Marta

Privacy

Privacy Policy

Effective 08/10/2026

This policy explains what Marta — the direct-to-consumer service of Commercialy, Inc., a licensed Arizona insurance agency — collects, why, and the choices you have. We do not sell your personal information.

01The short version

  • We collect only what we need to quote and service your insurance.
  • With your consent, we prefill your details from licensed data providers so you type less.
  • To give you verified prices, we and our carriers obtain consumer reports under the FCRA.
  • We encrypt your personal information at rest and in transit.
  • We never sell your personal information.
  • A licensed human reviews advice before you're bound — Marta never binds coverage on her own.

02Information we collect

Information you give us. Your name, contact details, home address, and information about your household, drivers, vehicles, and property that you share to get quotes or service a policy, plus any messages you send us.

Information we gather with your consent. When you authorize a data pull, we prefill details about your drivers, vehicles, and property from licensed data providers so you don't have to fill in forms. To produce verified prices, we and the carriers we work with obtain consumer reports — which may include credit-based insurance scores, claims history (such as CLUE/MVR-type reports), and vehicle and property data — as permitted under the Fair Credit Reporting Act (FCRA).

Information collected automatically. Basic device and usage data (such as pages viewed and general activity) to operate the service and keep it secure. We keep this minimal and use first-party measurement.

03How we use your information

  • Prepare quotes, present options, and place and service your insurance.
  • Verify your information and eligibility with data providers and carriers.
  • Prepare and deliver documents you e-sign, and cancel prior coverage when you ask us to.
  • Communicate with you about your quotes and policies (and, only if you opt in, by text).
  • Keep the service secure, prevent fraud, and meet our legal and regulatory obligations.

04Your authorizations

At key steps you're asked to authorize specific things — each is presented in plain language before you agree:

  • Data pull — gather household, vehicle, and property information to prepare your quotes.
  • Consumer reports (FCRA) — allow us and our carriers to obtain the reports needed for verified prices.
  • Text messages (optional) — receive texts about your quotes and policies. Consent is not a condition of purchase; reply STOP to opt out anytime.
  • Electronic signature (E-SIGN / UETA) — sign documents and receive disclosures electronically.

05Marta is AI — and how we use it

Marta always identifies as an AI assistant of a licensed insurance agency and never pretends to be human. Marta uses a third-party AI technology provider to understand your questions and draft explanations and advice. Information shared with the AI provider is used to generate your response, not to train public models on your personal data.

A licensed human is always in the loop. AI-drafted advice is reviewed and approved by a licensed producer — Miguel Torres, Arizona license #20652103 — before you're bound. We do not make final coverage decisions by automated means alone. You can ask to speak with a licensed agent at any time.

06How we share information

We share your information only as needed to do what you've asked:

  • Insurance carriers to rate, underwrite, place, and service your coverage.
  • Data and consumer-reporting providers to prefill and verify your information under the FCRA.
  • Service providers that operate the platform on our behalf — including cloud hosting, communications (email and SMS), electronic-signature, and our AI technology provider — under contracts that limit their use of your information to providing those services.
  • Our affiliated agency systems (Commercialy) where your policy is serviced.
  • Legal and safety — when required by law, regulation, or to protect rights and prevent fraud.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

07How we protect your information

We encrypt personal information at rest using AES-256 authenticated encryption and in transit using TLS. Access is limited to people and systems that need it, and signed documents are sealed and tamper-evident with an auditable trail. No system is perfectly secure, but we work to protect your information at every step.

08How long we keep it

We keep your information for as long as needed to provide the service, service your policy, and meet insurance-regulatory, tax, and legal recordkeeping requirements. When information is no longer needed for those purposes, we delete or de-identify it. Sensitive items captured only for a single step are purged on a short schedule.

09Your choices and rights

  • Ask us to access, correct, or delete personal information we hold about you.
  • Opt out of text messages anytime (reply STOP) and of marketing emails via the unsubscribe link.
  • Ask questions about how your information is used, or request our current list of service providers.

To make a request, email privacy@commercialy.com. We may need to verify your identity before acting. Because insurance involves regulated records, some information must be retained even after a deletion request.

10Children

Marta is for adults (18+) and is not directed to children. We do not knowingly collect information from children.

11Where we operate

We currently serve customers in Arizona and our information practices are provided under Arizona and applicable U.S. law. Spanish summaries are provided for convenience; legal documents are in English.

12Changes to this policy

We may update this policy as our service evolves. We'll revise the effective date above and, for material changes, provide additional notice. Continuing to use Marta after an update means you accept the revised policy.

We write these in plain language on purpose. If anything here conflicts with your insurance policy, a signed authorization, or applicable law, that document and the law control. Questions? privacy@commercialy.com.