Privacy Policy

Information We Collect

When you visit our website, request a quote, or enroll in a plan, we may collect the following types of information:

• Personal details such as your name, email address, phone number, and mailing address
• Demographic information including date of birth and household size
• Health-related information necessary for plan enrollment and administration
• Website usage data including pages visited, time on site, and referring URLs
• Device and browser information collected through cookies and similar technologies
• Internet protocol (IP) address and technical log data, which we use to operate, secure, and monitor our services and to prevent abuse
• Conversations you have with our AI assistant ("Columbus"), including the questions you ask and the responses provided — see the "AI Assistant (Columbus)" section below

How We Use Your Information

We use the information we collect to serve you better and operate our business responsibly. Specifically, we use your information to:

• Prepare personalized quotes and plan recommendations
• Process enrollments and administer your coverage
• Communicate with you about your plan, benefits, and account updates
• Respond to your questions and provide customer support
• Improve our website, services, and overall member experience
• Send relevant updates about plan changes or new offerings (with your consent)

AI Assistant (Columbus)

MightyWELL offers an AI-powered assistant named "Columbus" to help answer questions about our plans, benefits, and how your coverage works. Columbus is available on our website, in the AllAboard365 member and agent portals, and in the MightyWELL mobile app. We identify Columbus to you as an automated AI assistant, and it only collects information from a conversation when you choose to send a message — it does not run in the background or capture anything until you send. Here is how it handles your information:

• What we collect. When you send a message to Columbus, we collect the text of your message, your recent chat history within that conversation, the responses Columbus provides, your IP address, and basic technical details about the request. If you are signed in, we also associate the conversation with your account — including your name and the plan information tied to your account, such as the products you are enrolled in and your coverage details — so Columbus can give you accurate, plan-specific answers.
• How your information is used. Your message and the relevant context are sent to our servers and to our third-party AI providers for the sole purpose of generating a response (and, for members, related summaries of your requests). Columbus is for general plan and benefit navigation only; it is not a medical provider and does not provide medical, diagnostic, or treatment advice.
• Who we share it with. To produce these responses and summaries, we share the necessary data with two named third-party AI service providers: Anthropic, PBC (which powers the Columbus chat) and Microsoft Azure OpenAI Service (which we use to process certain member requests, such as summarizing a share request or plan document). Each processes the data only on our behalf to return a result.
• Equal protection and no model training. Both providers are contractually required to protect your information at least as strongly as this Privacy Policy requires and to use it only to provide the service to us. Neither provider uses your messages or other data submitted through our accounts to train its AI models.
• How long we keep it. Columbus conversations are retained for up to 24 months and then deleted, unless we are required to keep them longer to comply with the law. We retain them to operate and improve the assistant, monitor answer quality and accuracy, provide customer support, and maintain the security of the service.
• Please don't overshare. Columbus is designed for plan and benefit questions. Please avoid entering sensitive medical details or other sensitive personal information you don't need to share to get help.

How We Protect Your Information

We take the security of your personal information seriously. Our website uses SSL encryption to protect data transmitted between your browser and our servers. All sensitive data is stored on secure servers with restricted access controls.

We regularly review our security practices and update them as needed to maintain strong protections. Only authorized personnel with a legitimate business need have access to personal information, and all team members are trained on data handling best practices.

Data Sharing

We do not sell, rent, or trade your personal information to third parties for marketing or promotional purposes. We may share your information only with trusted service providers who assist us in operating our website, processing enrollments, and administering plans. This includes hosting and infrastructure providers, our email delivery provider, and our AI technology providers (Anthropic, PBC and Microsoft Azure OpenAI Service), which power the Columbus assistant. These providers are contractually required to keep your information confidential, may not use it for any purpose other than fulfilling their obligations to MightyWELL, and do not use it to train their AI models.

We may also disclose your information if required by law, regulation, or legal process, or if necessary to protect the rights, safety, or property of MightyWELL, our members, or the public.

SMS/Text Messaging & Mobile Information

MightyWELL may use SMS or text messaging to communicate with you regarding quotes you have requested, enrollment updates, account notifications, and customer support. By providing your mobile phone number and opting in to receive text messages, you consent to receiving these communications from MightyWELL.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

You may opt out of receiving text messages at any time by replying STOP to any message. Message and data rates may apply. Message frequency varies based on your account activity and preferences.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience. These include:

• Session cookies that keep you logged in and maintain your preferences during a visit
• Analytics cookies that help us understand how visitors use our site so we can improve it
• Functional cookies that remember your choices and provide a more personalized experience

For website analytics we use Google Analytics, a service provided by Google LLC that helps us measure how visitors find and use our site (such as pages viewed, time on site, and referring sources). Google Analytics sets cookies and processes usage data, including your IP address, on our behalf. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. Learn more in Google’s Privacy Policy.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect certain features of our website.

Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, to provide your coverage and support, and to comply with our legal, regulatory, and accounting obligations. Retention periods vary by the type of information:

• Enrollment and plan records are retained for the duration of your membership and for the period afterward required by applicable law.
• AI assistant (Columbus) conversations are retained for up to 24 months and then deleted.
• Technical logs and IP address records are retained for a limited period for security and abuse-prevention purposes.

When information is no longer needed, we securely delete or anonymize it.

Your Rights

You have the right to access, correct, or request deletion of your personal information at any time. You may also opt out of receiving promotional communications from us.

To exercise any of these rights, please contact us using the information below. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

Contact for Privacy Concerns

If you have questions or concerns about this Privacy Policy or how your information is handled, please reach out to us:

MightyWELL Health
90 Fort Wade Rd
Ponte Vedra, FL 32081
Email: [email protected]