Privacy Policy

Information We Collect

We collect information that you voluntarily provide to us when you request a quote, purchase a policy, or contact us. This may include:

• Personal Identity Information: Name, address, email address, phone number, and date of birth.
• Trip Details: Destination, travel dates, trip cost, and travel agency information.
• Payment Information: Credit card numbers and billing addresses (processed securely by our payment partners).
• Health Information: Pre-existing medical conditions if required for specific coverage waivers.

How We Use Your Information

We use the information we collect to:

• Generate accurate travel insurance quotes based on your specific needs.
• Process your insurance policy application with our carrier partners.
• Communicate with you regarding your policy, renewals, or claims.
• Improve our website functionality and customer service.
• Comply with legal and regulatory obligations.

Information Sharing

We do not sell your personal information. We share your data only with:

• Insurance Carriers: To facilitate the issuance of your policy and administration of claims.
• Service Providers: Third parties who perform services on our behalf, such as payment processing and data analysis.
• Legal Authorities: When required by law or to protect our rights and safety.

Data Security

We implement industry-standard security measures to maintain the safety of your personal information. We use SSL encryption for sensitive data transmission and restrict access to your personal data to authorized personnel only.

Cookies and Tracking

We may use cookies to enhance your experience, analyze site usage, and assist in our marketing efforts. You can choose to disable cookies through your browser settings, though this may affect some site features.

Data Returned to AI Assistants (MCP / ChatGPT App)

When AI assistants such as ChatGPT call our public MCP server (mcp.expedition.insure) or our REST API, the following fields may be returned in tool responses. These are the only categories of user-related data exposed through the AI surface; nothing else is forwarded.

• Trip context (user input): destination, departure date, trip duration in days, total trip cost in USD, currency, number of travelers, traveler ages, country of residence, US state (if applicable), tour operator name (optional), deposit-paid date (optional), email address (optional, for follow-up).
• Quote / estimation output: quote ID, quote number, plan name, carrier name, plan tier, estimated premium, premium per traveler, confidence level, medical limit, evacuation coverage, trip cancellation limit, deductible, recommended-plan flag, plan highlights, notes.
• Plan catalog: plan ID, plan name, carrier brand and short name, tier, evacuation coverage, medical limit, trip cancellation limit, deductible, eligibility (residence type, min/max age, max trip duration, max travelers), policy terms URL, plan highlights, base price, list of features.
• Destination catalog: destination name, slug, description, region.
• Coverage gap analysis: credit card name (if provided), card benefits compared, identified gaps and severity, recommendation.
• Checkout link: checkout URL, expiration timestamp, plan and quote summary, optional buyer email and guest names if you provided them.
• ACP purchase session: session ID, session status, line items, totals, buyer email and name (if you provided them), order ID and permalink upon completion.
• Server metadata: server version, environment, supported destinations, capability list, disclaimers (no user data).

The MCP server does not return account passwords, payment card details, government IDs, or stored conversation transcripts. Stripe payment data is collected directly by Stripe, not by our AI surface. Conversation transcripts with third-party AI platforms (e.g. ChatGPT) are governed by that platform's own privacy policy.