Privacy Policy
Effective November 1, 2026 · Last updated November 1, 2026
The short version
- We collect what we need to help you find coverage: what you tell us, and basic information about how you use our site.
- We use it to answer your questions, help you compare and enroll in plans, and run our business.
- We share information with the insurance companies you apply to, the agencies and marketing organizations we work with (with another agency or marketing organization only with your permission: for Medicare, naming each organization), the referral partner who sent you to us (only if you agree on your call with us), your health plan when it asked us to help you, and the companies that work for us, subject to the law and your choices. Your text-message opt-in stays with us; no one else may text you because you agreed to texts from us.
- Luna, our AI assistant, and our other automated tools may process your information to serve you. We don’t train public AI models with data that includes protected health information, and we improve our own AI only with de-identified information. Unless you opt out, we tell ad platforms when one of their ads led to a request, using only the ad’s click ID.
- Wherever you live in the U.S., you can ask to see, correct or delete your information, opt out of targeted advertising, withdraw a sharing permission, and change how we contact you. Some rights depend on your state.
1. Who we are and what this policy covers
This Privacy Policy explains how Senior Choice Plans LLC, doing business as ProvideSure and ProvideSure Insurance Services (“ProvideSure,” “we,” “us”), collects, uses, shares and protects personal information. In California, we do business as New Wave Insurance Services (license no. 0M48156). We’re a licensed insurance agency at 7602 Woodland Drive, Suite 130, Indianapolis, IN 46278.
This policy covers personal information we collect:
- on providesure.com and other websites that link to this policy (virtualmedicare.com, policypair.com, providesureinsuranceservices.com, plancoach.com, planmatcher.com, benefitscheck.com, providermedicare.com, providersure.com, medicarebonus.com, covermydoc.com, petsurely.com, medicarepatriot.com, householdinsure.com, virtualmedigap.com, onlinemedicareinsurance.com, cookdiabetes.com, medicarerxstore.com, covermymd.com, cancercoverages.com, policyhelper.com, insuranceplancompare.com, quotemedicareinsurance.com, seniorsupplementoptions.com, dualplanfinder.com, seniorchoiceplans.com and newwaveinsuranceservices.com), including the addresses that forward to them (insuranceplancomparison.com, quoteyourmedicare.com, medicarepricecompare.com and virtualmedsupp.com);
- when you call, text or email with us; and
- through the plan comparison tool we offer at medicare.yourvirtualenrollment.com, on any page there.
It doesn’t cover:
- protected health information we handle for health plans (see Section 2);
- information about our employees, contractors and job applicants, which a separate notice covers; or
- websites run by others, such as insurance companies’ sites, even when we link to them.
2. How insurance privacy and health privacy laws fit with this policy
Some information is protected by other laws, and different rules apply to it.
- Information you give us to shop for coverage. What you share to get quotes, compare plans or request a call is covered by this policy.
- Insurance customers. If you ask about or buy coverage through us, federal and state insurance privacy law (the Gramm-Leach-Bliley Act and your state’s insurance privacy regulation) also applies. Our Insurance Privacy Notice explains what we share, what you can limit and how. We give it to you when your coverage is placed and yearly after where your state requires it. For the information it covers, that notice controls if it differs from this policy.
- Health information you share with us. You may choose to tell us about your health, your current coverage, your doctors or your prescriptions so we can help you find coverage. We don’t receive patient information from healthcare providers. That information is covered by this policy and, in Washington, Nevada and Connecticut, by our Consumer Health Data Privacy Policy.
- Health plan information (HIPAA). HIPAA governs health plans and healthcare providers. Where we handle a health plan’s member information under an agreement with that plan, HIPAA and that agreement govern that information, and you use your HIPAA rights through the plan. When your health plan asks us to help you, we report back to the plan how we helped, such as the plan you enrolled in, as that agreement requires. HIPAA doesn’t cover the rest of what you share with us; this policy and state law do.
3. Information we collect
We collect information you give us, information collected automatically when you use our site, and information from others.
Information you give us
| When you | We collect |
|---|---|
| Request a quote | The coverage you want, your ZIP code and answers about it: for example, your Medicare status; who needs coverage, their relationship to you and their ages, and optionally a household income range; a business’s number of employees and the benefits it wants; the purpose, age and amount for life insurance; or which extra coverage you want. Also your first and last name, phone number, best time to call and your consent choices |
| Request a callback | Name, phone number, ZIP code, preferred time window, topic and your consent choices |
| Schedule a call | Coverage interests, first and last name, phone number, email, ZIP code, appointment time and your consent choices |
| Ask for our Medicare guide | Email address and whether you want marketing emails |
| Contact us about a partnership | Name, business name, role, work email, phone number and message |
| Talk with Luna, our AI assistant | What you say, a reference number, and how you came to us |
| Use the plan comparison tool | ZIP code and the doctors, prescriptions and pharmacies you choose to enter, plus a quote ID our agents use when you call |
| Talk with an agent | What you discuss, which may include your current coverage, doctors, prescriptions, pharmacies, Medicare number and date of birth, and, if you apply, the information the insurer requires, such as payment details. You choose what health-related information to share; we ask only for what the plans you’re comparing need |
Information collected automatically
- Analytics. Pages you view, buttons and phone links you tap, form steps you complete and the ZIP code you enter (not your other answers or contact details), errors, the site or page that referred you, device type, browser, operating system, screen size, language and time zone, IP address, approximate location from your IP address, and random visitor and session IDs. We run this analytics on our own systems; it isn’t sent to outside analytics companies. Until you’ve made a cookie choice, these events don’t say which coverage you’re looking at. You can turn it off anytime (see Section 6).
- Campaign details. If you arrive from an ad or campaign link, we keep the campaign details in that link, such as campaign tags and ad click IDs, so we know which campaigns work.
- Consent records. When you submit a form, we record the consent wording you saw, when you agreed, the page you were on, and your device’s IP address and browser type, so we can show what you agreed to.
- Your choices. Your cookie choices, and whether your browser sent a Global Privacy Control signal, are stored in a cookie on your device for up to 6 months. The advertising choice in force when you send a form is kept with your request.
Information from others
- Health plans and insurers, about coverage you apply for or have.
- People who give us information about you, such as a family member applying for coverage that includes you.
- Referral partners, when you’ve asked them to connect you with us or you’ve come to us from their email, mailing, social post or website. They may send us your name, contact details and what you’re interested in, and tell us which partner referred you.
- Lead vendors and marketing partners, when you asked on their website or by phone to be contacted about coverage. They must get your consent to be contacted about that coverage before they send us your information, and we keep a record of it.
- The insurance agencies and field marketing organizations we work under, about enrollments they process for you.
We don’t receive patient information from healthcare providers.
4. How we use information
We use personal information to:
- answer your requests, give quotes, compare plans and help you apply or enroll;
- call, text or email you as you’ve agreed, including appointment confirmations and reminders;
- serve you as your agent after you enroll;
- run, secure and fix our site, tools and services, and prevent fraud;
- train and supervise our agents and check call quality;
- run Luna, our AI assistant, and our other automated tools to serve you: answering questions, comparing plans, helping with enrollment, coordinating your benefits after you enroll, checking quality and handling administration (see Section 8);
- improve our services, including training and fine-tuning AI tools (see Section 8);
- learn which campaigns bring people to us, and tailor the content and offers we show or send you to the coverage you’ve asked about;
- market jointly with other financial companies, such as insurance companies, under written agreements that limit how they use your information (see Section 5);
- develop new products and services;
- meet insurance, Medicare and other legal requirements, keep required records and respond to regulators; and
- protect our rights and the safety of others.
We won’t use your information for a new purpose without telling you first and, where the law requires, getting your consent.
5. How we share information
We share personal information, including information that identifies you, with the organizations below, subject to the law, your choices and the permissions you give. We don’t sell your personal information for money, including to data brokers or list sellers.
- With insurance companies, when a quote needs their information, when you apply or enroll, and when a company whose plan we discussed with you asks for the recording of that call. Medicare rules require the company to oversee how its plans are sold, so it can ask whether or not you enrolled.
- With the insurance agencies and field marketing organizations we work under. When you apply for coverage through us, they receive your information to process your enrollment, pay and supervise our agents and support you after you enroll. Once they hold your information, their own privacy notices govern how they use it.
- With other financial companies for joint marketing, such as an insurance company we market a product with, under written agreements that limit them to that marketing. Federal law doesn’t let you opt out of joint marketing, but where your state requires your permission first, we ask.
