Legal

Privacy Policy

Last updated November 7, 2026

The short version: We collect the business contact details and submission information you give us so we can evaluate your niche or partner application and contact you about it. We do not sell your information, we use no advertising or cross-site tracking cookies (our web host, GoDaddy, measures site traffic with its own analytics cookies, described in section 05), and we share information only with the service providers that run this site and, when needed to evaluate or place a submission, with insurance and capacity markets and licensed partner brokers. You can pause or delete your account yourself at any time from your Account page.

01Who this policy covers

This policy explains how Waypoint Specialty ("Waypoint Specialty," "we," "us") handles information collected through Waypoint Market at waypointmarket.ai (the "Site"). The Site is intended for insurance professionals and capacity providers acting in a business capacity. It is not directed to consumers or to anyone under 18. This policy should be read together with our Terms of Use.

The Site has two kinds of account, and each login is one or the other: a submitter account, for agents, brokers, MGAs and others who bring niches to Waypoint Specialty, and a capacity partner account, for insurers, reinsurers, syndicates and other capacity providers. Both require a company email address.

02Information we collect

Account details: name, work email address, phone number, company, title, account type (submitter or capacity partner), and the date you accepted our terms. Passwords are stored by our authentication provider in hashed form and are never visible to us.
Submission details (submitter accounts): niche descriptions, states, premium and roll-over estimates, values per location, experience and expertise details, target launch dates, other key people you name, status history and any changes you make. Forms you have not finished are saved as drafts as you type so you can return to them.
Book review answers (submitter accounts): the niches you confirm (on any line of coverage), the premium ranges you pick and any niches you add.
Publicly available business information about your company, which we may use to tailor services such as your book review.
Documents you upload, such as loss runs, schedules of values and distribution plans, which are kept in private storage.
Capacity profiles (capacity partner accounts): for each profile you create, contact details, organization type, security and rating information, and the appetite, participation and delegation preferences you provide, including unfinished drafts, plus your Interested or Pass responses and any notes on niches shown to you.
Meetings: when you book a meeting with our team, the booking details (name, email, time and any notes you add) are kept by our scheduling provider and matched to your submission, along with our team's notes from the meeting.
Electronic signatures: when you sign a document on the Site, such as our mutual NDA, we record your typed signature, name, title and company, the date and time, your IP address and browser details, and a digital fingerprint of the signed document.
Information you give us about other people: colleagues and key people you name, colleagues you invite or ask to sign an NDA, and people you refer. See section 04.
Technical information: your IP address is used to limit abusive or automated traffic and is recorded with electronic signatures, and our hosting providers keep standard server logs. Our web host, GoDaddy, also measures traffic and site performance on every page (see section 05). If a security check is shown, it is provided by Cloudflare Turnstile.
How the Site is used: events such as page visits, registrations started and submissions completed, the website or campaign that referred a visit, and the page where a first visit began. If you are signed in, these may be linked to your account. When an error occurs, we record the screen, the last few actions taken and the account involved so we can fix it. Email addresses in these records are masked, and we do not record what you type into forms.
Email links: some of our emails contain links that tell us when they are clicked, for example a link to book a meeting, so we know whether to follow up.

Please do not submit personal information about insureds, claimants or other individuals. Submissions should describe niches and programs, not people.

Voice dictation. If you use a "talk it through" option to dictate an answer, the speech is converted to text by your browser's own speech recognition, which may send the audio to your browser's maker (for example Google, for Chrome) under its own terms. We receive only the resulting text.

03How we use information

To create and secure your account and let you sign in, track and edit your submissions or capacity profiles.
To review and evaluate niches and capacity profiles, contact you about them, and schedule and follow up on meetings.
To match released niches against approved capacity profiles and show partners anonymized summaries of the niches that fit.
To produce indicative, automated analyses of submissions and uploaded documents, such as program snapshots, readiness reviews and draft submission documents. These are prepared with the help of AI tools, are reviewed by our team and are not underwriting decisions. The details you submit are never shown to other submitters, and our AI provider does not use them to train its models.
To prepare an indicative book review tailored to your business, which you can confirm or correct.
To prepare, send and keep a record of documents you sign electronically.
To send emails about your account and your submissions or capacity profiles: sign-in and security messages, status updates, reminders about unfinished drafts, unsigned NDAs and meetings not yet booked, a periodic check that your capacity appetite is still current, notices of new niches that fit an approved capacity profile, and a thank-you when someone you referred joins. You can stop reminder and digest emails by pausing your account from the Account page. Messages about security and about a submission that is actively being placed will continue.
To contact people you invite, refer or name, as described in section 04.
To develop programs, products and capacity relationships, and to measure and improve the Site.
To prevent fraud, spam, automated submissions and misuse, and to keep the Site secure.
To comply with law, regulation, licensing requirements and legal process, and to protect our rights.

