US State Privacy Rights

Overview

This notice supplements our [Privacy Policy](/privacy) and describes the rights available to residents of US states with comprehensive privacy laws, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), and others as they take effect.

Categories of personal information we collect

• Identifiers: name, postal address, email, phone number, IP address
• Demographic information: age, date of birth, gender, marital status, household size
• Commercial information: insurance interest, coverage type, budget
• Health-related information: self-reported general health status, current coverage, tobacco use (used only to match you with agents; we are not a HIPAA covered entity — see the [HIPAA Disclaimer](/legal/hipaa))
• Internet activity: pages visited, referring URL, device and browser data
• Inferences: likely eligibility for subsidies, plan types of interest

How we use it

• Provide, personalize, and improve the eMavio service
• Match you with licensed insurance agents, brokers, and agencies
• Prevent fraud, abuse, and violations of our terms
• Comply with legal obligations

Sale and sharing

Under California law, our transfer of consumer lead information to licensed insurance agents and agencies in exchange for consideration is treated as a "sale" and, when used for cross-context behavioral advertising, as "sharing." We do not knowingly sell or share the personal information of consumers under 16.

You can opt out of sale/sharing at any time using the [Do Not Sell or Share My Personal Information](/legal/do-not-sell) page. We also honor the Global Privacy Control (GPC) browser signal.

Sensitive personal information

We may collect information that is considered "sensitive" under some state laws (e.g., precise geolocation, health-related responses). We use it only to provide the service you requested and for the limited purposes permitted by law. You may limit our use of sensitive personal information through the [Do Not Sell or Share](/legal/do-not-sell) page.

Your rights

Depending on your state of residence, you may have the right to:

• Know / Access: request a copy of the personal information we hold about you
• Delete: request deletion of your personal information
• Correct: request that we correct inaccurate personal information
• Portability: receive your personal information in a portable format
• Opt out of sale, sharing, and targeted advertising
• Limit use of sensitive personal information
• Non-discrimination: we will not deny service, charge different prices, or provide a lower quality of service because you exercised your rights
• Appeal: if we deny a request, you may appeal our decision

How to exercise your rights

Submit a request via the [Do Not Sell or Share My Personal Information](/legal/do-not-sell) page. We will verify your identity using information you provide plus information already on file. Authorized agents may submit requests on your behalf with written proof of authorization.

We will respond within the timeframe required by your state's law (generally 45 days, extendable once by 45 days when reasonably necessary).

Retention

We retain personal information only as long as necessary for the purposes described in our [Privacy Policy](/privacy), to comply with legal obligations, resolve disputes, and enforce our agreements. Consent records are retained for at least four (4) years after the last contact.

Contact

For privacy questions, use the [Contact page](/contact) and select "Privacy request."