- With your health plan, when it asked us to help you. We report back to the plan how we helped you, such as the plan you enrolled in, under our agreement with it (see Section 2).
- With the referral partner who connected you with us, only if you agree. If you agree on your call with us, we tell your referral partner, such as a doctor’s office that gave you our number, how we helped you, such as whether you kept an appointment and the plan you enrolled in. We ask first, record your answer, and share only what you agreed to; you can withdraw your permission anytime on Your Privacy Choices or by calling us. Without your permission, a referral partner gets only de-identified information that can’t reasonably be linked to you, such as how many people called or enrolled. Once a partner has your information, its own privacy practices apply.
- With other independent insurance agencies and third-party marketing organizations (TPMOs), so they can contact you about coverage. If you’re a Medicare beneficiary, we share your information with another agency or marketing organization only after you give prior express written consent naming that organization: one choice per organization, nothing preselected, no blanket consent for unnamed companies, and nothing transferred to an organization you haven’t said yes to. We record your decision with your request, and you can withdraw it anytime on Your Privacy Choices. For other coverage, we share only if you check the box on our form agreeing to share your request with our partner companies, which also lets them contact you; the box is optional and unchecked, and you can withdraw your agreement anytime on Your Privacy Choices. Today our forms don’t ask either question, so we don’t share requests with other agencies or marketing organizations for them to contact you. If that changes, the organizations will be named on our partner companies page and our forms will ask you first.
- With companies that work for us, such as hosting, phone and text messaging, email, scheduling and AI technology providers. They may use your information only to provide services to us, under contracts that require them to protect it.
- With ad platforms, in a limited way, unless you opt out. If you haven’t turned advertising cookies off and your browser doesn’t send a Global Privacy Control signal, we may tell the ad platform that showed you the ad, for example Google, Microsoft, Meta, OpenAI (ChatGPT), TikTok, LinkedIn, X, Snapchat, Pinterest, Reddit, Yahoo or Yandex, that a visit from one of its ads led to a request. We send only the ad’s click ID and whether the visit led to a quote request or a booked call, never the coverage you asked about, your name, contact details or answers. We never report applications or enrollments to ad platforms.
- When the law requires it or to protect rights and safety, for example in response to a subpoena or a regulator.
- In a business transfer, such as a merger or sale, where the information stays subject to this policy.
- With your permission, for anything else.
Text-message opt-in. The sharing above excludes your text-message opt-in and consent: we never share them with third parties or affiliates for their marketing or promotional purposes, and no one else may text you because you agreed to texts from us. Your phone number itself goes only to the recipients in this section, under the permissions described there. Agreeing to this policy or our Terms of Use is never permission to share your information with another agency or marketing organization.
6. Cookies, analytics and your choices
When you first visit, we ask what you allow:
- Necessary: always on. Needed for the site to work, remember your choices and keep forms secure.
- Analytics: On unless you turn it off. Our own analytics, described in Section 3; the data stays on our own systems.
- Advertising: on unless you turn it off, and off whenever your browser sends a Global Privacy Control signal. Allows only the limited ad reporting described in Section 5: the ad’s click ID and whether a quote was requested or a call booked, never the coverage you asked about, your name, contact details or answers.
You can change your choices anytime with the Your Privacy Choices link at the bottom of every page.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sharing and targeted advertising for that browser, and the site shows that the signal was honored. We don’t respond to the older “Do Not Track” signal, which has no common standard; Global Privacy Control replaces it.
We don’t use advertising pixels, session-replay tools or third-party ad trackers on our site.
7. Text messages
If you agree, we may text you about your request, appointments and coverage, and, if you agreed to marketing texts on one of our forms, about the coverage you asked about. Message frequency varies. Message and data rates may apply. Reply STOP to stop or HELP for help, or call 1-800-830-7574 (TTY 711). Carriers aren’t liable for delayed or undelivered messages. We never share your text-message opt-in or consent for anyone else’s marketing or texting program. Our Mobile Terms explain the program in full.
8. Calls, recordings, Luna and AI
- Calls are recorded. We record calls for quality, training, records Medicare requires us to keep, and to improve our services. We tell you at the start of each call. The insurance company whose plan we discussed may ask for the recording to review the call, as Medicare rules and our agreements with it require, whether or not you enrolled. Regulators can ask for recordings too.
