Privacy Policy

Your Consent

By using the Website, you consent to our collection, use and disclosure of your Personal Information as described in this Privacy Policy, and you also agree to our Terms of Use. Please review the entire Privacy Policy to learn about what type of information is gathered, how such information is used and what information may be disclosed to third parties. We also encourage you to review our Terms of Use. If you do not consent to our Privacy Policy or Terms of Use, you can choose not to use the Website or our Services or elect not to submit any personal information to Medzi.

NOTE TO CALIFORNIA RESIDENTS

Your California Privacy Rights. California Civil Code Section 1798.83 permits California residents who have provided personally identifiable information to us or our third-party advertisers and marketing partners, if any, to request certain information regarding our disclosure of personally identifiable information to third parties for direct marketing purposes. Medzi does not engage in any such sharing.

Our websites do not accept or process such Do Not Track signals or similar mechanisms. Other third party websites may keep track of your browsing activities when they provide you with content, which enables them to customize what they present to you on their websites.

COLLECTION OF INFORMATION

Personal Information

Medzi collects personal information when you use our Website or submit information through our online forms or Services. Personal information that we collect may include:

• Personally Identifiable Information (PII): Information you provide directly, such as your name, date of birth, gender, contact information (email, phone number, address), Medicare number, Medicaid number (if applicable), county, and ZIP code.
• Protected Health Information (PHI): Information related to your health, including current health conditions, medications (name, dosage, frequency), preferred doctors and specialists, and related healthcare preferences you provide.
• Usage Information: Information about how you use our Services, such as benefit priorities you select, plans you view or compare, and interactions with website features.
• Personal Code Data: If you utilize our personal code feature, we store the data associated with that code (including health information, preferences, etc.) to allow you to resume your session. Access requires verification (e.g., DOB, Medicare Last 4).
• Any additional information that you may post on the website or provide through our services.

When you access and use the Website from your mobile devices or desktop computer, we receive data from the mobile device or desktop computer you use to access the Website. This may include your location data, IP address and device type. You may manage how your mobile device, computer and browser share location information with us, as well as how your browser handles cookies and related technologies by adjusting your device privacy and security settings. Please refer to instructions provided by your mobile service provider or the manufacturer of your device or computer to learn how to adjust your settings.

Aggregate Information

Non-personally identifying information or “Aggregate Information” is information that, without the aid of additional information, cannot be directly associated with a specific person. Like most website operators, we collect certain Aggregate Information about your activities online, including referring / exit pages and URLs, computer settings, number of clicks, domain names, landing pages, pages viewed, and other such information through the use of cookies, pixel tags, Internet Protocol (IP) addresses, click-through URLs, domain name tracking and analytics. If you have voluntarily disclosed Personal Information to us, some or all of the Aggregate Information may be linked to your Personal Information.

• Cookies. A cookie is a small data file stored on your device that your browser provides to us when you visit certain web pages. We may use both session ID cookies and persistent cookies. For the session ID cookie, the data is temporarily stored on your computer, but once you close your browser the cookie terminates. A persistent cookie is a small text file stored on your hard drive for an extended period of time. This allows us to track your activities while using the Website and help improve the functionality, navigation and performance of the Website. If you do not want to store cookies on your computer, you can set your browser to refuse cookies or to alert you when cookies are being sent. However, some parts of the Website may not function properly if you choose not to accept cookies. If you are concerned that you have created a cookie in a previous visit, you can delete cookies that are already stored on your hard drive by accessing your computer's cookie file.
• Third-Party Cookies. We may engage third-party service providers, including Google, to serve ads to you about our products and services as you browse the Internet. These third-party providers may use their own cookies tags to track your online activities and purchases in order to deliver targeted advertising based on your interests.
• Internet Protocol (IP) Address. Our servers may also automatically identify your computer or mobile device by its Internet Protocol (IP) addresses. An IP address is a number that is automatically assigned to your computer by your Internet Service Provider. Your IP address does not identify you by name, however, it may reveal your geographic area and your Internet Service Provider. We may match your IP address to your Personal Information.
• Computer Profiles. We may also collect and accumulate computer profile data which will help us understand and analyze the experience of our visitors. For example, we may collect data relating to the type of browser used, operating system software, screen resolution, color capability, browser plug-ins, language settings, cookie preferences, search engine keywords and JavaScript enablement. This is generally used for site operation, security, and analytics.
• Click-Through URLS. We may send you e-mail messages with a "click-through URL" linked to the content of our Website. When you click onto one of these URLs, you will pass through our server before arriving at the destination webpage. We may track this click-through data to help us determine subscriber interest in the subject matter and measure the effectiveness of our subscriber communications. You can avoid being tracked simply by not clicking on any links or images in the e-mail.
• Domain Name Tracking. When you use the Website, we may automatically record the name of the domain from which you accessed the Website. Additionally, if you reach the Website by means of a link from another site, our computers may note the fact that you came to us from that linked site. We may also record the domain name and URL for the next website you go to after leaving the Website.

