Privacy Policy
This Privacy Policy is under legal review and may change before DwellZip launches. If it changes in a way that matters, we’ll tell account holders before the change takes effect.
At a glance
- DwellZip is software that helps small businesses compare health coverage and connects them with licensed insurance agents. We are not an insurance company or an insurance agency.
- We collect what the service needs: account details, business details, and an employee list for pricing (dates of birth or ages, home ZIP codes and similar details; never names or Social Security numbers).
- Agents you ask for proposals see only an anonymous summary of your group. Your contact details and employee list go only to the agency you choose or that invited you (your agency of record).
- We don’t sell personal information, don’t share it for advertising, and don’t use advertising trackers or third-party cookies.
- You can ask to see, correct or delete your information by emailing [email protected].
1. Who we are and what this policy covers
This Privacy Policy explains how Dwellzip Inc. (“DwellZip,” “we,” “us” or “our”), a Michigan corporation, collects, uses, shares and protects information when you visit dwellzip.com and its subdomains (the “Site”) or use DwellZip’s comparison tools, proposal board and agent accounts (together, the “Services”). We serve businesses in California, Florida, Michigan, Texas and Virginia.
This policy covers information DwellZip handles as a technology platform. It does not replace the privacy practices or notices of insurance carriers, insurance agencies (including your agency of record, which is a separate licensed business), employer health plans, plan administrators or government health insurance marketplaces.
2. Information we collect
- Account and contact information: your name, email address, phone number if you give one, your role, and your password (stored only as a one-way scrambled hash). Staff and agent accounts also have two-step sign-in settings.
- Business information: the business name, ZIP code and county, industry, number of employees, and what kind of coverage you’re looking for.
- Employee lists: for each employee and covered family member, date of birth or age, home ZIP code, relationship to the employee, whether they’re enrolling and tobacco use; optionally sex, hours worked, full- or part-time status and pay (pay is used only to test whether an ICHRA allowance is affordable). We don’t ask for names or Social Security numbers, and we replace payroll IDs with our own. Because dates of birth and ZIP codes can still identify people, we protect employee lists as sensitive, health-related information.
- Agent information: your name, agency, contact details, National Producer Number (NPN), state license numbers and lines of authority, your attestation, the results of our license checks, your proposals (including attached carrier quotes), your compensation disclosure and your subscription status. Card payments are handled by our payment processor; we don’t store card numbers.
- Launch sign-ups: your email address and, if you choose, your first name, business name, ZIP code, how many people work at the business and whether it offers coverage, plus the wording you agreed to and when.
- Activity: estimates you run, proposal requests and the consents you give (with the wording’s version and the time), plans or allowances you choose and their progress, and messages and notifications.
- Device and log information: your network (IP) address, browser type and the date and time of sign-ins and changes, kept in a security log; and how you first reached us (see section 7).
- Public business records: for market research we use public state business filings (for example from the Texas Comptroller and the Florida Division of Corporations), which can include a business’s name, address, industry and listed officers, and U.S. Census Bureau statistics, which contain no personal information.
Please don’t enter Social Security numbers, medical records, diagnoses, claims or other health details anywhere in DwellZip; no feature asks for them. Only enter information about employees or anyone else if you have the authority to do so and have given any notices the law requires.
3. Where information comes from
- From you, when you use a form, upload or type an employee list, or send a proposal.
- From your business or agency: an employer or its authorized staff enters the employee list; an agency can invite a business it already serves.
- Automatically, from your browser and our systems when you use the Services (section 7).
- From public sources: state insurance license lookups and the National Insurance Producer Registry, to check agents’ licenses; public state business filings; and U.S. Census Bureau statistics.
4. How we use information
- To run accounts, sign you in securely and answer support requests.
- To look up the rates carriers file with regulators for your group and show plans side by side, how the cost could be split, and how an ICHRA allowance compares. DwellZip doesn’t set or change prices.
- When you ask, to share an anonymous summary of your group with licensed agents in your state and manage their proposals; and to send your plan choice to your agency of record.
- To check that agents hold active licenses before they can use DwellZip.
- To send account emails and notifications and, if you signed up for them, launch news and guides.
- To count, in totals only, which pages, partners and campaigns bring visitors, and how far they get.
- To keep the Services secure, prevent fraud and misuse, and enforce our terms.
- To meet legal and regulatory duties and respond to lawful requests.