04How we share information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

Service providers who run the Site for us under their own security and confidentiality obligations, including our database, storage and authentication provider (Supabase), web host (GoDaddy, which also measures site traffic and performance for us), email, scheduling and file backup provider (Microsoft 365, including Microsoft Bookings; a nightly backup of uploaded documents and signed agreements is kept in Waypoint Specialty's own Microsoft 365), security-check provider (Cloudflare) and the AI service that helps produce automated analyses and draft documents (Anthropic), which processes submission content on our behalf.
Approved capacity partners, who see anonymized summaries of niches our team has released to them, such as a title, class, states and premium and value ranges, without the submitter's name or company. We share a submitter's identity or full details with a capacity partner only when both sides agree and a confidentiality agreement is in place.
Insurance and capacity markets, such as insurers, reinsurers, syndicates and other capacity providers, when needed to evaluate, structure or place a submission. Before our mutual NDA is signed, we share niche and program information without identifying you. Once it is signed and we take your program to market, the materials we send on your behalf, such as an executive summary, name your company as the program partner.
Partner brokers. If we work with a licensed partner broker to help structure or place your program, we share your contact details, submission and documents with that broker for that purpose. Partner brokers are bound by confidentiality obligations to us.
People at your own firm. Colleagues who join the Site as part of your firm's capacity team can see your firm's capacity profiles. When you invite or refer someone, we may let you know when they join or submit their first niche.
Affiliates of Waypoint Specialty, for the purposes described in this policy.
Professional advisers, such as our lawyers, accountants, auditors and insurers, under duties of confidentiality.
Legal and safety purposes, when required by law, regulation or legal process, including to insurance regulators, or to protect the rights, property or safety of Waypoint Specialty, our users or others.
Business transfers, as part of a merger, acquisition or sale of assets, subject to this policy.

Information you give us about others. If you give us details about a colleague, a key person or someone you refer, we use them to contact that person about Waypoint Market, for example to invite them, to ask them to sign an NDA or to arrange a meeting. Please share someone's details only if you are entitled to do so and they would reasonably expect to hear from us. Anyone we contact this way can ask us to stop.

05Cookies and browser storage

We use no advertising or cross-site tracking cookies. The Site keeps a small amount of information in your browser so it works properly:

your sign-in session, so you stay signed in;
a random session ID for counting visits, which is deleted when you close the browser;
the page and source of your first visit, so we know how people find the Site;
a referral code from a colleague's link, kept for up to 60 days so the right person is thanked;
invitation and NDA links you open, so the right form opens when you sign up or sign in;
unfinished answers and display preferences, so you can pick up where you left off.

Web host analytics. Our web host, GoDaddy, adds its own traffic measurement to every page of the Site. It sets analytics cookies on waypointmarket.ai (_tccl_visitor, a random visitor ID kept for up to a year, and _tccl_visit and _scc_session, which group the pages of one visit and expire after about 30 minutes) and sends GoDaddy page views, clicks and page timing, together with your browser type and IP address, so traffic and site performance can be measured. It does not include anything you type into forms, and it is not used by us for advertising. You can block or delete these cookies in your browser without affecting how the Site works.

You can clear this information at any time in your browser settings. If a security check is shown, Cloudflare may process technical signals to tell people from bots.

06Retention

We keep account, submission and capacity profile information for as long as your account is active and as needed to evaluate and service programs, maintain business records, resolve disputes and meet legal and regulatory obligations. Rate-limiting records, usage events and error reports are kept only as long as needed for those purposes.

Records of documents signed electronically, including the signature details described in section 02, are kept for as long as the agreement may be relevant, even after an account is deleted, so either party can show what was signed and when.

When you delete your account, your login, profile, submissions, drafts, uploaded documents, capacity profiles and match responses are removed from the Site. Our team receives a short notice of the deletion, including your name, company, email and what was removed, which we keep as a business record. Copies may remain in routine backups for a limited period until they are overwritten, and we may keep information we are required to keep by law or that relates to a program already being placed.

07Security

We use encryption in transit, access controls that limit each user to their own submissions, restricted team access, and monitoring for automated abuse. No system is completely secure, and we cannot guarantee the security of information you transmit.

08Your choices and rights

You can update your contact details from your Account page, and most submission or capacity profile details from your dashboard or portal. You can pause your account to stop reminder and digest emails, or delete your account yourself, from the Account page on either side of the Site. If a submission is already being placed, the Site will ask you to contact us so we can close it out properly. You can also ask us to access, correct or delete your personal information, to stop contacting you, or to close your account, through our contact form. Depending on where you live, you may have additional rights under applicable privacy laws, and we will respond to verified requests as those laws require. We will not discriminate against you for exercising your rights. We may keep information where we are required or permitted by law to do so.

09Where information is processed

The Site is operated from the United States, and information is processed in the United States and wherever our service providers operate. If you access the Site from outside the United States, you understand that your information will be transferred to and processed in the United States.

10Changes to this policy

We may update this policy from time to time. Changes take effect when posted, and the date at the top shows when it was last updated. If we make a material change, we will also let account holders know by email.

11Contact

Questions or requests about privacy: Waypoint Specialty, 3000 Bayport Drive, Suite 920, Tampa, FL 33607 · use our contact form

Waypoint Market is a program-development tool of Waypoint Specialty. · Terms of Use