Privacy Policy

Last updated: April 9, 2026

Part 500 Filing ("we," "us," or "our") is a compliance documentation preparation service for entities subject to NYDFS 23 NYCRR Part 500. This privacy policy explains how we collect, use, and protect your information.

Information We Collect

When you purchase and use our service, we collect:

• Business information: Business name, address, contact name, phone number, email address, and NY insurance license information
• Compliance data: Information about your cybersecurity practices, systems, data handling, and current compliance status as provided through our intake questionnaire
• Payment information: Processed securely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers.

How We Use Your Information

We use the information you provide solely to:

• Prepare your customized NYDFS Part 500 compliance documentation package
• Communicate with you about your order, deliverables, and any questions about your filing
• Process your payment
• Improve our service quality and compliance document templates

We do not use your information for marketing purposes, nor do we share it with third parties for their marketing use.

Information Sharing

We do not sell, trade, or rent your personal information to anyone. We share information only with the following service providers who assist in delivering our service:

• Stripe — for secure payment processing
• Brevo (SMTP) — for transactional email delivery (order confirmations, document delivery)

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure payment processing through Stripe (PCI DSS compliant)
• Access controls limiting who can view your intake data
• Secure server infrastructure

Data Retention

We retain your compliance documentation and intake data for 5 years from the date of service, consistent with NYDFS Part 500 record-keeping requirements (Section 500.1(g)). This ensures your records are available if needed for regulatory inquiries or future filing reference.

Payment records are retained as required by applicable tax and financial regulations.

You may request deletion of your data at any time by contacting us. Please note that deletion may affect our ability to provide support for your compliance documentation and we may be required to retain certain records for legal compliance.

Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal retention requirements)
• Opt out of non-essential communications

Contact

For privacy-related inquiries, contact: [email protected]