Privacy notice.

Operator

This website is operated by Covanu.

What we collect

Website: contact requests collect your email address, an optional name, a contact topic, your acknowledgement to be contacted, and an optional, separate marketing-updates preference.

App: the app collects what you choose to enter, including your ZIP code, county and address, who needs coverage, birth dates, sex and tobacco use, household income and tax household size, medications, healthcare providers, care needs and goals, any notes you add, and your name, email and phone number. If you upload a photo of a medication label, the app reads the medication name from it. When the app starts, it looks up your approximate city and region from your IP address through ipwho.is. We do not store your IP address. We do not ask for Social Security numbers or payment details.

Why we use it

We use website contact details to follow up about your request and, only if you opt in separately, to send occasional updates. We use app information to check plans, prices and drug and provider coverage, to answer your questions, and, when you choose, to send your details to the agent you picked. We also keep basic records to run, secure and improve the app. Contact permission is not authorization for an agent to access a Marketplace account and is not an insurance application.

AI services

Harriette, our AI guide, and our photo and name tools run on outside AI services. What you type in the chat, the medication and provider names you enter, and medication photos you upload are sent to OpenAI (GPT-4o) and to Google (Gemini API). We use them to understand your answers, read photos, standardize names and answer questions about plans. We do not send your name, email or phone number to these services unless you type them into the chat. OpenAI does not use data sent through its API to train its models by default, and keeps requests for up to 30 days to monitor for abuse unless the law requires longer. Depending on our Google plan, Google may keep Gemini requests and use them to improve its products, which can include review by people. Please do not type details into the chat that you do not want processed this way. AI answers can be wrong. Your agent confirms prices, eligibility and coverage.

Health information

Medications, healthcare providers and care needs are health information. We use them only to compare plans for you and to send them to the agent you choose. Before we store the details you send to an agent, we encrypt them with a key held in Google Cloud Key Management Service. Only that agent and authorized Covanu staff can open them, and every opening is logged. We do not use the information you enter in the app for advertising. Covanu is not a health plan, insurance company or health care provider.

Who receives your information

When you check the consent box and press Send, we share your details with the agent you chose, or in some cases a local licensed insurance agent in North Carolina. The agent uses them to contact you and help you with coverage, and keeps their own records under the rules that apply to licensed agents. We send your ZIP code, county, household ages, sex, tobacco use and income, and the medications and providers you enter, to HealthCare.gov's Marketplace service to get plan, price and coverage information. If you use your current location, we send a rounded point to the U.S. Census Bureau to find your ZIP code, and we do not store it. We also share information with the service providers listed under Processors, and when the law requires it.

Retention

App records, including the details you send to an agent, app activity logs and the record of who opened them, are set to be deleted automatically 90 days after they are created. Harriette's chat messages are not stored by Covanu. Questions about plans are kept for up to 90 days with personal details removed. The agent who receives your details keeps their own copy under their own obligations. Website contact leads are deleted when we no longer need them to follow up, and on request. Agent sign-up details are kept while the agent works with Covanu and deleted on request. If you unsubscribe, we keep a minimal one-way hashed identifier so the request stays honored.

Storage and access

Records are stored in server-only databases that are reachable only through the authenticated application. There is no public list or export. Our website uses the Google Ads tag to measure how our advertising performs. It is not added to the Covanu app. We do not use session replay or third-party behavioral analytics.

Processors

Covanu uses these service providers: Render (website and app hosting), Google Cloud (Firestore database and Cloud Key Management Service), OpenAI (AI processing), Google Gemini API (AI processing), and Resend (email delivery). Agent emails carry only a client's first name, ZIP code and county, plus a link to the Agent Portal.

Your choices

You can unsubscribe from marketing updates at any time. To ask what details we hold, to withdraw your consent, or to ask us to delete your app details, email kurt@covanu.com or use the privacy option on the contact page. Deleting your details at Covanu does not delete the copy your agent already received. Ask your agent directly for that.

Contact

Privacy questions: kurt@covanu.com.