Effective September 11, 2026
This Privacy Policy explains how Run Syrup (“we,” “us,” or “our”) collects, uses, discloses, and safeguards information on our insurance-hiring and lead-marketplace platform at bench.syrup.run (the “Service”). This Policy is separate from the one covering Run Syrup’s retention product for agencies, which is posted at syrup.run/privacy.
This Policy applies to three groups of Service users, on one shared account:
Every account starts as a Candidate account; a person may also activate Employer and/or Lead Buyer capabilities on that same account. Where a practice below applies to only one group, it says so.
The Service is directed to and intended only for adults (18+) residing in the United States. It is not directed to children, and we do not knowingly collect information from anyone outside the United States or under 18.
From Candidates: name, email, phone, current employer, location, years of experience; state insurance licenses (state, lines of authority, license number, expiration date, continuing-education hours); professional designations/credentials you add; job applications and pitch/interview messages; and your stealth (visibility) preference.
From Employers: company name and (optionally) AM Best rating, the roles you post (including confidential/compensation details you choose to include), team member accounts you invite, and billing information — processed by our payment processor (Stripe); we do not store your card number.
From Lead Buyers: business name, National Producer Number (NPN), states licensed, lines of authority, verticals you buy leads in, your daily purchase cap and per-vertical pricing, and billing information via Stripe (a card on file, not stored by us directly).
Collected automatically, from everyone: IP address, browser and device information, and timestamps generated by using the Service.
What we do not collect: we do not ask for or knowingly collect Social Security numbers, government ID images, financial account numbers, precise device geolocation, health information, or any other “sensitive personal information” as defined by the California Consumer Privacy Act. A license or NPN number is a professional credential you provide to be matched with work or leads, not a statutorily-sensitive identifier.
We do not use your information to make automated decisions that produce legal or similarly significant effects about you — job-postings moderation flags content for a human staff reviewer, and never auto-rejects a candidate or auto-denies employment.
Candidate profiles are masked by default in Employer search: your name shows as initials, your current employer shows as “Masked,” your location shows only at the region level, and your contact information shows as “Locked.” An Employer only sees your full, unmasked profile for a specific application once you choose to reveal it to that Employer — there is no global “public” unmasked profile. You can also set a stealth posture (masked by default for every new application, or not) in your profile settings.
Deleting your account (available from your profile) immediately hides your profile from every Employer search, sets your stealth preference to masked, withdraws every open application, and signs you out. We keep the underlying record in a deactivated (soft-deleted) state rather than immediately erasing it, so we can restore it if you ask us to and so we retain what recordkeeping law requires — see Section 8.
Billing is handled by Stripe; we store a Stripe customer ID and your subscription status, not your card number. The person who activates an Employer account is that organization’s billing owner; owners can invite additional team members, who share access to postings and search but not billing. If a subscription lapses, that organization’s active postings are paused (not deleted) and reactivate automatically on resubscribing.
We collect your NPN, states licensed, and lines of authority to attest and, where practical, verify your eligibility to receive insurance leads, and to match you only with leads in the states/verticals you’re licensed for. Billing (a card on file for per-lead purchases) is handled by Stripe.
As described in Section 3, the leads themselves belong to consumers who are not Bench account holders. A masked preview (first name, ZIP, vertical, phone-verified flag) appears in your offer inbox; purchasing an offer reveals the full record (name, phone, email) for that one lead. We monitor buyer acceptance rates for quality and may pause or revoke delivery for a sharp drop, excessive refund requests, or a licensing attestation that does not check out.
Depending on where you live, you may have some or all of the following rights under state privacy law (including the California Consumer Privacy Act as amended by the CPRA, the Texas Data Privacy and Security Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, and similar laws in other states):
How to exercise these rights: email hello@syrup.run with your name, the email on your account, and the request you are making. We may need to verify your identity before acting on a request that goes beyond deleting your own account through the profile page. You may also designate an authorized agent; we may require proof of that authorization.
Response time: we will confirm receipt within 10 business days and substantively respond within 45 calendar days, extendable by one additional 45-day period when reasonably necessary (we will tell you if we need it). There is no charge to submit or have us respond to a verifiable request.
Shine the Light (Cal. Civ. Code § 1798.83). As described in Section 3, we do not disclose personal information to third parties for their own direct-marketing purposes, so there is nothing to report under this statute; we will still confirm that on request to hello@syrup.run.
Sensitive personal information. As described in Section 1, we do not collect sensitive personal information as defined by the CCPA/CPRA.
Financial incentives. We do not offer any financial incentive, discount, or loyalty program in exchange for the collection, sale, or retention of your personal information.
Texas residents. Because our operating entity is organized in Texas, the Texas Data Privacy and Security Act applies to our processing of Texas residents’ personal data in the same way described throughout this Policy.
The Service is not directed to, and is not intended for use by, anyone under 18, and we do not knowingly collect personal information from children under 13 within the meaning of the Children’s Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13, we will delete it.
We retain account, application, posting, and purchase records for as long as needed to operate the Service, comply with legal and recordkeeping obligations, resolve disputes, and enforce our agreements. Deleting your Candidate account soft-deletes your profile immediately (Section 4); we keep the underlying record rather than immediately erasing it. If you would like a hard deletion of your data beyond what soft-delete already removes from view, email hello@syrup.run and we will handle it as a manual request.
We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, database row-level security scoping every account to its own data, and role-based access controls limiting internal staff access to what their role requires. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we experience a security breach that compromises your personal information in a way that triggers a legal notification obligation, we will notify affected individuals and any required regulators as required by applicable state breach-notification law, including Tex. Bus. & Com. Code § 521.053.
The Service is intended solely for United States residents. We do not direct the Service to, and this Policy does not address the requirements of, the European Union, the United Kingdom, Canada, or any other jurisdiction outside the United States. If you access the Service from outside the United States, you do so on your own initiative and your information will be processed in the United States.
We may update this Privacy Policy from time to time. Material changes will be reflected by a new Effective Date on this page and, where required by law, by additional notice.
Questions or privacy requests: hello@syrup.run.
Run Syrup is the retail name of Run Syrup LLC.145 Tyee Dr, PMB 58756, Point Roberts, WA 98281 · hello@syrup.run