PolicyAdvisor ChatGPT App Privacy Policy
Effective date: May 6, 2026
Last updated: May 6, 2026
This PolicyAdvisor ChatGPT App Privacy Policy explains how PolicyAdvisor Brokerage (PAB) Inc., its parent company, affiliates, and related entities, collectively “PolicyAdvisor,” “we,” “us,” or “our,” collect, use, disclose, retain, and protect personal information when you use the PolicyAdvisor app, connector, or integration within ChatGPT, referred to in this policy as the “ChatGPT App.”
This ChatGPT App Privacy Policy supplements the general PolicyAdvisor Privacy Policy, available at: https://www.policyadvisor.com/privacy-policy/. The general PolicyAdvisor Privacy Policy continues to apply when you use PolicyAdvisor’s website, quote tools, advisor services, application flows, booking pages, account features, email, SMS, telephone, or other services outside the ChatGPT App. If there is a conflict between this ChatGPT App Privacy Policy and the general PolicyAdvisor Privacy Policy regarding your use of the ChatGPT App, this ChatGPT App Privacy Policy applies to the ChatGPT App experience.
PolicyAdvisor is a licensed Canadian insurance brokerage. The ChatGPT App is designed to help users compare insurance quote estimates and related options for supported products, including term life insurance, whole life insurance, Visitors to Canada insurance, Super Visa insurance, and outbound travel insurance.
The ChatGPT App currently provides quote estimates, comparison support, widget display, and links to PolicyAdvisor-controlled pages for next steps. It does not currently collect contact information inside ChatGPT, create leads inside ChatGPT, book appointments inside ChatGPT, email quote summaries inside ChatGPT, save quotes inside ChatGPT, create accounts inside ChatGPT, or submit insurance applications inside ChatGPT.
The ChatGPT App provides quote estimates and comparison support only. It does not provide legal, tax, medical, underwriting, claims, or final coverage advice.
Quotes shown through the ChatGPT App are estimates only and are not an offer or contract of insurance. Final premiums, eligibility, coverage, and approval are subject to insurer underwriting, application review, and the applicable policy’s terms, conditions, limitations, and exclusions.
Table of content
- 1. Scope of this policy
- 2. Personal information we may collect or process through the ChatGPT App
- 3. Information we do not intentionally request through the ChatGPT App
- 4. How we use information collected or processed through the ChatGPT App
- 5. Automated tools and AI limitations
- 6. AI model training
- 7. How we share information
- 8. Consent and user choice
- 9. Communications
- 10. Minors
- 11. Third-party links, external services, and domains
- 12. Cross-border processing
- 13. Security safeguards
- 14. Retention
- 15. Accuracy
- 16. Access, correction, deletion, and privacy requests
- 17. Relationship with the general PolicyAdvisor Privacy Policy
- 18. Changes to this ChatGPT App Privacy Policy
- 19. Contact us
1. Scope of this policy
This policy applies to personal information that PolicyAdvisor receives from, collects through, or processes in connection with your use of the PolicyAdvisor ChatGPT App.
This may include information you provide in ChatGPT when you ask the ChatGPT App to retrieve quote estimates, compare supported insurance products, show insurance options, render quote results, or link you to PolicyAdvisor’s official website or licensed-advisor booking page.
This policy does not apply to:
- OpenAI’s collection, use, retention, deletion, training, or processing of your ChatGPT account data, conversation data, device data, or platform usage data;
- third-party websites or services you access through ChatGPT or through links shown in the ChatGPT App;
- insurer websites, insurer applications, insurer forms, or insurer electronic application systems;
- PolicyAdvisor website features, quote tools, advisor interactions, application flows, communications, or booking pages outside the ChatGPT App, except where expressly stated.
Your use of ChatGPT is governed by OpenAI’s own terms, privacy policies, and account-level data controls. PolicyAdvisor does not control OpenAI’s platform-level processing, model training settings, data retention, deletion practices, or use of ChatGPT conversation data before it is transmitted to PolicyAdvisor through the ChatGPT App.
Depending on your ChatGPT account type and settings, OpenAI may process information you provide in ChatGPT differently. Before using the ChatGPT App, you should review OpenAI’s applicable terms, privacy policies, and account privacy settings.
2. Personal information we may collect or process through the ChatGPT App
The personal information we may collect or process depends on how you use the ChatGPT App and which insurance product you ask about.
2.1 Quote and comparison information
To provide quote estimates and comparisons, we may collect or process information such as:
For term life insurance and whole life insurance:
- age or date of birth;
- province or territory;
- coverage amount;
- term length or payment option;
- smoker or non-smoker status;
- sex or gender, where required by the quote engine or insurer pricing rules;
- basic product preferences, such as term life, whole life, permanent coverage, cash value, dividend option, or payment duration;
- other quote-specific information you choose to provide and that is reasonably required to generate an estimate.
If you provide age rather than date of birth, the ChatGPT App or underlying quote system may derive or approximate a date of birth for quote-engine compatibility. This derived value is used for quote-estimate purposes and does not replace final application information.
For travel insurance, Visitors to Canada insurance, Super Visa insurance, and outbound travel insurance:
- traveller age;
- trip type, such as single-trip, multi-trip, Visitors to Canada, Super Visa, or outbound travel;
- travel dates, coverage start date, coverage end date, trip start date, or trip duration;
- destination, travel category, or trip destination;
- province or territory, where relevant;
- coverage amount;
- deductible selection or preference;
- traveller smoker or non-smoker status, where required for the quote;
- relationship to traveller, where relevant;
- number of travellers;
- whether the trip includes a stopover or travel through the United States, where relevant to the quote;
- pre-existing condition indicator or similar eligibility flag, where voluntarily provided or required for the quote workflow;
- other quote-specific information needed to generate or validate the estimate.
2.2 Information returned in ChatGPT responses, tool responses, and widget state
To display quote results, the ChatGPT App may return user-related quote inputs and derived quote assumptions back into ChatGPT responses, tool responses, or widget state. This may include information such as age, derived date of birth, sex or gender, smoker status, province, traveller details, relationship to traveller, destination, trip dates or duration, coverage amount, deductible, trip type, quote assumptions, applied filters, pricing drivers, quote count, quote status, and product selected.
The ChatGPT App is designed to return only information reasonably needed to display quote estimates, explain quote assumptions, render the widget, troubleshoot the quote flow, or route the user to an appropriate next step.
2.3 Contact information and external handoff
During the quote-only flow, the ChatGPT App does not currently require or collect your name, email address, phone number, mailing address, or other direct contact information inside ChatGPT.
The ChatGPT App may display links or buttons that direct you to PolicyAdvisor’s website, quote flow, booking page, or other PolicyAdvisor-controlled pages. If you choose to leave ChatGPT and provide contact information on PolicyAdvisor’s website, booking page, advisor form, quote flow, application flow, or other external PolicyAdvisor-controlled page, that information is collected and handled under the general PolicyAdvisor Privacy Policy and any notices provided in that external flow.
If PolicyAdvisor later enables features that allow users to book appointments, request follow-up, email quote results, save quotes, create leads, create accounts, or submit applications directly inside the ChatGPT App, this policy will be updated before those features are enabled.
Providing quote information through the ChatGPT App does not, by itself, subscribe you to marketing communications.
2.4 Health-related and sensitive quote information
The ChatGPT App is not designed to collect detailed health, medical, underwriting, or claims information.
PolicyAdvisor does not intentionally request through the ChatGPT App detailed medical records, physician reports, lab results, diagnosis details, prescription lists, treatment history, full underwriting history, or claims files.
The ChatGPT App may process limited health-related or eligibility-related quote inputs, such as smoker status, pre-existing condition indicators, or a limited health-related indicator showing whether a user voluntarily disclosed a medical condition or pre-existing condition. This information is used only to determine whether online quote estimates can be shown, whether advisor review is more appropriate, or whether policy wording review may be needed.
For life insurance or whole life insurance, if you voluntarily mention a health or medical condition in ChatGPT, the ChatGPT App may use that limited information only to determine that an online quote estimate may not accurately reflect your situation and to route you to a licensed PolicyAdvisor advisor or official secure application process.
For travel insurance, if you voluntarily mention a pre-existing medical condition, travel advisory issue, or complex eligibility issue, the ChatGPT App may use that limited information only to determine whether advisor review or policy wording review is appropriate.
You should provide detailed health, medical, underwriting, claims, or application information only through PolicyAdvisor’s official secure channels, an insurer’s official application process, or directly with a licensed PolicyAdvisor advisor where appropriate.
2.5 Technical, diagnostic, and usage information
When you use the ChatGPT App, PolicyAdvisor may process limited technical, diagnostic, or usage information during the active session as needed to operate, secure, test, debug, maintain, and improve the ChatGPT App. This may include:
- session ID or correlation ID;
- tool name or tool call metadata;
- product selected;
- quote request status;
- quote count or result status;
- error events;
- API success or failure status;
- approximate timing or latency;
- browser, device, platform, or user-agent information;
- app performance information;
- information needed to prevent misuse, troubleshoot errors, or maintain security.
PolicyAdvisor does not intend to collect the full ChatGPT conversation history through the ChatGPT App. The app is designed to operate on the information necessary to complete the quote, comparison, handoff, security, or support action requested by you.
Live connector session state (the active connection between your ChatGPT session and our MCP connector) is held in server memory only for the duration of that session. When the session ends or the server process restarts, that session data is discarded. Quote inputs and quote results are not stored by the ChatGPT App as long-term application records after your request is completed, except where you leave ChatGPT and provide information through a PolicyAdvisor-controlled external flow.
PolicyAdvisor may append PII-redacted audit and security event records to server log files (for example, tool names, session identifiers, timestamps, success or failure indicators, and similar operational metadata) for security, compliance, troubleshooting, and regulatory or audit obligations. These records are designed to exclude personally identifiable information through automated redaction and are not intended to retain raw quote parameters or quote results in identifiable form.
For performance monitoring while the connector process is running, the ChatGPT App may keep a rolling in-memory set of latency or timing metrics, currently capped at approximately 1,000 entries; when the cap is reached, older entries are discarded. This buffer exists only in process memory, is not a durable log of your conversation or quotes, and is cleared when the server process stops or restarts. It is not intended to store quote inputs, quote results, contact information, or full ChatGPT conversation content.
3. Information we do not intentionally request through the ChatGPT App
PolicyAdvisor does not intentionally request through the ChatGPT App:
- Social Insurance Number;
- passport number;
- driver’s licence number;
- government identification documents;
- payment card numbers;
- bank account information;
- passwords;
- one-time codes;
- API keys;
- detailed medical records;
- physician reports;
- lab results;
- full prescription lists;
- claims files;
- other highly sensitive information that is not required for quote estimates.
If such information is provided inadvertently, we may delete, redact, restrict, or avoid using it where appropriate and where permitted or required by law.
If you need to provide detailed application, underwriting, medical, payment, or identity information, you should do so only through PolicyAdvisor’s official secure website, an insurer’s official application process, or directly with a licensed PolicyAdvisor advisor.
4. How we use information collected or processed through the ChatGPT App
We may use information collected or processed through or in connection with the ChatGPT App to:
- provide quote estimates and insurance comparison results for supported products using available rate, product, or quote data;
- validate whether the information provided is sufficient for an online quote estimate;
- determine whether an online quote can be shown or whether advisor review is more appropriate;
- display required disclaimers and product-specific notices;
- show quote assumptions, applied filters, pricing drivers, and relevant next steps;
- display results within ChatGPT responses or ChatGPT App widgets;
- link you to PolicyAdvisor’s website, quote flow, booking page, or other PolicyAdvisor-controlled pages where requested or relevant;
- respond to questions, troubleshoot issues, and provide customer support;
- operate, test, maintain, secure, debug, monitor, and improve the ChatGPT App;
- detect, prevent, or investigate fraud, misuse, security incidents, or technical issues;
- create aggregated or de-identified analytics and reports that do not identify you;
- comply with legal, regulatory, audit, professional, and insurance-related obligations.
The current ChatGPT App does not collect contact information inside ChatGPT, create leads inside ChatGPT, book appointments inside ChatGPT, email quote summaries inside ChatGPT, save quotes inside ChatGPT, create accounts inside ChatGPT, or submit applications inside ChatGPT.
We do not use the ChatGPT App to make final underwriting, approval, claim, pricing, or coverage decisions. Final insurance recommendations, applications, and policy decisions may involve licensed advisors, insurers, or the applicable insurer’s underwriting and application processes.
5. Automated tools and AI limitations
The ChatGPT App may use automated tools to retrieve quote estimates, validate basic quote inputs, display comparison results, return quote assumptions, and route users to appropriate next steps.
The ChatGPT App does not make final decisions about insurance eligibility, underwriting, approval, pricing, claims, or coverage. Final decisions are made by insurers and, where applicable, through licensed advisor review, insurer underwriting, application review, and applicable policy terms.
The ChatGPT App should not be relied on as a substitute for professional advice from a licensed insurance advisor, legal advisor, tax advisor, medical professional, or insurer.
6. AI model training
PolicyAdvisor does not use personal information received by PolicyAdvisor through the ChatGPT App to train publicly available AI models.
However, your interactions with ChatGPT, including information you type before or during use of the ChatGPT App, are processed by OpenAI under OpenAI’s own terms, privacy policies, and account settings. Depending on your ChatGPT account type and data control settings, OpenAI may use or not use your ChatGPT content to improve its services. PolicyAdvisor does not control OpenAI’s collection, processing, retention, deletion, model training, or other platform-level use of information within ChatGPT.
PolicyAdvisor does not sell personal information collected through the ChatGPT App.
De-identified or aggregated information may be used for analytics, security, product improvement, compliance, and business reporting.
7. How we share information
We may share personal information collected or processed through or in connection with the ChatGPT App as described below.
7.1 Within PolicyAdvisor
We may share information with PolicyAdvisor employees, licensed advisors, contractors, consultants, affiliates, and service teams who need the information to provide quote support, advisor services, customer support, compliance oversight, security, or operational support.
7.2 With insurers, managing general agents, and insurance service providers
The ChatGPT App does not submit insurance applications to insurers or managing general agents during the quote-only flow.
If you proceed outside ChatGPT through PolicyAdvisor’s official website, advisor-assisted process, insurer application process, or another official PolicyAdvisor-controlled flow, relevant information may be shared with:
- insurers;
- managing general agents;
- underwriting or paramedical service providers;
- insurance industry databases or verification services, where applicable;
- partner organizations involved in providing the requested insurance product or service.
We do not submit an insurance application to an insurer through the ChatGPT App unless a future version expressly supports that feature and you provide the required authorization through the appropriate process.
Information you submit directly to an insurer, including through the insurer’s own website or electronic application, is governed by that insurer’s privacy policy and terms. You should review those policies before submitting information.
7.3 With service providers
We may share information with service providers that help us operate, secure, host, analyze, communicate, or improve our services. These may include cloud hosting providers, database providers, CRM systems, scheduling tools, communications providers, email and SMS providers, analytics tools, security tools, debugging and monitoring tools, software vendors, content delivery networks, and AI or automation tools used to support operations.
These service providers process information on our behalf or in connection with services they provide to us. We use contractual, technical, administrative, and organizational measures designed to protect personal information handled by service providers.
7.4 With OpenAI / ChatGPT
When you use the PolicyAdvisor ChatGPT App, your interaction occurs within ChatGPT. OpenAI may process your ChatGPT account data, conversation content, device data, usage data, and app interaction data under OpenAI’s own terms, policies, and account settings.
PolicyAdvisor receives from ChatGPT only the information made available to the ChatGPT App that is needed to respond to your request or perform the selected tool action. PolicyAdvisor does not control OpenAI’s collection, processing, retention, deletion, training, or other use of information within ChatGPT.
7.5 Legal, regulatory, and business purposes
We may disclose information where permitted or required by law, including to regulators, law enforcement, courts, government authorities, insurers, auditors, professional advisors, or other parties in connection with:
- legal or regulatory compliance;
- fraud prevention;
- investigations;
- disputes;
- corporate transactions;
- enforcement of our rights;
- protection of users, PolicyAdvisor, insurers, or the public.
7.6 Third-party marketers
We do not sell personal information collected through the ChatGPT App to third-party marketers.
We do not share personal information collected through the ChatGPT App with third-party marketers without consent.
8. Consent and user choice
By using the ChatGPT App and providing information to PolicyAdvisor through the ChatGPT App, you consent to the collection, use, and disclosure of that information for the purposes described in this ChatGPT App Privacy Policy and the general PolicyAdvisor Privacy Policy.
Depending on the sensitivity of the information and the activity involved, consent may be express or implied, as permitted by applicable law.
The current ChatGPT App quote-only flow does not collect contact information inside ChatGPT or subscribe you to marketing communications.
If you leave ChatGPT and provide information through PolicyAdvisor’s website, booking page, quote flow, application flow, advisor form, or another PolicyAdvisor-controlled channel, the consent, communication, application, and privacy terms for that external flow will apply.
We will seek express consent where required, including where you choose to:
- submit or continue an insurance application;
- request advisor follow-up;
- request marketing communications;
- book a meeting;
- create or save an account or quote;
- authorize information to be shared with an insurer or selected partner.
You may withdraw consent at any time, subject to legal, regulatory, contractual, and reasonable notice requirements. If you withdraw consent for information needed to provide a service, we may not be able to provide that service.
9. Communications
The current ChatGPT App does not send emails, SMS/text messages, or phone communications from inside ChatGPT.
If you leave ChatGPT and request advisor contact, book a meeting, create a lead, request a quote summary, save a quote, continue an application, or otherwise ask PolicyAdvisor to contact you through a PolicyAdvisor-controlled channel, we may communicate with you by phone, email, SMS/text message, voicemail, or other contact methods you provide.
Transactional communications may include appointment confirmations, quote-related communications, account messages, application updates, and service communications.
Marketing communications will be sent only where permitted by law and, where required, with your consent. You can unsubscribe from marketing emails by using the unsubscribe link in our emails or by contacting us. If you have consented to receive SMS/text marketing messages, you can opt out by replying STOP. You may still receive transactional or service-related communications necessary for your requested services, account, application, policy, or legal obligations.
10. Minors
The ChatGPT App is not directed to children under 13.
Users under the age of majority should use the ChatGPT App only with the involvement and consent of a parent, guardian, or legally authorized representative where required.
Where a quote request involves a minor, including children’s life insurance or travel insurance for a minor, any application, policy ownership, payment, advisor follow-up, or submission to an insurer must be handled by a parent, guardian, policy owner, or legally authorized person through PolicyAdvisor’s official channels.
We do not knowingly use the ChatGPT App to collect sales contact information directly from minors for advisor follow-up without appropriate consent or authorization.
11. Third-party links, external services, and domains
The ChatGPT App may display links or buttons that open PolicyAdvisor websites, quote flows, booking pages, insurer websites, OpenAI pages, or other third-party services.
The ChatGPT App may interact with or display resources from PolicyAdvisor-controlled domains and service infrastructure, such as PolicyAdvisor’s website, PolicyAdvisor APIs, content delivery or asset domains, hosting providers, logging or monitoring providers, and OpenAI/ChatGPT.
Once you leave ChatGPT or PolicyAdvisor-controlled pages, the privacy practices of the destination service may apply. You should review the privacy policies and terms of any third-party service before providing personal information.
12. Cross-border processing
PolicyAdvisor is based in Canada, but we and our service providers may process, store, access, or transfer personal information outside your province, territory, or country of residence, including in the United States and other jurisdictions.
When information is processed outside Canada, it may be subject to the laws of the jurisdiction where it is processed, including lawful access by courts, law enforcement, regulators, or national security authorities.
We remain responsible for personal information under our control and use contractual, technical, organizational, and administrative safeguards designed to protect personal information handled by service providers.
PolicyAdvisor handles personal information in accordance with applicable Canadian federal and provincial privacy laws, which may include PIPEDA and applicable provincial private-sector privacy legislation depending on the user’s location and the nature of the service.
13. Security safeguards
We use reasonable physical, technical, and administrative safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, disclosure, copying, modification, or disposal.
These safeguards may include:
- encryption or secure transmission where appropriate;
- access controls;
- input validation and security controls;
- internal policies and procedures;
- vendor controls and contractual safeguards;
- temporary monitoring and diagnostic controls;
- security reviews;
- reasonable steps to limit access to personnel and service providers who need the information;
- redaction, restriction, or minimization of personal information where appropriate.
