Privacy Policy

1. Who we are

AiM Insurance (“AiM,” “we,” “us,” or “our”) is an independent insurance negotiation service operated by Car Concierge Pro. We do not underwrite policies. We act as your advocate to review your existing or prospective insurance, gather competing quotes, and negotiate terms with licensed carriers and brokers on your behalf.

For any privacy question or request, contact us at [email protected] or +1-602-910-2500.

2. Information we collect

We collect the following categories of personal information:

Contact information: name, email address, phone number, mailing address, and preferred contact method.
Insurance information: your current declarations page, policy numbers, coverage limits, deductibles, premium amounts, renewal dates, and claims history.
Underwriting information: driver’s license number, date of birth, vehicle VINs, vehicle make/model/year, property address and characteristics, vessel or aircraft registration details, and similar information required by carriers to provide a quote.
Household information: names, dates of birth, and license details of co-insureds (spouses, dependents, named drivers) that you provide.
Communications: emails, text messages, phone call notes, and form submissions you exchange with our team.
Usage and device information: IP address, browser type and version, operating system, referring URLs, pages viewed, and time stamps. Our hosting provider records this in standard server logs, and where analytics is enabled it is also collected there (see Section 7).
Campaign information: if you arrive from an ad or a campaign link, the campaign parameters in that link and the page you landed on. This is held in your browser’s session storage and attached to an inquiry if you submit one, so we know which campaign it came from. Session storage is cleared when you close the tab, and a copy is kept in your browser’s local storage for up to 30 days so a click on an ad one week can still be matched to a form you send the next. Section 7 describes both copies. When you send a form, the inquiry may also record the page you sent it from and, if a button on the site opened the form, which button. Those two are read at the moment you send and are not kept in your browser.

You may decline to provide certain information, but doing so may prevent us from accurately quoting or negotiating your policy.

3. How we use your information

We use your personal information to:

Audit your current policy and prepare a savings comparison.
Request quotes from carriers and brokers on your behalf, and negotiate terms.
Communicate with you about your account, scheduled reviews, renewals, and savings opportunities.
Send service-related messages and, where you opt in, our newsletter or savings alerts.
Detect, investigate, and prevent fraud, abuse, and security incidents.
Comply with legal and regulatory obligations, respond to lawful requests, and enforce our Terms of Use.
Measure and improve our website, marketing, and service quality.

4. How we share your information

We share personal information only as follows:

Licensed insurance carriers and brokers: to request quotes, place coverage, and finalize policies on your behalf. Each carrier has its own privacy practices.
Service providers who process data for us.Today that means our website host (Cloudflare, which serves the site, keeps standard request logs and stores form submissions in its database service), our transactional email provider (Resend, which delivers inquiry notifications and your confirmation email), and, where it is enabled, our analytics provider (Google Analytics 4). They are contractually bound to use the information only for the services they provide to us. We do not take card or bank details through this website, so no payment processor receives anything from it.
Affiliates within the Car Concierge Pro family of brands, for the purposes described in this policy.
Legal and safety: to comply with applicable law, valid legal process, or to protect the rights, property, or safety of you, us, or others.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets. We will notify you of any such change and your choices.

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are defined under California law.

5. Data retention

We keep personal information for as long as needed to provide our services, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or de-identify it. Insurance records are typically retained for at least seven years to satisfy regulatory recordkeeping requirements.

Form submissions. What you send through a form on this site is delivered to us by email. It is also stored in a database run by our hosting provider, Cloudflare, and written there before delivery is attempted, so a submission is not lost if email delivery fails. Each stored submission has a deletion date — 365 days after it arrives, or 90 days where our spam filter held it back — and records past that date are deleted automatically the next time the site receives a form submission, so a record can outlast its date only until then. Ask us to delete a submission sooner and we will; see section 9.

Email subscriptions. If you subscribe to our emails, we keep your email address, when you subscribed, which form you used and, where the form recorded it, the wording you agreed to. If you unsubscribe, we keep your address on a do-not-email list so that we do not email you again. Neither record has an automatic deletion date.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, least-privilege access controls, and routine reviews. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you as required by law.

7. Cookies and analytics

This site sets no advertising cookies and runs no advertising or cross-site tracking pixels. Six things are true of it today:

Server logs. The site is hosted on Cloudflare Pages, which keeps standard request logs (IP address, user agent, requested URL, time stamp) for security and reliability.
Analytics, when it is switched on. Where Google Analytics 4 is configured, it measures aggregate site usage and sets its own first-party cookies to do so. When it is not configured, no analytics script loads and no analytics cookies are set at all.
Session storage, not cookies, for campaign attribution. If you arrive from a campaign link, the campaign parameters are kept in your browser’s session storage so an inquiry can be attributed to the right campaign. It never leaves your browser unless you submit a form, and it is cleared when you close the tab — subject to the 30-day copy described next.
A 30-day copy of that campaign data. The same campaign parameters and landing path are also mirrored into your browser’s local storage with a 30-day expiry, so an ad click on Monday can still be matched to a form you send a week later. It holds campaign identifiers and the page you landed on — no name, email or phone number — it never leaves your browser unless you submit a form, and it is discarded automatically after 30 days.
An unsent draft of the quote form. If you start the quote form and close it without sending, what you typed — name, email, phone number, insurance type, current premium and notes — is held in your browser’s session storage so reopening the form does not throw your work away. It stays on your device, it is deleted as soon as the form is sent or the tab is closed, and consent choices are never stored or restored: those have to be given again.
Counting flags. A few short-lived markers in session storage record that a form was started, or that a submission has already been counted, so one inquiry is not measured twice. They hold no personal information and are cleared when you close the tab.

Most browsers let you refuse or delete cookies and clear site storage. If you do, parts of the site may not work properly. We honor the Global Privacy Control (GPC) signal where required by law as an opt-out of any sale or share of personal information — though, as Section 4 says, we do not sell or share personal information in the first place.

8. Your choices

Marketing emails: you can unsubscribe at any time using the link in any marketing email or by emailing us.
SMS: reply STOP to any text message we send you and we will stop texting you. Our SMS is handled by a person rather than an automated platform, so if you would prefer a written confirmation, email [email protected] and we will confirm the opt-out and remove the number.
Account information: you may ask us to update, correct, or delete your information by contacting us.

9. Your rights (US residents)

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Oregon, Texas, and other states with consumer privacy laws), you may have the right to:

Know what personal information we hold about you.
Access a copy of that information, in a portable format.
Correct inaccurate information.
Delete personal information, subject to legal exceptions.
Opt out of any sale, sharing, or targeted advertising (we do not engage in these activities).
Limit the use of sensitive personal information for purposes beyond what is necessary to provide our service.
Appeal a denial of any privacy request, where required by law.

To exercise any of these rights, email [email protected]. We will verify your identity before responding, and we will not discriminate against you for exercising your rights.

10. Your rights (Canada & UAE residents)

Canadian residents have rights under PIPEDA and applicable provincial laws, including the right to access and correct personal information. UAE residents have rights under PDPL, including the rights to access, correct, erase, and restrict processing of personal data. Contact us to exercise these rights.

11. Children

Our services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

12. International transfers

We are based in the United States and may transfer, store, and process information outside your country of residence. We use appropriate safeguards where required by law.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will provide a more prominent notice (such as by email or an on-site banner).

14. Contact us

Questions, requests, or complaints about this policy?

Email: [email protected]
Phone: +1-602-910-2500
Web: /contact