Privacy
Last updated October 6, 2026
To get you real quotes we need real information about your people. Here is exactly what we take, who sees it, and how to get it deleted.
Who we are
Decent is a health insurance brokerage. Nick Soman is the licensed broker on your account, national producer number 19077026, licensed in California and a number of other states. You ask us to shop your group health benefits, and we go to the carriers, PEOs, and general agents who can price them.
This policy covers the information we handle when we do that work. It applies to decent.com, our quote and meeting forms, and everything we receive by email.
What we collect
A census. For each employee eligible for benefits, including anyone who waives coverage or is on COBRA, and each dependent on your plan, the fields every carrier and PEO asks for:
- First and last name
- Date of birth
- Home ZIP code
- Gender
- Relationship to the employee, such as spouse or child
- Coverage choice, such as employee only or family
The documents you already have. Your current invoice, the renewal packet, plan documents, rate sheets, and any proposal your current broker has given you.
Company details. When you request quotes, we ask for your company name, business address, ZIP code, federal tax ID (EIN), team size and coverage timing.
Employment details, for a PEO or workers' compensation quote. Job title, employment status, work location, and annual pay. Workers' compensation is priced on payroll by job classification, so no PEO can quote it without pay and job data, and we also ask your current carrier for the loss runs, meaning the claim history on your policy. Some PEO submissions need the full home address rather than just the ZIP.
Contact details for the people we work with. Names, work email addresses, and phone numbers at your company.
What we don't collect
We don't ask for Social Security numbers, member or subscriber IDs, or bank details. We don't want them. If something you send contains them, tell us and we'll delete it.
For a fully insured or PEO quote, nothing we collect is health information. It's personal information, and we treat it that way.
Claims data, if your plan is self-funded or level-funded
Self-funded and level-funded plans are priced on what your plan actually spent, so quoting one means asking your carrier or administrator for claims reports. That's normally a monthly paid-claims summary plus a large-claim report listing conditions and dollar amounts.
We ask for those reports without member names or member IDs. Where a report would identify individuals, we ask for a de-identified version first, and we won't take identified health information without a written agreement covering it. Claims reports go only to the stop-loss carriers and administrators quoting your plan.
If your plan is fully insured or you're on a PEO, this section doesn't apply to you.
Why we need it
Premiums are priced on age and location. Date of birth and ZIP are the two fields the rates are built from, and gender is used on some underwritten quotes. Without them nobody can give you a real number, only an estimate that changes when you try to buy it.
Who sees it
Decent's team handles your request. When you ask us to seek quotes, we share the information needed with the carriers, PEOs, and general agents pricing your plan. We name them for you before anything goes out, and we don't add to that list without asking you first.
Google Workspace hosts our email and the files you send us by email. HubSpot is our customer database. We keep contact details and notes there, along with the census spreadsheets, invoices, and renewal documents you upload through our quote form. Those uploads are stored as private HubSpot files attached to your contact record. Our website host processes quote submissions and sends them to HubSpot. For meeting requests and renewal reminders submitted on the website, Ploy also keeps a copy of your answers and emails the submission to Decent's site owner. Ploy, Amplitude, Alphie, LinkedIn and Cloudflare, described under "This website", see your visit to the site, and Alphie also sees whatever you type into the chat. None of them receives your census or the documents you upload.
We use Slack for internal notifications when you complete the first step of our quote form. These alerts include your name, work email address, phone number, company ZIP code, employee count range, coverage start date and a link to your HubSpot contact record. Slack does not receive your census or uploaded documents through these alerts.
We don't sell your information or use it for advertising. Other than the service providers named here and the people helping quote your plan, we don't share it without asking you first.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
This website
This site uses four outside services. None of them gets your census or the documents you upload.
Ploy runs the website for us. It sets a cookie with a random ID and records the pages you view, how far you scroll, the buttons and links you click, and when you start or send a form, with the names of its fields but not what you type.
Amplitude, an analytics service, records the same kinds of events. On every page except our quote form, it can also record a replay of a visit: what was on screen, where you moved and what you clicked. It hides what you type into any form.
Alphie runs the chat window and works out which company a visit comes from. It tells us the company, not who you are, and what it returns is partial and not always right. It sets cookies. Whatever you type into the chat goes to Alphie as well as to us, so send your census and documents through the quote form or by email, not the chat. The chat's answers come from an AI assistant and can be wrong. Check anything that matters with us before you act on it.
LinkedIn's Insight Tag records that your browser visited the site and which pages it viewed. If you're signed in to LinkedIn, LinkedIn can match the visit to your account, and we can show ads on LinkedIn to people who visited. LinkedIn shows us only counts and job and company groups, never who you are. It sets cookies. It sees the address of each page you view, but nothing you type into a form.
We use these services to improve the site, to see which companies are shopping for coverage, and, for LinkedIn's tag, to show ads on LinkedIn to people who visited. We don't sell what they collect. If your browser sends the Global Privacy Control signal, none of them loads. You can also email hello@decent.com and we'll exclude you.
The Book 15 minutes buttons open HubSpot's booking page in a new tab. What you type there goes to HubSpot, which may set cookies of its own. If you'd rather not use it, email hello@decent.com and we'll find a time that way.
Our quote form saves what you've typed in step 1 once you enter a work email, so we can follow up if you don't finish.
If you open this site from a link in one of our emails, our email software may record that you clicked it.
Cloudflare, which delivers the site, keeps standard server logs and sets a short-lived cookie, __cf_bm, that helps it tell people from automated traffic.
Ask us and we'll delete the browsing history along with the rest of your record.
How long we keep it
We keep quote requests and uploads while we work on your request. If we become your broker, we keep the census and plan documents for as long as we're your broker. We work your plan through the year rather than only at renewal, so clearing them out every January would mean asking you to send it all again.
Ask us to delete it and we will, at any point. The one exception is records a licensed broker is required to keep for a period set by state insurance law. We hold those for as long as the law says and no longer.
How we protect it
Information sent through our quote form travels over an encrypted connection. Census spreadsheets, invoices, and renewal documents uploaded there are stored as private files in HubSpot. Google Workspace encrypts the files you send by email at rest. The accounts that hold this information require two-factor authentication, and the machines we work on use full-disk encryption. Access is limited to Decent's authorized team members working on your request.
If your security team needs a vendor questionnaire filled out, send it over and we'll complete it.
Your choices
Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@decent.com and we'll take care of it.
If you're an employee of a company we're quoting, your employer gave us your information as part of shopping their benefits. You can still email us directly and we'll handle your request.
Changes
If this policy changes, the date at the top changes with it.
Contact
Decent Labs, Inc.
2261 Market Street STE 70552, San Francisco, CA 94114
Nick Soman, licensed broker · NPN 19077026
hello@decent.com