Privacy Policy
This policy explains how The Meta Insurance collects, uses, stores and shares personal information when you use our insurance request tools, upload a policy or use AI Assistant Lite.
Last updated: 24 August 2026
Scope and platform role
This Privacy Policy applies to personal information handled through the website at https://www.themetainsurance.com, including its travel, motor, property and health insurance request forms, policy upload tools and AI Assistant Lite.
A licensed insurance partner may provide its own privacy notice when it receives or collects your information. That partner's notice will govern its separate processing activities.
Information we collect
We collect information that you choose to provide through the platform. The fields used depend on the type of request you make.
Contact information
Full name, email address, phone number and preferred contact method. Some forms permit an email address or phone number, while AI Assistant Lite currently asks for an email address and allows the phone number to be skipped.
Travel insurance requests
Trip type, country of residence, destination, departure and return dates, purpose of travel, coverage area, number of travellers, traveller ages and requested coverage options.
Motor insurance requests
Request method, vehicle make and model, manufacturing year, registration country, fuel type, engine or power information, current insurer, current annual premium, deductible and coverage type.
Property insurance requests
Request method, property type and use, country and city, year built, property size, estimated building and contents values, current insurer, current annual premium, deductible and coverage type.
Health insurance requests
Request method, general plan type, country of residence, requested coverage area, applicant age range, number of people to cover, current insurer, current premium and deductible, and general coverage priorities. The public form does not request diagnoses, treatment records or detailed medical history.
We also record your consent to process the request and may keep operational information associated with a submission, such as a request identifier, creation time, status and source. Hosting and security infrastructure may process basic technical information, such as IP address, browser or device details and request logs, where necessary to deliver and protect the service.
Please do not include health information, financial account information or other sensitive personal information in free-text fields unless a licensed partner specifically requests it and explains why it is needed.
Uploaded Motor, Property and Health policy documents
You may upload an existing Motor, Property or Health insurance policy in PDF, JPG, JPEG or PNG format. An uploaded policy can contain personal information and insurance details beyond the form fields listed above, including names, addresses, policy numbers, vehicle property or health-plan information, coverage, premium and other information included in the document. Do not upload medical records, claim files, treatment documents or diagnosis details.
Upload only a document you are authorised to share and remove information that is not needed for the request where practical. Access may be provided to authorised service personnel and relevant licensed insurance partners where needed to handle your request.
AI Assistant Lite data collection
AI Assistant Lite uses a guided conversation to collect structured information for a Travel, Motor, Property or Health insurance request. Depending on the request, this can include destination and travel dates, traveller count, vehicle make, model and year, property type, location and approximate value, and your contact details.
In the current MVP, the visible conversation is used to build structured answers. When you consent and submit, those structured answers are sent as an insurance request; the full visible chat transcript is not separately submitted by the current implementation.
Purposes of processing
We may use personal information to:
- receive, validate, organise and manage insurance requests you choose to submit;
- identify and refer a request to a relevant licensed insurance partner;
- enable a partner to contact you using your preferred contact method and continue the requested process;
- store and associate an uploaded policy document with the correct request;
- operate AI Assistant Lite and convert your answers into structured request information;
- measure limited first-party website traffic, form-start activity and referral or campaign attribution so we can understand and improve the platform;
- communicate about a request, respond to questions and handle privacy requests;
- protect the platform, prevent misuse, troubleshoot errors and maintain service reliability; and
- meet legal obligations and establish, exercise or defend legal claims where applicable.
The legal basis for processing will depend on the applicable law and context. It may include your consent, taking steps at your request before entering a contract with a partner, legitimate interests in operating and securing the platform, or compliance with a legal obligation. Consent can be withdrawn for future processing where consent is the applicable basis.
Third-party technology and service providers
We rely on third parties to operate the platform. This includes website hosting and deployment providers and Supabase-backed database and storage infrastructure used by the current application for request records, policy-document storage and limited first-party operational analytics. These providers may process information on our behalf to deliver, secure, maintain and support their services.
We aim to provide service providers only with information needed for their function and to use appropriate contractual and technical protections where required. Providers may also process limited information for their own lawful security, compliance and service-administration purposes under their terms and privacy notices.
Security
We use reasonable technical and organisational measures designed to protect personal information. The current application sends requests to server-side endpoints, uses server credentials for database and storage operations, validates supported document types and size, and is designed to keep uploaded policy documents in private storage rather than expose public URLs.
No online service, transmission or storage method is completely secure. You should use the platform only on a trusted device and network, avoid adding unnecessary sensitive information, and notify us through an available contact channel if you believe information submitted through the platform may be at risk.
Data retention and deletion
The Meta Insurance has not yet adopted a fixed retention period for this MVP. We intend to keep personal information and uploaded documents only for as long as reasonably necessary for the purposes described in this policy, including handling and following up on a request, maintaining security and records, resolving disputes and meeting applicable legal obligations.
Retention decisions may consider the status of the request, the nature and sensitivity of the information, partner follow-up, legal or limitation periods and technical backup cycles. When information is no longer needed, it should be deleted or anonymised, subject to lawful exceptions and reasonable backup processes. You may request deletion as described below; the right is not absolute and may be limited by applicable law.
First-party analytics sessions and events are also intended to be governed by a configurable retention policy. A specific analytics retention period has not yet been adopted and must be confirmed through operational and legal review before full commercial launch. Attribution copied to a real lead may be retained with that lead even if the related ephemeral analytics session is later removed.
International data processing
The platform's technology providers and licensed insurance partners may operate, store data or provide support in countries other than the country where you live. As a result, personal information may be processed internationally where applicable.
Privacy and data-protection laws can differ between countries. Where required, appropriate safeguards should be used for international transfers, such as approved contractual terms or another lawful transfer mechanism. The applicable locations and safeguards should be confirmed as part of legal review before commercial launch.
Your privacy rights
Depending on the law that applies to you and the processing, you may have rights to:
- ask whether personal information about you is being processed and request access to it;
- correct inaccurate or incomplete information;
- request deletion of information;
- restrict or object to certain processing;
- receive certain information in a portable format;
- withdraw consent for future processing where processing relies on consent; and
- complain to an applicable data-protection or privacy authority.
We may need to verify your identity and clarify your request before responding. Some rights are subject to legal exceptions. If a licensed insurance partner separately controls your information, you may also need to exercise your rights directly with that partner.
Children and travel requests involving minors
The platform is not directed to children using it independently. A travel insurance request may involve a minor traveller and may include the traveller's age. Such a request should be submitted only by a parent, legal guardian or another adult authorised to provide the information and arrange the request.
Provide only information about a minor that is necessary for the insurance request. Do not enter additional identifying, health or other sensitive information about a child in free text unless a relevant licensed insurance partner lawfully requests it and provides an appropriate privacy explanation. If we learn that a child submitted personal information without appropriate authorisation, we will take reasonable steps to address or delete it as required by applicable law.
Third-party websites and services
The platform may link to websites or services operated by licensed insurance partners or other third parties. We do not control those third-party services, and this Privacy Policy does not govern them. Review the third party's privacy notice and terms before providing information directly to it.
Updates to this Privacy Policy
We may update this Privacy Policy as the MVP develops, service providers or data practices change, licensed partners are added, or legal requirements evolve. The revised version should be published on this page with an updated date. Where required by law, we will provide a more prominent notice or request fresh consent for a material change.
Contact and privacy requests
To ask a privacy question or request access, correction, deletion or another applicable right, contact The Meta Insurance through the contact channel displayed on the website at the time of your request. Please describe your request and the insurance-request type involved, but do not include a policy document or unnecessary sensitive information in the initial message.