Privacy Policy
Last updated: 2026-06-10
1. Who we are
FEXmagnet ("we," "us," or "our") provides a CRM and a one-line preview power dialer built for licensed life insurance agents. This policy explains what data we collect, why, who we share it with, and the choices you have. It covers the FEXmagnet application and the marketing website at fexmagnet.com. Questions go to nickg@fexmagnet.com.
A note on roles: for the contact lists you upload, you are the controller of that data and we are your processor — we hold and process it on your instructions to provide the service. For your own account and billing data, we are the controller.
2. Data we collect
- Account & profile. Your name, email, password (stored hashed by our auth provider), cell number, time zone, and the consent name shown to prospects on your calls.
- Contact data you upload. The names, phone numbers, email addresses, and notes you import by CSV or enter manually for the people you intend to call. You are responsible for having a lawful basis to hold and call every contact you load into FEXmagnet. We process this data solely to provide the service to you — we do not use your contacts for our own marketing and we do not sell them.
- Call recordings & metadata. If you enable recording, we store the recordings together with call metadata (numbers dialed, timestamps, duration, outcome/disposition, attempt counts). You control whether recording is on, and you are responsible for any consent it requires.
- Carrier-verification business data.To register your calling identity, you submit business information — including, for registered businesses, your EIN (sole proprietors may register without one). Your EIN is used solely to file your carrier registration with Twilio's Trust Hub on your behalf. It is stored in our encrypted-at-rest database, never sold, and never shared beyond Twilio for that filing.
- DNC scrub queries. When you scrub a list, the phone numbers are sent to our compliance-data provider (RealValidito) solely to check them against federal Do-Not-Call and TCPA-litigator lists. These checks are made to provide the compliance feature, not to build a profile.
- Billing data. Subscriptions are processed by Stripe. We receive plan, status, and the last four digits / card brand for display. We never store full card numbers.
- Usage data. Basic logs of how you use the app — features used, timestamps, and error/diagnostic information — to operate and improve the service.
3. Service providers (subprocessors)
We share data with the following providers only as needed to run the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase (US) | Database, authentication | Account, contacts, call metadata, recordings |
| Stripe | Payments & subscriptions | Billing identity, plan, payment status |
| Twilio | Voice, phone numbers, carrier filing | Numbers dialed, recordings, carrier-verification business data incl. EIN |
| Vercel | Application hosting | Request data needed to serve the app |
| RealValidito | DNC / litigator compliance data | Phone numbers submitted for scrubbing |
| Resend | Transactional email | Your email address and message content |
| Apple (APNs) | Push notifications (legacy iOS app) | Lead name and state included in notification payloads |
| Google / Apple (OAuth) | Optional social sign-in | Name and email when you choose social login — only if you use that sign-in method |
| GoHighLevel / Zapier | Webhook integrations you configure | Lead data is sent to your own connected account — only if you set up these integrations |
We also disclose data when required by law or legal process, and in connection with a merger, acquisition, or sale of assets. We do not sell personal information.
4. Analytics — marketing site vs. the app
On our marketing pages (the public fexmagnet.com site) we use Google Analytics, the Meta Pixel, and an Apollo website tracker to understand traffic and measure ads.
Inside the application — once you log in — we do not run these third-party advertising or analytics trackers. App usage logging is limited to what we need to operate the product, as described in Section 2.
5. Data retention
We keep your account and the data you upload for as long as your account is active. Call recordings are kept until you delete them or close your account. When you request deletion or close your account, your personal data and recordings are deleted within 30 days of account closure, except where we must retain limited records to meet a legal or accounting obligation (for example, billing records). See Section 6 for how to request deletion.
6. Your rights
You can access, correct, export, or delete the personal data we hold about you. To exercise any of these, email nickg@fexmagnet.com. You can also export your contacts from the app at any time.
California residents (CCPA/CPRA). You have the right to know what personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising. The contact lists you upload are processed on your behalf as your service provider.
7. Security
Data is encrypted in transit (TLS) and at rest. Access to your data within the application is enforced by row-level security so that one user's data is not visible to another. Sensitive fields such as your EIN are encrypted at rest and are not written to logs. No system is perfectly secure, but we take reasonable measures to protect your information.
8. Legacy lead-delivery customers
A small number of grandfathered customers still receive leads through our earlier lead-delivery service. For those accounts, we collect prospect contact details (name, phone, email, state, ZIP) from advertising forms and deliver them to the subscribing agent via their chosen channel. That lead data is shared only with the agent it is delivered to and is used only to connect the prospect with a licensed agent. New FEXmagnet accounts do not use this service — FEXmagnet does not sell leads.
9. Children's privacy
FEXmagnet is a tool for licensed insurance professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it.
10. Changes to this policy
We may update this policy. When we do, we revise the "Last updated" date above (currently version 2026-06-10). For material changes we will give notice in the app or by email. Continued use after an update means you accept the revised policy.
11. Contact
FEXmagnet
Email: nickg@fexmagnet.com