What we collect, and what we do with it.

What this site collects

• Membership inquiries. Your name, your agency's name, your email, your phone number and the answers you give about your book. Used to contact you about membership and for nothing else.
• Contact messages. What you type, and the address to reply to.
• Visits. A server-side record of pages requested, for traffic figures and abuse control.

What this site does not do

There is no third-party analytics, no advertising tag, no session recorder and no cross-site tracking on any page here. That is checkable rather than a promise: the content security policy this site sends refuses scripts from anywhere it has not named, and nothing of that kind is named.

We do not sell, rent or share your details with carriers, lead buyers or anybody else. An inquiry to a network about the future of your agency is a confidence, not inventory.

Book Check stores nothing at all. The numbers you type are used to compute the page you get back and are never written to a record, a log or an email.

Encrypted at rest, individually, with AES-256-GCM:

• your name
• your email address
• your phone number

Those are the fields that identify a person rather than a business. They cannot be read out of a database copy without the key, and the key is not stored in the database or in the server's environment.

Not encrypted, and held as ordinary columns:

• your agency's name
• the state you are based in
• your answers about premium band, mix, producers, years in business and current network
• anything you type into the notes field

Two reasons, and the second is the honest one. An agency's name is a trading name a carrier could look up, and the band answers are ranges rather than figures. But they are also the fields the network has to be able to sort, filter and count in order to run a pipeline at all, and encrypting a column means never being able to query it. That is a real trade and we would rather name it than describe everything as encrypted and hope nobody checks. Treat the notes field as you would treat an email: do not put anything in it you would not send.

• Membership inquiries and their history: three years from the date the inquiry was created, then deleted. Three years is the current setting and the network may shorten it; it will not be lengthened without this page changing first.
• Visit records: your address is replaced with a non-identifying value after 90 days. The detailed rows are reduced to daily totals and deleted after 13 months. The shape of the traffic survives; the record of who made it does not.
• The security and administrative audit trail: seven years. It holds operator actions and hashed addresses, not agency information, and it is the record that answers questions about who did what.

To have your inquiry removed, write to the address on the contact page and say so. You do not have to give a reason and you will not be talked out of it. Removal takes the inquiry and its history with it.