USE OF INFORMATION

Our primary purpose for collecting Personal Information and Aggregate Information (collectively "User Information") is to provide you with information, products and services related to the quoting, selection and enrollment in insurance plans. We may also use your User Information for the following purposes:

• To provide, operate, and maintain our Services.
• To personalize your experience and find Medicare plans that match your stated needs, preferences, medications, and doctors.
• To assist with the Medicare plan enrollment process if you choose to enroll through our platform.
• To facilitate the saving and retrieval of your progress using your personal code.
• To communicate with individuals, including you, or other third parties in written, electronic and verbal form, respond to inquiries, and provide customer support.
• To improve and optimize our services and Website, including through analysis of usage patterns (often using aggregated or de-identified data).
• To analyze de-identified or anonymized health information (such as conditions, medications, doctor network preferences) and plan details, potentially using AI technology services (such as those provided by Anthropic), for the purpose of improving our plan comparison algorithms, service features, and user experience. We take steps to ensure that such information cannot be used to directly identify you when processed by these services.
• To send newsletters, marketing materials, and promotional offers (where permitted by law and with your consent, if required).
• To customize the advertising and content you see.
• To verify information and eligibility.
• To maintain the security and integrity of our platform.
• To comply with legal and regulatory obligations, including HIPAA.
• For any other purpose disclosed at the point of collection or with your consent.

We may also use the information we collect on our Website as necessary to comply with legal requirements, to enforce our Terms of Use, to prevent fraud, to co-operate with law enforcement and regulatory authorities and to stop other prohibited, illegal or harmful activities.

Any other uses or disclosures of your User Information will only be made with your authorization unless we are required by applicable law, in which case we shall comply with applicable law.

You may revoke your authorization, in writing, at any time. Written revocation of authorization must be sent to the address below. Your revocation shall not affect any use or disclosure permitted by your authorization while it is in effect. We shall not be liable for any authorized use or disclosure prior to receipt of the revocation. We require a reasonable amount of time to process your revocation.

RIGHT TO INSPECT AND COPY

Subject to some restrictions, you may inspect and copy Personal Information that may be used to make decisions about you, as well as records of enrollment. If we maintain such records electronically, you have the right to request such records in electronic format. If you request copies, we may charge reasonable expenses incurred for copying and mailing the records.

RIGHT TO AMEND

If you believe Personal Information about you is incorrect or incomplete, you may ask us to amend the information. You may also access your account with us and change the records yourself, where such functionality is provided. You must provide a reason supporting your request to amend. We may deny the request in some instances. If we determine the Personal Information is inaccurate, we will correct it if permitted by law. If a third party created the information that you want to change, you should ask them to amend the information.

RIGHT TO AN ACCOUNTING OF DISCLOSURES

You have the right to request an accounting of disclosures of your Personal Information. This accounting identifies the disclosures we have made of your Personal Information other than for treatment, payment or healthcare operations, or as otherwise excluded by law. The provision of an accounting of disclosures is subject to certain restrictions. For example, it will exclude the following, among others:

• Disclosures to you as well as disclosures you have authorized.
• Disclosures made earlier than six years before the date of your request (in the case of disclosures made from an electronic health record, this period may be limited to three years before the date of your request, where applicable).
• Certain other disclosures that are excepted by law.

If you request an accounting more than once during any 12-month period, we may charge you a reasonable fee for each accounting report after the first one.

