Privacy Policy

1.1 Platform Users. This Privacy Policy applies to personal information about insurance agents, agency staff, applicants and other individuals who visit the Platform, register for an account, or use the Platform ("Users").

1.2 Client Information. The Platform also stores information about consumers, prospects, applicants and Medicare beneficiaries ("Client Information"), which may include protected health information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). EIG processes Client Information to support the insurance services provided by licensed agents and in accordance with HIPAA, our contracts with insurance carriers, any applicable Business Associate Agreements, and applicable state insurance privacy laws. Individuals should also refer to the privacy notices of their insurance carrier or health plan. Where this Privacy Policy conflicts with HIPAA or an applicable Business Associate Agreement with respect to PHI, HIPAA and that agreement control.

1.3 Not Covered. This Privacy Policy does not apply to third-party websites, carrier portals or services that may be linked from or connected to the Platform, which are governed by their own privacy policies.

2.1 Information You Provide. We collect information you provide directly, including:

(a) Identity and contact information, such as your name, email address, telephone number, mailing address and date of birth;

(b) Professional information, such as your National Producer Number, license numbers and states, carrier appointments, certifications, training records, errors and omissions insurance information and agency affiliation;

(c) Contracting and compensation information, such as your Social Security number or Employer Identification Number for tax reporting, W-9 information, and bank account information for commission payments;

(d) Account information, such as your username, password and multi-factor authentication settings; and

(e) Communications, such as support requests, messages, comments on records and other content you submit.

2.2 Client Information You Enter. When you use the Platform, you may enter or upload Client Information, such as names, contact details, dates of birth, Medicare Beneficiary Identifiers, plan and enrollment information, Scope of Appointment records, call notes and health-related information necessary to provide insurance services. You are responsible for having a lawful basis and any required consent to enter such information.

2.3 Information Collected Automatically. When you use the Platform, we automatically collect information such as your IP address, device and browser type, operating system, log-in times, pages and records viewed, actions taken, and error and security logs. We use this information to operate, secure and audit the Platform.

2.4 Information from Third Parties. We may receive information about you from insurance carriers, field marketing organizations, the National Insurance Producer Registry, state insurance departments, exclusion and sanction databases, background or identity verification providers, and lead providers.

3.1 We use User information to: (a) create, verify and administer accounts; (b) verify licenses, appointments, certifications and exclusion status; (c) contract, appoint and pay Users, including tax reporting; (d) operate, maintain, secure and improve the Platform; (e) provide support and Support Team services; (f) monitor, log and audit Platform activity for security, quality assurance and compliance; (g) communicate with Users about their accounts, the Platform, compliance requirements and business opportunities; (h) comply with Applicable Law, Carrier Requirements and requests from carriers and regulators; and (i) establish, exercise or defend legal claims.

3.2 We use Client Information solely to: (a) enable licensed agents and the Support Team to provide insurance services to the individual; (b) maintain records required by carriers, CMS and state law; (c) operate, secure and audit the Platform; and (d) comply with legal obligations. We do not use PHI for marketing except as permitted by HIPAA.

4.1 We do not sell personal information or Client Information, and we do not share Client Information for third parties' own marketing purposes.

4.2 We may share information as follows:

(a) Insurance carriers, health plans and field marketing organizations, as necessary for contracting, appointment, enrollment, commission, compliance and audit purposes;

(b) Service providers that host, secure, support or operate the Platform on our behalf, such as cloud hosting, database, email, telephony and SMS providers, under written obligations to protect the information and, where they handle PHI, under Business Associate Agreements;

(c) EIG personnel and the Support Team, who are bound by confidentiality obligations and access information only as needed for their duties;

(d) Other Users, only as necessary within your agency hierarchy, such as a supervising agent or agency administrator with authorized access to records in their organization;

(e) Government and regulatory authorities, such as CMS, state insurance departments and law enforcement, when required by law, subpoena or other legal process, or to respond to audits and investigations;

(f) Professional advisors, such as attorneys, accountants and auditors, under duties of confidentiality;

(g) To protect rights and safety, when we believe disclosure is necessary to prevent fraud, protect individuals, or protect the rights, property or security of EIG, the Platform or others; and

(h) Business transfers, in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to the recipient honoring this Privacy Policy and Applicable Law.

5.1 If you provide a mobile number, you consent to receive account, security, compliance and service text messages from EIG. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of any purchase.

5.2 Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that deliver the messages on our behalf.

5.3 Platform notifications are designed to avoid including Client Information or PHI in the body of emails and text messages.

6.1 We use cookies and similar technologies that are strictly necessary to operate the Platform, such as keeping you signed in, enforcing security settings and remembering preferences. We do not use third-party advertising or tracking cookies on authenticated pages of the Platform. We may use limited analytics on public pages of eighq.com to understand site usage. You can control cookies through your browser settings, but disabling necessary cookies may prevent the Platform from working.

7.1 We maintain administrative, technical and physical safeguards designed to protect information, including encryption in transit, role-based access controls that limit each User to authorized records, multi-factor authentication, automatic session timeouts, activity logging and audit trails, and prompt removal of access when a User's authorization ends.

7.2 No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Users are responsible for safeguarding their credentials and devices as required by the Terms of Use.

7.3 If we discover a security incident involving personal information or PHI, we will investigate and provide notifications as required by Applicable Law, including NRS Chapter 603A and HIPAA, and by our contracts with carriers.

8.1 The Platform is hosted in the United States. Authorized EIG personnel and Support Team members, some of whom may be located outside the United States, may access information solely to perform services for EIG, under confidentiality obligations and security controls, and only to the extent permitted by Applicable Law and our carrier contracts.

9.1 We retain information for as long as necessary to provide the Platform, meet the purposes described in this Privacy Policy, and comply with legal, regulatory, contractual and carrier record-keeping requirements, which for certain Medicare-related records is at least ten (10) years. We may retain information longer when subject to a legal hold or needed to establish, exercise or defend legal claims. When information is no longer needed, we delete or de-identify it in accordance with our retention practices.

10.1 Access and Correction. Users may review and update certain account information in the Platform or by contacting us. We will respond to reasonable requests to access or correct personal information, subject to verification of your identity.

10.2 Deletion. You may request deletion of your personal information. Some information cannot be deleted because we are required to retain it by law, regulation, carrier contracts or legitimate business needs, including audit and compliance records.

10.3 Communications. You may opt out of non-essential marketing emails by using the unsubscribe link. You may not opt out of account, security, compliance or legally required notices while you have an active account.

10.4 Nevada Residents. We do not sell covered information as defined in NRS 603A.320. Nevada residents may nonetheless submit a request to opt out of any future sale by contacting us as described below.

10.5 Individuals Whose Client Information Is on the Platform. Consumers and Medicare beneficiaries who wish to access, correct or ask questions about their information should contact their agent, their insurance carrier or health plan, or EIG using the contact information below. We will assist as required by HIPAA, our Business Associate Agreements and Applicable Law.

10.6 Other State Rights. Depending on where you live and whether a state privacy law applies to EIG, you may have additional rights. Contact us to submit a request, and we will respond as required by applicable law.

11.1 The Platform is intended for adult insurance professionals and is not directed to children under 18. We do not knowingly collect personal information from children through the Platform, except Client Information about a minor that an authorized User enters as necessary to provide insurance services, which is protected as described in this Privacy Policy.

12.1 We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, for material changes, provide notice through the Platform or by email. Your continued use of the Platform after the effective date constitutes acknowledgment of the updated Privacy Policy.

Questions, requests and privacy concerns may be directed to: