Privacy Policy

1. Introduction

KR Enterprise Group ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information through our platform at krenterprisegroup.app ("KR Agency Hub" or "the Platform").

2. Information We Collect

We collect the following types of information:

a. Personal Information Provided by You

• Full name (first and last name)
• Email address
• Phone number
• National Producer Number (NPN)
• Mailing address
• Social Security Number (last 4 digits or full, stored encrypted)
• Agency and licensing information

b. Information Collected Automatically

• Browser type and version
• IP address
• Pages visited and time spent on the platform
• Device identifiers

3. How We Use Your Information

We use the information collected for the following purposes:

• To create and manage your account on the platform.
• To process and track contract requests and appointments.
• To send email notifications regarding your account and contracts.
• To send push notifications for important updates.
• To maintain compliance records and licensing information.
• To improve and maintain the platform.
• To respond to inquiries and provide support.

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Within your agency hierarchy: Your agency administrators may view your profile information and contract status as part of normal platform operations.
• Service providers we currently use:
  • SendGrid — transactional and notification email delivery. SendGrid processes only the email address, subject, and body of the messages we send you.
  • Google OAuth & Google Calendar API — used only when you explicitly connect your Google account. We request the minimum scopes required to write events, follow-ups, and reminders to your calendar and to read your basic profile (name, email, and profile picture, one time, only if you have not set a custom photo). We do not read your existing calendar entries; the sync is one-way from KR Agency Hub to Google. You can revoke access at any time from your Google Account settings or by clicking "Disconnect" in your profile.
  • Object Storage (Emergent-managed cloud storage) — hosts files you or an admin upload (event covers, carrier logos, profile photos, marketing pieces, contract attachments). Files are stored under authenticated URLs unless they are explicitly marked public (e.g. carrier logos on the /aep landing).
  • MongoDB Atlas — encrypted database hosting for platform records.
  • Emergent LLM services (OpenAI, Anthropic, Google) — used server-side for optional AI-assisted features such as email template drafting. We never send you sensitive identifiers (SSN, banking details) to LLM providers.
  • Stripe — payment processor for platform fees when applicable. Stripe handles card data directly; KR Agency Hub never stores full card numbers.
  • Twilio Programmable Messaging — used only when a recipient has voluntarily opted in to SMS. Twilio processes the recipient's mobile phone number, message body, and delivery-status metadata solely to transmit the SMS/MMS on our behalf. Twilio does not use this data for its own marketing.
• Legal compliance: We may disclose information when required by law, regulation, or legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties. Data shared with the service providers above is limited to what each provider strictly needs to deliver its service and is contractually bound by their own data-protection terms.

Mobile information, including mobile phone numbers and SMS opt-in data or consent, will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes. This restriction does not prevent disclosure to service providers acting solely on behalf of KR Enterprise Group to provide the SMS messaging service (e.g. Twilio Programmable Messaging), nor disclosures required by law.

5. Google API Services User Data Policy — Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide the calendar-sync and profile-photo import features you explicitly enabled.
• Google user data is not transferred to third parties except as necessary to provide these features, or as required by law.
• Google user data is not used for advertising purposes, and is not read by humans except when necessary to comply with the law, for aggregated and anonymized service improvements, or with your explicit consent.
• You may revoke our access at any time via your Google Account permissions page or by clicking Disconnect on your profile.

6. SMS/MMS Messaging Privacy

KR Enterprise Group operates two separate SMS/MMS programs: a Customer program for leads and prospects, and a distinct Agent program for authorized agency users. Each program uses its own Twilio Messaging Service and phone number, its own opt-in mechanism, and its own audit trail. This restriction applies to both programs:

Mobile information, including mobile phone numbers and SMS opt-in data or consent, will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes. This restriction does not prevent disclosure to service providers (such as Twilio) acting solely on behalf of KR Enterprise Group to provide the messaging service, nor disclosures required by law.

6a. Customer SMS Program

Customer SMS uses the phone number +1 (863) 624-3355. KR Enterprise Group may collect mobile telephone numbers and SMS consent records when an individual voluntarily opts in through a public KR lead/contact form at /sms-opt-in.

• Customer SMS consent is voluntary and is not a condition of purchase.
• Message frequency varies depending on the recipient's activity with KR Enterprise Group.
• Message and data rates may apply per the wireless carrier's plan.
• Reply STOP at any time to opt out (Spanish: BAJA, CANCELA, CANCELAR, ALTO, PARAR).
• Reply HELP for assistance (Spanish: AYUDA, INFORMACION).
• SMS consent records — including the exact disclosure text accepted, timestamp, source form, and phone number at the time of opt-in — are maintained for compliance and operational purposes.
• Opting out of SMS does not automatically opt the person out of other communication channels (email, phone, in-app) unless separately requested.

6b. Agent SMS Program

Agent SMS uses the phone number +1 (813) 701-2300. Authorized agents voluntarily opt in through authenticated Notification Preferences inside KR Agency Hub (Profile → Notification Preferences → Text Message). See our public program overview at /agent-sms.

• Agent SMS preference is OFF by default. Existing agents remain opted out until they affirmatively enable it.
• Consent is tied to the specific mobile number on the agent's profile at the time of opt-in. If the agent later changes their mobile number, consent does NOT automatically transfer — a new affirmative opt-in is required.
• Every opt-in, opt-out, and re-subscription event is stored in an append-only sms_consent_history array on the agent's record, including timestamp, consent version, source, and phone number.
• Agent SMS consent is voluntary and is not required to contract, do business with KR Enterprise Group, or use KR Agency Hub.
• Message frequency varies depending on the agent's active work in the platform (appointments, events, reminders, contracts).
• Message and data rates may apply per the wireless carrier's plan.
• Reply STOP at any time to opt out; reply HELP for assistance. START/UNSTOP is honored only as re-subscription for previously opted-out numbers — it is not an initial acquisition method.

Prior opt-in and opt-out events are preserved in an append-only history so we can honor a re-opt-in as a new consent event without erasing the prior opt-out record. This applies to both the Customer and Agent programs.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of sensitive data (e.g., Social Security Numbers are encrypted at rest using industry-standard encryption).
• Secure authentication using hashed passwords and JSON Web Tokens (JWT).
• Role-based access controls to limit data access to authorized users.
• Audit logging for sensitive operations (e.g., SSN access).

While we strive to protect your information, no electronic transmission or storage method is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may also retain information as required by law or for legitimate business purposes such as compliance, dispute resolution, and enforcement of agreements.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal obligations.
• Opt-out of notifications: Manage your notification preferences from your profile settings.

To exercise any of these rights, please contact us at office@krenterprisegroup.com.

10. Children's Privacy

The platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: