Privacy Policy
Last updated: August 2026
Who we are
Cilantro Risk ("Cilantro", "we", "us") is a commercial insurance brokerage. This policy describes how we collect, use, and share information when you visit cilantrorisk.com, use the Cilantro client portal, or work with us as a client or prospective client.
Information we collect
Information you provide. When you request a coverage review, create an account, or contact us, we collect the details you submit: your name, work email, company name, and the insurance documents you upload (for example policies, applications, quotes, and schedules). If you message us or a broker through the portal, we keep those communications.
Information collected automatically. We collect basic technical data used to operate and secure the service, such as IP address, browser and device type, and the pages you visit. On our public marketing pages we use analytics cookies as described in the cookies section below.
Information from our service providers. Our sign-in provider gives us your account email and sign-in activity so we can authenticate you.
How we use information
We use your documents and information to provide brokerage services: producing your coverage analysis, preparing submissions to insurers you ask us to approach, communicating with you, and operating, securing, and improving the service.
We use AI systems to read and extract information from the documents you share so that coverage can be summarized and compared. Documents are processed by our cloud providers under agreements that restrict their use of your data; we do not allow them to use your documents to train their models. AI output supports, and never replaces, review by licensed insurance professionals, and we do not use automated systems to make final coverage or eligibility decisions.
We may use information in de-identified and aggregated form, meaning it is not tied to you or your organization, to build market benchmarks that help us analyze coverage across comparable businesses.
How we share information
We do not sell your personal information. We share information only in the following cases:
With insurers, wholesalers, and other intermediaries when you ask us to market your risk or obtain quotes on your behalf. This is the core of what a broker does and only happens in connection with your placement.
With service providers that help us run Cilantro, such as cloud hosting, authentication, and email delivery, under confidentiality obligations.
With professional advisors, or where required by law, legal process, or to protect our rights.
As part of a corporate transaction such as a merger or acquisition, in which case this policy continues to apply to your information.
Cookies and analytics
We use essential cookies to keep you signed in to the client portal. On our public marketing pages we use Google Analytics to understand how visitors use the site; these analytics cookies are not used on portal pages that identify our clients, and we do not use advertising cookies or sell or share your information for advertising.
You can turn analytics off for your browser using the control below, and most browsers let you block or delete cookies in their settings. We also honor the Global Privacy Control signal: if your browser sends it, analytics stay off automatically. Turning analytics off does not affect your ability to use the site or the portal.
Retention
We retain the documents and analysis associated with your organization so your reports remain available to you and to support the de-identified benchmarking described above. We do not guarantee automatic deletion on a fixed schedule. Insurance regulations also require us to retain certain placement records for a number of years, so some information cannot be deleted earlier.
Anonymous, abandoned uploads that are never tied to an organization are deleted automatically after a short period.
Security
We take reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and hosting on established cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your choices and rights
You can request access to, correction of, or deletion of your information at any time by contacting us at hello@cilantrorisk.com. We will honor deletion requests except where we are required to retain information for legal, regulatory, or operational reasons.
Marketing and product emails from us include an unsubscribe link, and you can opt out of them at any time. We may still send administrative messages about your account or an active placement.
Depending on where you live, you may have additional rights under state privacy laws. We honor those rights and do not discriminate against you for exercising them.
Children
Our services are designed for businesses and are not directed to children. We do not knowingly collect information from anyone under 16.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email or through the portal.
Contact
Questions about this policy? Email hello@cilantrorisk.com and we will respond.
This page is provided for general information and is not legal advice. It is a draft pending review.