Xactware Privacy Notice

Last Updated: February 18, 2026

About this Privacy Notice

This Privacy Notice (“Notice”) is provided on behalf of Xactware Solutions, Inc. “Xactware” and applies to personal information we collect on all digital properties and services we operate or control, including websites, applications, shopping platforms, and customer-support channels (collectively, the “Sites”).

The Notice describes the types of personal information we obtain, how we use the personal information, and with whom we share it. We also describe the rights you may have and how you can contact us.

We may also collect personal information through our products or services that you subscribe to or license from us and this personal information will also be subject to the applicable product or service agreement, terms of use, EULA, etc.

This Notice is also supplemented by our U.S. Consumer Data Privacy Laws Notice, which is provided below.

Personal Information Collection

We are the data controller of personal information collected through the Sites. Our contact details can be found at the “How To Contact Us” section of this Notice.

How We Obtain Your Personal Information

We collect personal information when you visit our Sites, including domain names, IP addresses, browser types, and other unique device identifiers, using technologies such as cookies, non-cookie-based tokens, web server logs, tracking pixels, and web beacons. Cookies are files that websites send to your computer or other Internet-connected device to identify your browser uniquely or to store information or settings in your browser. Non-cookie-based tokens are encoded URL-based identifiers that track e-mail click-thru activity or time-sensitive password reset keys and will work in scenarios where cookies are disabled or a session has not been initiated.

Your browser may tell you when you receive certain types of cookies and how to restrict or disable certain cookies. Please note, however, that without these technologies, you may not be able to use all of the features of our Sites.

For more details regarding our collection and use of this information, please see our Cookie Policy.

We also collect personal data that you choose to provide to us through the Sites, including, but not limited to, your first and last name, physical address, e-mail address, telephone number, photographs, policy and claim information, credit card numbers, account numbers, and other billing information, such as when you:

Fill out a form on the Sites;
Sign-up to receive direct marketing communications on the Sites;
Sign-up to a feature that we offer on the Site and you provide your personal data in connection with that feature;
Attend one of our events; or
Communicate with us through the Sites. (for example, on a social media platform or by sending us an email).

We also use third-party web analytic services on our Sites, such as Eloqua, and Google Analytics. The service providers that administer those services may use cookies and web beacons to help us analyze how users use the Sites. The information collected by the cookies and web beacons (including your IP address) is available to the service providers, which use the information to evaluate your use of the Sites.

To learn how to opt-out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout

To learn how to opt-out of Eloqua web analytics, visit: https://www.oracle.com/marketingcloud/opt-status.html

Information We Obtain

If you fill out a form on our Sites, you will generally provide your name, email address, company name, and related contact details, as well as other information requested by the form, such as the reason for your inquiry or your product preferences.

If you sign up to receive electronic marketing communications from us, you will generally provide your name, email address, professional designation, and other contact information, and your product preferences.

If you sign up to a feature on our Sites, you will generally provide your name, email address, and contact information, professional designation, professional training, as well as other information necessary to access the feature.

If you purchase a product license or other service on our Site, you will generally provide necessary billing information, including your name, address, email address, credit card number, and other necessary billing information to enable us to process your payment.

Our web servers may log information such as your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. The web servers may also record information such as the address of the web page that referred you to our Sites, the IP address of the device you use to connect to the Internet, and your interaction with the Sites (such as which pages you visit).

To control which web servers collect information by automated means, we may place tags called "web beacons" that link web pages to particular web servers and their cookies. We may also collect information from your browser, such as your browsing history, and use it in conjunction with data gathered from forms, electronic marketing communications, and features to help us understand and respond to your needs.

How We Use Personal Information

We use personal information to the extent reasonably necessary to fulfill requests, as described in this Notice, and for legitimate business purposes.

