It’s normal to want to know how much personal information you need to share before getting started.
When you use Waterlily, we may collect information you provide directly, or information provided by your financial advisor, insurance agent, estate planner, or professional on your behalf when creating an account, requesting support, or otherwise using the service. This can include your name, email address, phone number, and family or health details needed for planning. We may also collect payment information through third-party processors, records of your communications with us, transaction history, device and browser data, IP address, pages viewed, email interaction, support records, cookie and tracking data, and information derived from the data we collect.
Why we collect this information
We use your information to provide, maintain, and authenticate your access to Waterlily. We also use it to communicate with you, improve our services, support AI and service improvement, detect fraud, investigate security incidents, and comply with legal obligations. Where possible, we use de-identified or aggregated data to improve our services and models.
What we do not do with your information
We do not sell your personal information to third parties for their independent marketing purposes.
We do not share your information with insurance carriers unless you have clearly consented, such as when you ask us to submit an application, or when you access Waterlily through a carrier-sponsored benefit and consent to that sharing. Our Terms also explain this plainly: we only share your data with carriers when you ask us to.
Who may have access to your information
If you were invited to Waterlily by a Professional, or if you link your account to a Professional, that Professional may have access to your data to provide you with advice. If you invite a Professional to view your account, or if a Professional creates an account on your behalf, they may have access to your personal and financial data.
We may also share information with vendors who need access to provide services for Waterlily, such as support or infrastructure tools. These vendors are contractually prohibited from using your data for their own purposes.
When we share information with insurance carriers
We share data with insurance carriers only in these cases:
if your access to Waterlily is provided by an insurance carrier as a benefit, and you consent to that sharing during sign-up
if you or your Professional request to submit an insurance application, with separate explicit consent at the time of submission
How we protect your information
Your information is stored under our Information Security Program, which is designed to align with industry-leading standards, including HIPAA and SOC 2. We are SOC 2 Type I and Type 2 certified.
We also have data retention and disposal procedures in place, delete customer data containing confidential information when customers leave the service, and maintain a data classification policy to help ensure confidential data is properly secured and restricted to authorized personnel.
How long we keep your information
We keep information for the length of time needed to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required by law. You may also request deletion of your data by contacting hello@joinwaterlily.com.
Cookies, analytics, and advertising
We use cookies and similar technologies to improve our website, understand user behavior, support analytics, and show Waterlily ads on third-party platforms. We do not allow those vendors to use your data to market their own products to you.
A quick note
Waterlily is a technology provider designed to support planning discussions with your qualified Professional. We are not a financial, medical, or legal advisor.
In plain language
We do collect personal information needed to provide Waterlily, support planning, improve the service, and meet security and legal obligations. We do not sell your personal information, and we only share your information with insurance carriers in the specific consent-based situations described above.