← Back to WhatsMyGap

Privacy Policy

Last updated: March 19, 2026

1. Overview

Z Enterprises, LLC ("we," "us," or "our") operates WhatsMyGap. We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.

2. Information We Collect

To generate your coverage analysis, we collect:

• ZIP code — used to look up FEMA flood data and regional rate benchmarks
• Property details — type, age, roof material, construction type, square footage (anonymized, not linked to a specific address)
• Coverage details — current insurer, premium, deductible (if voluntarily provided)
• Email address — only if you opt in to rate change notifications

3. Information We Do NOT Collect

• Your name, street address, or physical location
• Phone number
• Social Security Number or financial account information
• Any personally identifiable information (PII) unless you voluntarily provide an email address

4. How We Use Your Information

• Generate your personalized coverage gap analysis and rate comparison
• Look up publicly available FEMA NFIP claims data for your ZIP code
• Send rate change notifications (email subscribers only)
• Improve the accuracy and quality of our analysis engine (aggregated, anonymous data only)

5. Cookies and Tracking

At launch, WhatsMyGap does not use tracking cookies, analytics scripts, or third-party trackers. We may introduce privacy-respecting analytics in the future and will update this policy accordingly.

6. Data Retention

• Reports are automatically deleted after 30 days
• FEMA data is cached for 7 days and refreshed from the public FEMA API
• Email subscriptions are retained until you unsubscribe

7. Data Sources

FEMA National Flood Insurance Program (NFIP) claims data is publicly available through the FEMA OpenFEMA API. Rate benchmarks are derived from publicly filed rate schedules with the Kentucky Department of Insurance (SERFF filings). No private or proprietary consumer data is used.

8. Data Sharing

We do not sell, rent, trade, or share your information with third parties. Period. Your data is used solely to provide the Service.

9. Security

We implement reasonable security measures including rate limiting, input validation, and secure headers. However, no method of electronic transmission is 100% secure.

10. Your Rights

You may:

• Use the Service without providing any personal information
• Request deletion of your email from our subscriber list at any time
• Access the Service without creating an account