No method of transmission over the Internet or electronic storage is completely secure. You should avoid sending highly sensitive information through ChatGPT, email, SMS, or other channels that are not intended for detailed insurance applications or underwriting.
If we become aware of a privacy breach or security incident involving personal information under our control, we will assess the incident and take steps required by applicable law. Where required, we will notify affected individuals, regulators, and other organizations or government institutions.
14. Retention
PolicyAdvisor does not store ChatGPT App quote inputs or quote results as long-term application records for the quote widget after your request is completed, except where you leave ChatGPT and provide information through a PolicyAdvisor-controlled external flow.
Session data. Live MCP connector session state is held in server memory only for the duration of your active session. When the session ends or the server restarts, that session data is discarded.
In-memory performance metrics. While the connector server process is running, a rolling in-memory buffer of up to approximately 1,000 latency or timing measurements may be retained for performance monitoring; when the cap is reached, older entries are removed. This buffer exists only in process memory, is not durable quote storage, and is cleared when the server process stops or restarts.
Redacted audit logs. PolicyAdvisor may write PII-redacted audit and security events to server log files (for example, tool invocation metadata, session start and end events, API outcomes, and error signals) for security, compliance, troubleshooting, and regulatory or audit obligations. Personally identifiable information is redacted from these records before they are written where our systems identify such fields. Retention, access, and destruction of these operational logs follow PolicyAdvisor’s internal record-keeping practices and applicable law.
If you leave ChatGPT and choose to book a call, request advisor follow-up, save a quote, request an email summary, continue an application, or otherwise become a lead or customer through a PolicyAdvisor-controlled external flow, related information may be retained as part of PolicyAdvisor’s business, insurance, compliance, and customer records in accordance with the general PolicyAdvisor Privacy Policy and applicable law.
De-identified or aggregated information may be retained for analytics, security, product improvement, compliance, and business reporting only where it does not identify you.
When personal information is no longer required, we will delete, destroy, or anonymize it in accordance with applicable law and our internal retention practices.
15. Accuracy
We rely on you to provide accurate and current information when using the ChatGPT App.
Quote estimates are based on the information provided. If the information is incomplete, inaccurate, or changes, the quote estimate, eligibility assessment, or next step shown through the ChatGPT App may be inaccurate.
Final premiums, eligibility, coverage, and approval are determined through insurer underwriting, application review, and applicable policy terms.
16. Access, correction, deletion, and privacy requests
Subject to applicable legal and regulatory requirements, you may request access to or correction of personal information that PolicyAdvisor holds about you. You may also ask questions, withdraw consent, request deletion where applicable, or make a privacy complaint.
To protect your privacy, we may need to verify your identity before responding to a request.
In some cases, we may be unable to provide access, correction, deletion, or withdrawal if doing so would conflict with legal, regulatory, contractual, audit, insurance, fraud-prevention, or record-retention obligations.
To make a request, contact our Privacy Officer:
Privacy Officer
PolicyAdvisor Brokerage (PAB) Inc.
Email: contact@policyadvisor.com
Mailing Address: #210-2030 Bristol Circle, Oakville, ON L6H 0H2
We will respond within a reasonable timeframe in accordance with applicable law.
17. Relationship with the general PolicyAdvisor Privacy Policy
This ChatGPT App Privacy Policy addresses privacy practices specific to the PolicyAdvisor ChatGPT App.
For additional information about PolicyAdvisor’s privacy practices, including website cookies, analytics, advertising, account creation, insurer application flows, SMS communications, testimonials, external links, and general service-provider practices, please review the general PolicyAdvisor Privacy Policy at: https://www.policyadvisor.com/privacy-policy/.
18. Changes to this ChatGPT App Privacy Policy
We may update this ChatGPT App Privacy Policy from time to time to reflect changes in our services, ChatGPT App functionality, legal or regulatory requirements, or privacy practices.
We will post the updated version and update the “Last updated” date. Where required by law, we will provide additional notice or obtain consent before implementing material changes.
19. Contact us
If you have questions about this ChatGPT App Privacy Policy or how PolicyAdvisor handles personal information, contact:
Privacy Officer
PolicyAdvisor Brokerage (PAB) Inc.
Email: contact@policyadvisor.com
Mailing Address: #210-2030 Bristol Circle, Oakville, ON L6H 0H2