We don’t use employee lists for marketing.
6. Anonymous proposal requests
When you ask agents for proposals, the agents who can see your request get a summary: county, pricing region, industry, number of employees, age ranges and family sizes. They don’t see your business name, ZIP code, contact details, anyone’s name or anyone’s date of birth.
Before anything is shared, you tick a box that says exactly what will be shared; we record the wording’s version and the time. Agents can’t contact you unless you choose them, and they agree not to try to identify you. Only the agent you choose receives your contact details and employee list.
This design limits what agents see, but we can’t promise that a summary could never be linked to your business, for example if a group’s mix of location, industry and ages is unusual.
8. How long we keep information
- Quick estimates: the ZIP code and ages you enter are not stored; we keep only a count with the state and a group-size range.
- Accounts, businesses and employee lists: while the account is open, and afterwards as long as needed to meet legal, regulatory and insurance record-keeping duties.
- Security and audit logs: as long as the law requires.
- Launch sign-ups: until you unsubscribe or ask us to delete them, or two years after DwellZip opens in your state if you haven’t created an account.
- Public business records: replaced when the public source is refreshed. If a business asks us not to contact it, we keep that request so it’s honored after each refresh.
When we no longer need information, we delete it or remove what identifies people. Copies in backups are removed as those backups expire. To ask us to delete your information, email [email protected].
9. How we protect information
- Two-step sign-in for every agency, admin and compliance account; limits on sign-in attempts; and automatic sign-out after 15 minutes without activity.
- Each person sees only what their role allows: agencies see only their own clients, and businesses only their own information.
- An audit log of who viewed or changed what, and when, which can’t be edited.
- Uploaded files are checked for viruses, and our emails never include employee details; they link back to DwellZip instead.
- Information is encrypted in transit (HTTPS).
No system is perfectly secure. Please keep your password and authenticator device safe, and tell us right away at [email protected] if you think your account has been misused.
10. Your privacy rights
Depending on where you live and the information involved, state privacy laws (such as California’s CCPA, Virginia’s Consumer Data Protection Act and Texas’s Data Privacy and Security Act) may give you the right to:
- confirm whether we process your information and get a copy of it;
- correct information that’s wrong;
- have your information deleted;
- get a copy in a format you can take elsewhere; and
- opt out of targeted advertising, the sale of personal information and certain profiling. DwellZip doesn’t do any of these.
To make a request, email [email protected]. We’ll confirm your identity before acting, and you can use an authorized agent. We’ll reply within 45 days, or tell you if we need up to 45 more days and why. We won’t treat you differently for using your rights. Some laws exempt certain information, such as information protected under HIPAA or business contact information, and some information must be kept to meet legal duties.
If we decline your request, you can appeal by replying with the subject “Privacy Appeal.” We’ll answer within 60 days. If you’re not satisfied, you can contact your state attorney general.
California residents: DwellZip doesn’t sell or share personal information as California law defines those terms, so there’s nothing to opt out of; you can still use the rights above. Virginia and Texas residents can make requests the same way.
11. Health information and HIPAA
DwellZip is a technology platform, not a health insurance company, health care provider or other HIPAA covered entity. Whether HIPAA applies to a particular DwellZip service depends on the arrangements and the organizations involved. Where an arrangement makes DwellZip a business associate, we sign a Business Associate Agreement (BAA) before handling the information.
Even where HIPAA doesn’t apply, other laws may protect information in DwellZip, such as the Texas Medical Records Privacy Act and the Federal Trade Commission’s Health Breach Notification Rule. Please don’t enter medical histories, treatment details or claims anywhere in DwellZip.
12. Children
DwellZip is a service for businesses. It isn’t meant for children, and we don’t knowingly collect information from children under 13. Employee lists can include the dates of birth of employees’ children, entered by the employer to price family coverage; we treat that information as part of the employee list and protect it the same way.
13. Other websites
DwellZip links to other sites, such as carriers, government agencies and the sources cited in our guides. We aren’t responsible for their privacy practices; please read their policies.
14. Changes to this policy
When we change this policy, we post the new version here with a new date and keep earlier versions available below. If a change materially affects how we use information you’ve already given us, we’ll tell account holders in the app or by email before it takes effect, and ask for your consent where the law requires it.
Contact us
- Privacy questions and requests: [email protected]
- General support: [email protected]
- Compliance concerns: [email protected]