DISCLOSURE OF INFORMATION

We do not sell your personal information or protected health information to third parties.

We may share your information only in the following limited circumstances:

• With Insurance Carriers: If you explicitly choose to enroll in a Medicare plan through our Services, we will share the necessary information (PII, relevant PHI, eligibility data) with the selected insurance carrier to process your enrollment application, as permitted by you and applicable law.
• Affiliated Companies: We may share User Information with our affiliates who may use the User Information for the purposes described in this policy.
• Service Providers: We may rely upon third parties to deliver our Services to you, including for the purpose of delivering your insurance enrollment application or sharing information with us about prescription drugs you are taking, the physicians you use and your medical claims. You allow us to deliver your information to such third parties and receive information about you from such third parties in order to provide our Services. We also partner with third-party service providers for functions such as website hosting, data storage, security, analytics, marketing assistance, and sending direct mail or email. This may include providers of AI technology services (e.g., Anthropic) who may process de-identified or anonymized data to help us improve our services as described in the "USE OF INFORMATION" section. These providers are contractually obligated to protect your information, use it only for the services requested, ensure the confidentiality and security of any data they process, and comply with HIPAA where applicable. While we carefully select third parties with whom we do business, they are not under our control and we are not responsible for their improper acts or mistakes.
• Referring Parties: We may partner with third parties that refer individuals to our Services. We may share information about you, including your insurance status and savings as well as your birth date and zip code, with third parties that refer you to our Services, with your consent where required.
• With Government Agencies: As required to interact with government agencies like CMS for eligibility verification and enrollment processing purposes, or as otherwise required by law.
• Legal Disclaimer Concerning Subpoenas and Other Matters: We reserve the right to release account and User Information about you when we believe, in our sole discretion, that such release is appropriate to (1) comply with the law, legal process, or law enforcement requests; (2) protect and defend our rights, property, safety or other interests, including those of our parent company, subsidiaries, customers, equity holders or others; (3) protect against misuse or unauthorized use of our Website and to enforce or apply our Terms of Use and other agreements; and/or (4) protect the personal safety or property of our users or the public.
• Business Transitions: We reserve the right to transfer all User Information in our possession in the event Medzi goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets. Similarly, your User Information may be passed on to a successor-in-interest in the event of a reorganization, reconstruction, liquidation, bankruptcy, or administration. Users will be notified of any such change of ownership or control of their User Information if required by applicable law.

CONSENT TO ELECTRONIC COMMUNICATIONS

When using our Website or Services or sending us communications to us from your computer or mobile device, including emails, text messages and other communications, you may be communicating with us electronically. You consent to receive communications from us electronically, such as emails, texts, mobile push notices or notices and messages on this Website or through other means. You agree that all communications, including any agreements, notices, disclosures and other documentation, that we provide to you electronically satisfy any legal requirement that such communications be in writing.

The Website and Services are available only through the Internet, so you consent to conduct business electronically. Your consent to doing business electronically applies not just to Medzi, but also to Medzi's agents and affiliates.

You further agree that we may accept an electronic signature from you, and that this electronic signature will have the same effect as a physical wet signature and will appear on all records related to any Services. Your consent also applies to all communications and information that we receive from you. Your consent is voluntary and, if you consent, you still have the right to receive a paper copy of any communication, at no cost, by contacting us.

You agree that you have the ability to access, view, store, download and print communications, documents, consents, and hyperlinks we deliver or make available to you electronically through your computer or on your mobile device. You agree that all communications that we provide to you electronically satisfy any legal requirement that such communications be in writing.

You may withdraw your consent to receive communications electronically and to use an electronic signature at any time by contacting us at contact@medzi.us. If you withdraw your consent, you may be unable to apply for Services through the Website, and we may be unable to continue to process any pending applications for Services, including insurance products.

ADDITIONAL TERMS REGARDING EMAILS AND OTHER COMMUNICATIONS

By providing Medzi with a telephone number, email or other contact information when interacting with our Website or Services, you agree to receive emails at the email address you provided and/or autodialed or prerecorded informational calls or text messages at the phone number associated with your opt-in (where applicable and with your consent if required by law). While you consent to receive messages sent using an autodialer (where applicable), the foregoing shall not be interpreted to suggest or imply that any or all of Medzi's messages are sent using an automatic telephone dialing system ("ATDS" or "autodialer").

