What we collect, and what we do not

Last updated 25 October 2026. This policy covers the XactInsure ACA plan price calculator at /aca/. XactInsure is a licensed Florida health insurance agency serving Cape Coral and the surrounding Southwest Florida area. Short version: you get the whole estimate before you give us your name, your date of birth is encrypted, and we never sell your details.

1. What you can use without telling us who you are

The estimate needs four things: a ZIP code, a state, how many people are on the application, and a date of birth for each of them. None of that is your name, phone number or email address. You can run the whole estimate and close the page without giving any contact details, and no request is stored against you while you do.

2. What the calculator never asks for

No Social Security number. No health conditions, diagnoses or medications. No card or bank details. No password. Those fields do not exist on this page, the form has no field that sends them, and the server drops any of those keys if a request carries one anyway. If a page claiming to be us asks for any of them, it is not us.

3. Your date of birth, and how it is protected

Age is the biggest factor in a plan price, so the calculator asks for a date of birth for each person on the application instead of a typed age. It is used for exactly one purpose: working out that person's age on the first day of the plan year, which is the age the premium is priced at.

• Stored encrypted. If you send a form, each date of birth is encrypted before it is written down. The key is held separately from the database, so a copy of the database on its own does not expose anyone's date of birth.
• Logs carry the age, not the date. Anything we write to a log records the age at the start of the plan year and the birth year. The full date of birth is never written to a log.
• Not used for advertising. A date of birth never goes to an advertising platform from this page, and it can never be matched to a health condition here because we do not collect one.

4. What we collect when you send a form

There are two forms and both are optional: a short one directly under the quote, and a longer one after it. Between them they ask for:

• your name, or your first name on the short form — so the agent knows who to ask for;
• a phone number, and on the longer form an email address as well — either one is enough, and both are how we reply;
• a best time to call — so we ring when it suits you;
• your consent — the checkbox. The wording is versioned, and we store the exact version you agreed to, the sentence in full, and the moment you ticked it. We also store a salted hash of the IP address that ticked it. We do not store the IP address itself.

Alongside those we store the estimate you were looking at: the ZIP, the state, the county where we have one, the household size, the ages worked out from the dates of birth, an income band, and the figures the page showed you. That way, when an agent calls, they are looking at the same numbers you saw rather than a different set. The enquiry also carries the campaign parameters that brought you here (for example utm_source or a click identifier), so we can tell which advertising works.

5. Measurement, and how to turn it off

We measure how the calculator is used so we know which questions help people finish. The notice at the top of the calculator page says so, and it is on screen before any measurement tool loads. The tools are Meta's pixel and Conversions API, Google Analytics 4, and a Google Ads conversion tag.

• What is sent: which event happened (the quiz started, a quote was shown, a call button was tapped, a form was sent) and, when you submit a form with consent, a hashed version of your email, phone, name, date of birth, state and ZIP. A hash is a one-way fingerprint: it lets the platform match the conversion without the platform receiving the readable value.
• What is never sent: your income, your health, your plan tier, your subsidy amount, or anything you did not agree to by ticking the consent box. Measurement events that carry contact details are refused by our server unless consent is present.
• How to turn it off: the button beside the notice reads "Measurement is on" and turns it off in one tap. That stops all measurement from loading on this page for this browser, and nothing is sent after you tap it.

6. Why we are allowed to hold it

Because you asked us to. Both forms send only when the consent box is ticked, and the box says what we may do. We use your details to prepare and explain your estimate and to answer you. We only send marketing if you opted in separately — an estimate request is not a marketing opt-in, and you can use the calculator without requesting contact at all. Consent is not a condition of buying anything.

7. Who else sees it

• a licensed insurance agent — if you send a form, a licensed agent contacts you about the estimate. That agent handles your details under their own licence and privacy obligations.
• the XactInsure customer system — the enquiry is stored and forwarded to our own CRM so an agent can work it. It is used to answer you and for nothing else.
• the measurement platforms named in section 5 — only in the hashed form described there, and only when consent was given.

No health information is collected, so none can be shared. Your income figure is used to size the credit and is kept with the estimate, not sold. We do not rent or sell your details to data brokers or lead resellers.

8. How long we keep it

• Estimates that were never sent — kept only in your browser. The server keeps no record of an estimate until you submit a form.
• Your enquiry — kept while we are dealing with it and for as long as we need it to answer questions about your estimate. Ask us and we will delete it.
• Rate-limit records — held in memory for about a minute, then gone. They carry no name, phone number or email address.

9. Your choices

Call (239) 341-9545 or write to info@xactinsure.net and we will tell you what we hold about you, correct it, or delete it. You can withdraw consent at any time and we will stop contacting you. You do not have to give a reason.

10. Children

The calculator asks for the dates of birth of the people on the application because age sets the premium, and children are priced on the same application as their parent or guardian. The person filling the form must be 18 or older. We do not knowingly collect contact details from anyone under 18.

11. Changes

If this policy changes, the date at the top changes with it, and the consent wording is versioned so a stored request always shows the words that were on screen when it was sent. We will not apply a new purpose to details you gave us under an older policy without asking you first.

12. Contact

(239) 341-9545 · info@xactinsure.net — the same address for privacy questions, data deletion, and anything about a figure on your estimate.