For example, we use personal information to:

Process an application for our products and administer your account or transaction
Authenticate your identity to enable registration through our Sites and to provide you with access to your account
Communicate with you and respond to your product or service requests
Provide you with information that may be of interest, including newsletters, company information, marketing materials, advertisements, promotions, or surveys
Manage your preferences or privacy choices
Provide you with technical support
Operate, manage, and maintain our business
Provide, develop, enhance, maintain, repair, and improve our products and services
Personalize, advertise, and market our products and services
Conduct research, analytics, and data analysis
Undertake quality and safety assurance measures
Conduct risk and security control and monitoring
Prevent, detect and investigate security incidents, fraud, and other malicious or illegal actions
Analyze use of our Sites and debugging to identify and repair errors that impair existing intended functionality of our Sites
Comply with and enforce applicable legal and regulatory requirements, legal processes, contractual obligations, terms of use, record retention obligations, and our policies
Exercise and defend against legal claims
Process any payment transactions for our products and services

How We Share Personal Information

We may share personal information with our affiliates, subsidiaries, service providers, and other third parties. These include payment service providers, analytics providers, data hosting and storage providers, as well as auditors, regulators, and legal advisors.

We may share your name, address, email address, as well as building materials and/or total amounts estimated per material or trade category relating to estimates you create in our products with third-party material suppliers who may market relevant services to you in connection with your use of the Services. If you would like to opt out, you may do so by sending an email to opt-out@verisk.com.

We may also disclose personal information as permitted or required by law, when we believe it is necessary to do so for safety purposes, to protect our legal rights or enforce our Terms of Use, or in the event we divest, merge, or transfer all or a portion of our business or assets, such as a corporate reorganization, dissolution, or liquidation.

Retention of Personal Information

We retain your information for as long as it is necessary to fulfill the purpose(s) for which it was collected, unless a longer retention is required or permitted by law. In determining how long to retain information, we consider the purposes for which we process the information, applicable legal requirements, and our legitimate interests. The purposes for which we process information (as well as the other factors listed above) may dictate different retention periods for the same types of information.

Security Measures to Safeguard Personal Information

We have technical, administrative, and physical security measures and safeguards in place to protect your personal information from unauthorized access and improper use.

For example, the Sites that enable or require you to submit personal information online use encryption to protect that information. We also review our security procedures periodically to consider appropriate new technology and updated methods to protect personal information.

Personal Information Transfers

We may transfer personal information outside of the country or location from which it was originally collected or provided.

If you are located in the European Economic Area ("EEA"), we will comply with applicable legal requirements providing adequate protection for the transfer of personal information to recipients in countries outside of the EEA and Switzerland. In such cases, we will transfer personal information where:

The recipient country has been granted an adequacy decision by the European Commission;
The recipient is located in the United States and has ratified the Agreement on the EU-US Data Protection Framework; or
We have appropriate protections in place with respect to the transfer, such as the EU Model Contracts.

Your Privacy Rights and Choices

Verisk complies with applicable consumer and data subject rights granted under applicable law.

You may contact us as described in the "How to Contact Us" section below to exercise your rights and choices described above.

Updates to This Notice

We may make changes to this Notice from time to time. When we do, we will post the revised Notice with a new “Last Updated” date above. Changes will become effective when posted unless otherwise indicated. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.

How to Contact Us

If you have any questions or comments about this Notice or if you would like us to update information we have about you or your preferences, you may contact us by:

Email: privacy@verisk.com

In writing:

Verisk Analytics Inc.

Attention: Verisk Global Privacy Office

545 Washington Boulevard

Jersey City, NJ 07310-1686

Our EEA Representative:

Email: privacy@verisk.com

In writing:

Verisk Insurance Solutions

Attention: Verisk Global Privacy Office

Level 1, Unit 1A

3 Custom House Plaza

Harbour Master Place

I.F.S.C.

Dublin 1 Ireland

Our UK Representative:

Email: privacy@verisk.com

In writing:

Verisk Analytic Inc.

Attention: Privacy Inquiries

22 Bishopsgate London

EC2N 4BQ

U.S. CONSUMER DATA PRIVACY LAWS NOTICE

Last updated: February 18, 2026

About this Notice

This U.S. Consumer Data Privacy Laws Notice (“U.S. Consumer Notice”) supplements our Privacy Notice and applies to individuals of states including, but not limited to, California, Colorado, Connecticut, Delaware, Iowa, Tennessee, Texas, Minnesota, New Jersey, Utah, Virginia, that have enacted consumer data privacy laws (collectively, “Data Privacy Laws”). Terms used in the U.S. Consumer Notice but not defined shall have the meanings ascribed to them in the applicable Data Privacy Laws.

Personal Information Collected, Processed, and Disclosed

Identifiers	real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, and other similar identifiers
Personal information as defined under various applicable laws including California Civil Code §1798.80(e)	name, address, telephone number, email address, employment, financial information, other contact information
Characteristics of protected classifications as defined under various applicable laws	gender, age, veteran/military status
Commercial information	products or services purchased, transaction information, purchase history, financial details, payment information
Internet and similar electronic network activity	browsing history, search history, online behavior, interaction with our Sites, applications, systems and advertisements
Geolocation	approximate device location, geocode, longitude/latitude via IP address
Audio, electronic, visual, and similar information	images and audio, video or call recordings created in connection with our business activities
Professional or employment-related information	job title, work history, experience
Inferences from any of the personal information above to create a consumer profile	a consumer’s preferences, characteristics, behaviors, attitudes, abilities, or aptitudes
Sensitive personal information	debit or credit card information, precise geolocation

Sources of Personal Information

We obtain personal information from various sources.

Directly from you: for example, when you visit or communicate with us through our Sites, complete a form, attend an event, or subscribe to or license a product or service
The company or organization with which you are employed or affiliated
From our affiliates and subsidiaries
Publicly available sources
Third-party vendors and data providers

Purposes for Collecting Personal Information

We use personal information as described in our Notice and this U.S. Consumer Notice. For example, we use personal information to:

Process an application for our products and administer your account or transaction
Authenticate your identity to enable registration through our Sites and to provide you with access to your account
Communicate with you and respond to your product or service requests
Provide you with information that may be of interest, including newsletters, company information, marketing materials, advertisements, promotions, or surveys
Manage your preferences or privacy choices
Provide you with technical support
Operate, manage, and maintain our business
Provide, develop, enhance, maintain, repair, and improve our products and services
Personalize, advertise, and market our products and services
Conduct research, analytics, and data analysis
Undertake quality and safety assurance measures
Conduct risk and security control and monitoring
Prevent, detect and investigate security incidents, fraud, and other malicious or illegal actions
Analyze use of our Sites and debugging to identify and repair errors that impair existing intended functionality of our Sites
Comply with and enforce applicable legal and regulatory requirements, legal processes, contractual obligations, terms of use, record retention obligations, and our policies
Exercise and defend against legal claims
To process any payment transactions for our products and services

Use and Disclosure of Sensitive Personal Information

We use and disclose sensitive personal information:

To perform and provide our products and services;

To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information;
To resist malicious, deceptive, fraudulent, or illegal actions and to prosecute those responsible for those actions;
To ensure the physical safety of natural persons;
For short-term use including, but not limited to, non-personalized advertising shown as part of your current interaction with us;
To verify or maintain the quality or safety of our products and services;
To improve, upgrade, or enhance our products and services;
Where the collection or processing is not for the purpose of inferring characteristics about consumers.
To process any payment transactions for our products and services

Categories of Third-Parties We Disclose Personal Information to

Affiliates and subsidiaries
Service providers and sub-processors that perform services for us, our affiliates, and/or subsidiaries
Third-party integrators
Our employees, contractors, agents and representatives
Our customers who subscribe to or license our products and services
The company or organization you are employed with
independent third parties, such as material suppliers

Purposes for which We Disclose Personal Information to Third-Parties

Disclosures described below may include sharing information with third parties in connection with the provision and use of our products and services, which in limited circumstances may result in those third parties contacting you about products or services related to your use of the Services.

