Cincinnati Financial
Financials
40
out of 100. Number 298 of 512, counting from the worst.
Where Cincinnati Financial does well
- Renewals 0 of 20. Nothing found.
- The California Privacy Notice states they do not sell or share personal information outside of cookies, and as a GLBA-regulated insurer their customer data gets stronger protections than a typical tech company's.
- The social media terms actively warn users not to post policy numbers, payment details, claim information, or anything personally identifying — genuinely protective guidance aimed at the user, not the company.
- The notice explicitly promises no discriminatory treatment for exercising California privacy rights, and allows authorized agents to act on a consumer's behalf.
- Texting T&Cs have a clear opt-in (oral enrollment with a representative) and a simple one-word STOP opt-out.
If you use Cincinnati's bank-account verification (for paying premiums), you give up the right to join any class action, collective action, or PAGA suit against them over it — disputes can only be handled one person at a time.
The fine print
8 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
If you use Cincinnati's bank-account verification (for paying premiums), you give up the right to join any class action, collective action, or PAGA suit against them over it — disputes can only be handled one person at a time.
THE PARTIES AGREE THAT ANY CLAIMS WILL BE ADJUDICATED ON AN INDIVIDUAL BASIS, AND EACH WAIVES THE RIGHT TO PARTICIPATE IN A CLASS, COLLECTIVE, PAGA, OR OTHER JOINT ACTION WITH RESPECT TO THE CLAIMS.
Website Terms & Conditions, Yodlee Instant Account Verification §6
-
To verify your bank account for payments, you hand your bank login to a third-party aggregator (Yodlee) and grant both companies power-of-attorney-level authority to log into third-party sites as you — while the terms also disclaim responsibility for how that credential data is used or disclosed by anyone you share it with.
you hereby grant CIC and Yodlee a limited power of attorney, and you hereby appoint each of CIC and Yodlee as your true and lawful attorney-in-fact and agent, with full power of substitution and re-substitution, for you and in your name, place and stead, in any and all capacities, to access third-party internet sites, servers or documents, retrieve information, and use your information
Website Terms & Conditions, Yodlee Instant Account Verification §2
-
Deleting your account doesn't delete your data: the company can keep your information indefinitely for vague 'legal, auditing, regulatory and business purposes,' with no stated time limit.
If you request deletion of your account, Cincinnati Insurance may still retain your information for legal, auditing, regulatory and business purposes. Retention periods vary according to specific legal, auditing, regulatory and business needs.
-
There is no online delete button — you must phone customer service during business hours to delete your account, a friction barrier that keeps many users from completing deletion.
To proceed, please call, 888-242-0888, to allow us to confirm your identity before deleting your account.
-
Anything you post to a Cincinnati-sponsored social page becomes theirs forever: a permanent, worldwide, royalty-free license to use it for any purpose, with no payment and no way to revoke it.
you grant to CFC an unrestricted, irrevocable, worldwide, perpetual, royalty-free license to use, publish, reproduce, display, publicly perform, distribute, transmit and use such information and materials for any purpose, in any manner and in any media, without consideration paid to you
-
The company says it doesn't sell your data — except through cookies and tracking tech, which under California law counts as a 'sale/share.' The opt-out is buried in the site footer rather than being off by default.
We do not sell or share for cross-context behavioral advertising personal information, outside of the use of certain tracking technologies (such as cookies). In the cinfin.com footer, click Do Not Sell Or Share My Personal Information to manage your cookie preferences.
-
An insurance company that collects your SSN, bank, and health details disclaims all responsibility for harm from your confidential data traveling over the internet to them — putting the security risk of online transactions on you.
The Internet is an unsecure medium. CFC does not assume any responsibility for any harm, loss, or damage you may experience or incur by the sending of personal or confidential information over the Internet to or by CFC or its third-party online service providers.
-
They can rewrite the terms whenever they want, and it's your job to keep checking — no promise of notice before new terms take effect.
reserves the right to change the terms of use and conditions under which CFC's website is offered. You are responsible for regularly reviewing these terms and conditions.
How these were found
Documents read via browser_open on 2026-10-01: Terms & Conditions page (http://www.cinfin.com/legal-footer/terms-conditions; footer shows copyright 2026, sections crawled fresh ~17 hours before reading), Privacy Policies landing page (https://cinfin.com/legal-footer/privacy-policy), California Privacy Notice PDF (https://www.cinfin.com/medialib/files/privacypolicies/ccpa-notice.pdf, Last Updated January 2023). The Electronic Privacy Policy PDF linked from the Terms page failed to load (upstream 500 on redirect), so it was not read. Mobile Wallet T&Cs and Texting T&Cs were assessed from verbatim search-result snippets on cinfin.com, not from opening the full pages. The company Notice of Privacy Practices (insurance-subsidiary GLBA notice) link titles were seen but the full PDF text was not successfully retrieved, so no findings rely on it.
These notes come from the original draft and are not independent verification.