Privacy Policy

Last updated: July 2026

Reshopr is a single-user tool built and operated by Ben Miller for his own personal insurance shopping. It is not a public product — this policy describes how the operator's own data is handled by the software, for the operator's own reference and for the services (like Google's Gmail API) that Reshopr connects to.

What data Reshopr stores

To solicit and compare insurance quotes on the operator's behalf, Reshopr stores:

Policy details: vehicle and home information, current coverage, current premiums.
Driver information, including date of birth and driver's license number.
The insurance carriers and agent email addresses the operator has chosen to contact.
Quotes received from those carriers, and the operator's run history (what was checked, when, and what was decided).

How sensitive fields are protected

Date of birth and driver's license number are encrypted at rest (using field-level Fernet encryption) in Reshopr's database. They are never included in outbound emails, logs, or error messages — every carrier email is automatically stripped down to only the fields needed for a quote request before it leaves the system.

How Reshopr uses Gmail

Reshopr uses the Gmail API, connected to the operator's own Gmail account, to:

Send quote-request emails to the insurance carrier agents the operator has listed.
Read the carrier replies to those quote requests, so Reshopr can parse the quoted price and coverage details.

Reshopr does not read, send, or otherwise access any other email in the operator's Gmail account beyond the quote-request threads it initiates. Gmail data is used solely to operate the insurance-shopping workflow described above and is not shared with any third party or used for advertising.

Who else sees this data

The only outside parties who receive any data are the insurance carrier agents the operator has explicitly listed, and only the minimal, non-sensitive fields needed to request a quote (e.g. vehicle year/make/model, coverage limits) — never date of birth or driver's license number. Reshopr does not sell or share data with advertisers or other third parties.

Where data is stored

Reshopr's database runs on Render's hosting infrastructure, behind bearer-token authentication that only the operator holds. It is not publicly browsable.

Data retention and deletion

Data is kept for as long as Reshopr is in active use. Since this is a single-user tool operated directly by the person whose data it stores, deletion is handled directly by the operator at the infrastructure level.

Cookies and tracking

Reshopr does not use cookies or third-party analytics/tracking. The dashboard stores an authentication token in the browser's session storage, cleared when the tab closes.

Contact

Questions about this policy can be sent to benmillerkc@gmail.com.