@insurely.com.
Please note that once you have chosen to share your with your preferred AI provider, the provider of that tool is an independent controller for its own processing. We are not joint controllers with that provider and have no agreement with it.
02What this notice covers
This notice covers 1) Insurely’s data access service (“the Service”) and 2) making the data available to your AI provider.
03What we process and why
| Purpose | Personal data | Legal basis |
|---|---|---|
| Providing the Service |
|
Contractual necessity, Art. 6(1)(b) |
| Collect and structure your data from the providers you select |
|
Contractual necessity, Art. 6(1)(b) |
| Troubleshoot and secure the Service | Collected data and technical logs | Legitimate interests, Art. 6(1)(f) |
| Service improvement and product development | Insurely may anonymise some personal data from your User information and information on your holdings. | Legitimate interests, Art. 6(1)(f) |
You can withdraw your consent at any time. Withdrawal does not affect processing that has already taken place.
04Information revealing health
We apply measures to prevent the occurrence of health data in the Service. We do not collect insurances revealing your health status, however, if you have pregnancy insurance, that insurance will appear when you collect your insurance data from that insurance company. If you do not wish Insurely to collect such data or if you are contractually prohibited by the AI providers terms to share such data, please do not collect your insurance data.
05Information about other people
Your policies and accounts may contain information about people other than you, for example family members covered by a policy, joint account holders, or people for whom you hold a power of attorney. You are responsible to inform such related persons before you collect and share the data with Insurely and your AI provider.
06Who receives your data
- our IT suppliers, who process data on our behalf.
- The third-party AI providers (for example Anthropic’s Claude, OpenAI’s ChatGPT) that you choose to connect to your data through our connector: they receive your data solely upon your instruction and act as independent data controllers, in accordance with their respective privacy policies. You can revoke this connection at any time.
07Transfers outside the EEA
Where the provider of your AI provider is located outside the EEA, making your data available to it is a transfer to a third country. Because you choose the tool yourself and we have no agreement with its provider, we cannot put standard contractual clauses in place for that transfer.
The transfer is therefore made on the basis of your explicit consent, given before the data is shared. This means your data may be processed in a country without an equivalent level of protection, and that it may be harder for you to exercise your rights there.
08How long we keep your data
At Insurelys side, your data is retained for up to 14 days after collection, together with technical logs, so that we can troubleshoot the collection. It is then automatically anonymised or deleted.
Your consent and the time it was given are kept for as long as we need to be able to demonstrate that it was given.
09Your rights
You have the right of access, rectification, erasure, restriction, data portability, and to object to processing.
To exercise your rights with Insurely, please contact us by emailing privacy@insurely.com.
Rights concerning data held at your AI provider must be exercised against that provider.
10If you are in the United Kingdom
Where you use the service from the United Kingdom, our processing is subject to the UK GDPR and the Data Protection Act 2018. Insurely AB remains the controller.
Insurely is not established in the United Kingdom and has appointed a representative under Article 27 of the UK GDPR: Lionheart Squared Limited, is a private limited company (no. 10819580) in England and Wales with registered offices at 17 Glasshouse Studios, Fryern Court Road, Fordingbridge, Hampshire, SP6 1QX, United Kingdom.
When we collect your data from UK providers it is transferred to our environment in the EU/EEA. That transfer is covered by the United Kingdom’s adequacy regulations for the EEA.
The onward transfer to your AI provider works as described in section 7, under the corresponding provision of the UK GDPR.
11Complaints
You may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), Box 8114, 104 20 Stockholm, imy.se.
If you are in the United Kingdom, you may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.
You may also lodge a complaint with the supervisory authority in the country where you live or work, or where you believe the issue arose.
12Changes to this notice
We may update this notice. The current version is always published here with the date it was last updated.