Last updated: July 2026
VitalGrant.ai ("we," "us," or "our") is a licensed insurance agency dedicated to helping individuals, families, and businesses find affordable health, life, and supplemental insurance coverage. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our website, mobile application, and services.
We collect information you provide directly to us when you apply for coverage, create an account, or communicate with our team. This includes: (a) Personal identifiers — name, date of birth, Social Security Number, Alien Registration Number, and government-issued ID details; (b) Contact information — email address, phone number, and mailing address; (c) Financial information — annual household income, household size, and employer information; (d) Health information — self-reported medical history, citizenship status, and insurance enrollment data; (e) Business information — for business applicants, entity type, EIN, employee counts, and gross receipts. We also automatically collect technical data such as IP address, browser type, and usage patterns through cookies and similar technologies.
We use your information to: process and submit insurance applications on your behalf; match you with eligible subsidy programs, tax credits, and coverage options; communicate with you about application status, enrollment, and policy servicing; verify your identity as required by state and federal regulations; facilitate payments for premiums, application fees, and other services; comply with applicable insurance laws, HIPAA requirements, and ACA marketplace rules; send referral program updates, community event invitations, and quarterly raffle notifications; and improve our services, website functionality, and user experience. You may opt out of promotional communications at any time.
VitalGrant.ai is a licensed insurance agency subject to the Health Insurance Portability and Accountability Act (HIPAA). Any Protected Health Information (PHI) you share — including medical history, pre-existing conditions, and enrollment status — is handled in accordance with HIPAA Privacy and Security Rules. We do not use or disclose your PHI for marketing purposes without your written authorization. Your health data is never sold. Access to PHI is restricted to licensed agents and staff who need it to service your application. We maintain administrative, physical, and technical safeguards designed to protect PHI in accordance with 45 CFR Parts 160 and 164.
Your Social Security Number (SSN) is collected solely for identity verification, subsidy eligibility determination, and insurance carrier enrollment. SSNs are encrypted at rest using AES-256 encryption and in transit using TLS 1.2+. Access to SSN data is logged and restricted to authorized personnel with a legitimate business need. We never display full SSNs in our admin dashboard — only masked partial values. SSNs are retained only as long as necessary to service your active policies and comply with recordkeeping requirements, then securely purged.
We share your information only as necessary to provide our services and comply with the law. We may share with: (a) Licensed insurance carriers (e.g., Florida Blue, UnitedHealthcare, Cigna, Humana, Aetna) to facilitate enrollment and policy servicing; (b) HealthSherpa, the ACA marketplace enrollment platform, for plan quoting and enrollment; (c) Calendly, for scheduling consultations with our agents; (d) Payment processors (Base44 Payments / Wix Payments, Stripe) to process transactions; (e) Twilio, for SMS communications regarding your application; (f) Regulatory authorities, including CMS, state insurance departments, and the IRS, as required by law. We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We implement industry-standard security measures including: AES-256 encryption for sensitive data at rest; TLS 1.2+ encryption for data in transit; role-based access controls with multi-factor authentication for staff systems; regular security audits and penetration testing; continuous monitoring for unauthorized access attempts; secure, access-controlled cloud infrastructure with audit logging. Despite these measures, no system can guarantee absolute security. In the event of a data breach affecting your information, we will notify you in accordance with applicable state and federal laws.
Our website uses cookies and similar technologies to remember your preferences, analyze site traffic, and improve functionality. We use: essential cookies for authentication and session management; analytics cookies to understand how visitors use our site; and functional cookies for features like referral tracking. You can control cookies through your browser settings, but disabling them may limit certain features. We do not use cookies for targeted advertising.
Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA), Florida Digital Bill of Rights, or other state privacy statutes. These rights may include: the right to know what personal information we collect about you; the right to access and obtain a copy of your data; the right to request correction of inaccurate information; the right to request deletion of your personal information (subject to legal retention requirements); the right to opt out of the sale or sharing of your data; and the right to non-discrimination for exercising your privacy rights. To exercise any of these rights, contact us at 561-978-1034.
Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete it. Dependents under 18 may be included on a parent or guardian's application as required for household coverage determination.
We retain your personal information for as long as your insurance policies are active and for the period required by state insurance regulations (typically 7–10 years after policy termination). Application data, including documents you upload, is retained per state insurance department recordkeeping requirements. Referral and raffle entries are retained for the duration of the program plus the applicable tax reporting period. You may request earlier deletion of non-regulated data.
Our website contains links to third-party websites and integrates with third-party services (HealthSherpa, Calendly, Stripe, Twilio). We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you interact with. When you click a link to an external site, you are subject to that site's privacy policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the updated policy on this page and update the 'Last updated' date. For material changes that affect how we handle your information, we will provide notice through email or a prominent website banner. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact our Privacy Officer: VitalGrant.ai, 561-978-1034, or by mail at our registered office address. We will respond to your request within 30 days. If you are not satisfied with our response, you may file a complaint with your state's Attorney General office or the U.S. Department of Health and Human Services Office for Civil Rights.