If you desire to opt out of email marketing messages, click the unsubscribe link in a marketing message email and follow any applicable instructions to confirm your opt out. We will need a reasonable amount of time to process your opt-out request, so you may receive marketing communications from us for a brief period after your opt out. After opting out of receiving marketing emails, we may continue to send you non-marketing email communications, including, for example, information about your insurance enrollment application or service updates.

If you desire to opt out of autodialed or prerecorded informational calls or text messages at the phone number associated with your opt-in, please contact us at contact@medzi.us or follow any opt-out instructions provided in the communication. We will need a reasonable amount of time to process your opt-out request.

CHILDREN'S PRIVACY

The Website and Services are intended for adult use only and are not directed towards children, minors, or anyone under the age of 18. If you are under the age of 18 (or applicable age of majority), you are not authorized to provide us with any personally identifying information. If the parent or guardian of a child under 13 (or higher age if stipulated by local law) believes that the child has provided us with any personal data, the parent or guardian of that child should contact us at the email address below and ask to have this personal information deleted from our files. We appreciate your cooperation with this federally mandated requirement (such as the Children's Online Privacy Protection Act - COPPA) and other applicable laws.

LINKS TO THIRD PARTY SITES

The Website may contain advertisements and links to sites other than our own ("Third-Party Websites"). The links to Third-Party Websites may be to advertisers, content providers or partners. This Privacy Policy does not cover the collection, use or disclosure of the information collected by these Third-Party Websites. Third-Party Websites may not follow the same privacy policies as Medzi. We have no responsibility for Third-Party Websites and provide links to Third-Party Websites solely for your convenience. Third-Party Websites may send their own cookies and pixel tags to you, and may collect information and use it in a way inconsistent with this Privacy Policy. We encourage you to review the privacy policies or statements of these Third-Party Websites to learn more about how they collect, use, and disclose information.

LOCATION, INTERNATIONAL TRANSFER, AND CHOICE OF LAW

By accessing and/or using the Website, you acknowledge and agree that Medzi operates the Website from its offices located in the United States. Medzi does not offer its goods and service to users outside the United States at this time. If you use the Website from the European Economic Area or other regions of the world with laws governing data collection and use that differ from laws of the United States, then you understand and consent to the transfer of your User Information to the United States for the uses identified above, in accordance with this Privacy Policy and the laws of the United States. You acknowledge and agree that the privacy and data security laws in place in the United States may be different from the privacy and data security laws in force in the country in which you reside. By voluntarily providing User Information, you hereby agree that you are consenting to our collection, use, transfer, processing, storage, and disclosure of such User information in accordance with this Privacy Policy and that such collection, use, storage, and disclosure shall be governed by the laws of the United States, specifically the state of Ohio, without regard to its conflict of law principles.

DATA RETENTION

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including providing the Services, facilitating session resumption via personal codes, or as required by law or regulatory obligations (which may mandate longer retention periods for health-related data). When your information is no longer needed, we will securely delete or anonymize it.

SECURITY

Medzi has implemented a comprehensive written information security program consisting of administrative, technical and physical safeguards for the protection of customer information in accordance with state and federal laws, including HIPAA security standards. These measures include data encryption, access controls, and secure storage. No transmission of data over the Internet is guaranteed to be completely secure and we cannot guarantee that your submissions to the Website or any transmissions from our server will be completely secure. It may be possible for third parties to intercept or access transmissions or private communications unlawfully. Any such transmission is done at your own risk.

MODIFICATIONS TO PRIVACY STATEMENT

We may change this Privacy Policy from time to time. When we do, we will let you know by appropriate means such as by posting the revised text on this page with a new "Last Updated" date. All changes will become effective when posted unless indicated otherwise. We encourage you to regularly check this page to review any changes we might make. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

REACHING OUT TO US

If you have any comments, questions or concerns about this Privacy Policy, or to exercise your privacy rights, please contact us by email, phone or mail at any of the following:

Medzi
6545 Market Ave North STE 100
North Canton, Ohio 44721
United States
Email: contact@medzi.us