We disclose personal information to third-parties for the following purposes:

Records of products or services purchased, obtained, or considered (for customer support services)
Administering accounts or transactions
Marketing our products or services
Conducting analytics, data analysis, research and development, and product enhancement
Fulfillment of third-party data requests initiated by our customers
To prevent, detect, monitor, and investigate security incidents, fraud, or other malicious or illegal actions
To comply with and enforce applicable legal and regulatory requirements, legal processes, contractual obligations, terms of use, record retention obligations, and our policies
Exercising and defending against legal claims

Selling, Sharing, Targeted Advertising, or Profiling in Furtherance of Decisions that Produce Legal or Similarly Significant Effects

Retention of Personal Information

Personal Information of Minors

Our Sites are not intended for children under the age of 16 and we do not knowingly market our products or services to children. We do not knowingly collect or retain personal information from individuals under the age of 13. Visit the Federal Trade Commission website for more information about the Children’s Online Privacy Protection Act (COPPA).

Consumer Rights under Data Privacy Laws

Applicable Data Privacy Laws provide consumers with various rights that include:

The right to request the disclosure of:
the categories of personal information we collected about you;
the categories of sources from which we collected personal information about you;
the purposes for which your personal information was collected;
the categories of third parties we disclosed your personal information to;
the specific pieces of personal information we collected about you;
The right to request the deletion of personal information that we have collected from or about you, subject to certain exceptions and limitations as provided in applicable Data Privacy Laws;
The right to correct inaccuracies in your personal information;
The right to data portability.

Exercising your Rights and Appealing a Previous Decision or Determination

To exercise your rights in accordance with applicable Data Privacy Laws, or to appeal a refusal to take action on a previously submitted request to us, you or your authorized agent may contact us at:

https://secure.ethicspoint.com/domain/media/en/gui/69464/index.html
Email us at: privacy@verisk.com
1-844-845-6988

To facilitate our review and response to your request, we may ask that you provide information to verify or validate your identity and address in accordance with applicable Data Privacy Laws such as a billing statement or utility invoice. Any information collected will only be used for verification purposes. Information such as account numbers, balances, etc. should be removed from any such documents prior to submitting to us.

Exercising your Rights through an Authorized Agent or Representative

Applicable Data Privacy Laws may allow you to use an authorized agent or representative to submit requests on your behalf. In order to verify the authority to act on your behalf, the request should indicate and include the following:

Include the authorized agent’s name in the request and on whose behalf the agent or representative is acting;
Proof of authorization signed by the consumer who is the subject of the request;
Submit the information to us in the manner set forth in the “Exercising your Rights and Appealing a Previous Decision or Determination" section above.

We also reserve the right to contact you or your authorized agent or representative to confirm their authority to act on your behalf or request additional documentation in accordance with applicable Data Privacy Laws.

Your Right to Appeal

In accordance with applicable Data Privacy Laws, you may have the right to appeal our determination not to take action regarding your request. If you wish to do so, you may submit your appeal to privacy@verisk.com by specifying the specific determinations that are the subject of your appeal. Please include any additional information that may assist with our review of your appeal. If Verisk denies or declines to take action concerning your appeal, you have the right to file a complaint with your state’s Attorney General. Residents of the following states may use the links provided below.

Notice of Non-Discrimination

You will not receive discriminatory treatment or be retaliated against for exercising any of your rights as described above or in accordance with applicable Data Privacy Laws. We will not:

Deny you goods or services;
Charge you a different price or rate for goods or services, including through granting discounts and other benefits or imposing penalties;
Provide you a different level or quality of goods or services;
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Updates to This Notice

We may make changes to this U.S. Consumer Notice from time to time. When we do, we will post the revised U.S. Consumer Notice with a new “Last Updated” date above. Changes will become effective when posted unless indicated otherwise. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.

How to Contact Us

If you have questions or concerns about this U.S. Consumer Notice, you may contact: privacy@verisk.com