- Luna and other AI. Luna, our AI assistant, and other automated tools may process your identifiable information to serve you: answering your questions, summarizing calls for your agent, comparing plans with the needs you describe, helping with enrollment, coordinating your benefits after you enroll, checking call quality and handling administration. A person is responsible for every enrollment decision, and if an automated voice calls you, it will tell you it’s automated.
- AI training. ProvideSure does not train public AI models (models offered to the public by other companies) with data that includes protected health information (PHI). We train and improve our own AI tools only with de-identified information: before a transcript or call summary is used to improve a tool or to teach our staff, names, contact details, dates, locations, account and identification numbers and other details that could identify you are removed, and we keep no record that links the result back to you. Recordings themselves are never used for this.
- Access to what Luna knows. Transcripts, recordings, summaries and anything Luna remembers about you are kept under the retention periods in Section 10, are available only to the people and systems serving you, and are controlled so that one customer’s information isn’t shown to another customer or to an agent who isn’t serving you.
9. Sensitive information
Some information we collect is sensitive, such as your Medicare status, the coverage you’re interested in, the ages of people in your household, an income range, and anything about your health you share with an agent. We use sensitive information only to provide the services you ask for, to meet legal requirements and to keep our services secure. We share it only as Section 5 describes, with your consent where the law requires it, and we never use it to target ads.
10. How long we keep information
| Information | How long we keep it |
|---|---|
| Quote, callback and scheduling requests | 3 years after our last contact with you, or for as long as you have coverage through us, whichever is longer |
| Consent records | 5 years after consent is given or withdrawn |
| Call recordings | 10 years for Medicare calls, sales and enrollment alike; 6 years for calls about other coverage. Medicare sets minimum periods for sales calls and for enrollment records; we keep every Medicare call for 10 years so one period covers both |
| Records of coverage you buy through us | 10 years after the coverage ends, or longer if the law requires |
| Luna and other AI transcripts, summaries and memory about you | Kept and deleted with the call record they come from |
| De-identified information used to improve our services and train AI tools | For as long as it’s useful |
| Your sharing permissions and opt-outs | 5 years after they’re given or withdrawn, and the opt-out itself for as long as we hold your information |
| Analytics data | 26 months |
| Campaign details from your visit | 90 days, unless attached to a request |
| Cookie choices (a cookie on your device) | Up to 6 months, then we ask again |
| Partner inquiries | 3 years after our last contact |
| Server and security logs, including IP addresses | 1 year |
When we no longer need information, we delete it or remove what identifies you. If you ask us to delete information we’re required to keep, we’ll keep only what the law requires and delete the rest. After that, we may keep information that no longer identifies you, such as counts and averages, for as long as it’s useful for statistics and improving our services. We won’t try to re-identify it.
11. Security
We protect personal information with administrative safeguards (policies, staff training, access limited to the people who need the information for their work, and contracts that bind the companies that work for us), technical safeguards (encryption in transit and at rest, access controls, logging and monitoring) and physical safeguards (secured offices and equipment). Technology vendors and service providers process information only under contracts that restrict how they use it and require them to protect it. No system is completely secure, so we can’t guarantee security. If a breach affects you, we’ll notify you as the law requires.
12. Your privacy rights
Wherever you live in the U.S., you can ask us to:
- Access: tell you what personal information we have about you and give you a copy you can take elsewhere;
- Correct information that’s wrong;
- Delete your information, except what the law requires us to keep (see Section 10), and we’ll ask the companies we’ve shared it with to delete it too;
- Opt out of sharing for targeted advertising (Section 6);
- Withdraw a permission you gave to tell your referral partner how we helped you, or to share your information with another agency or marketing organization (Section 5);
- Change how we contact you, stopping marketing calls, texts and emails; and
- Appeal if we turn down your request.
Some of these rights come from your state’s law and apply only there; we honor each one wherever we can and tell you if a request doesn’t apply to you. Your Privacy Choices explains each choice and how to make it.
How to ask
- Use the request form on our Your Privacy Choices page.
- Email privacy@providesure.com.
- Call 1-800-830-7574 (TTY 711).
- Write to ProvideSure, Attn: Privacy, 7602 Woodland Drive, Suite 130, Indianapolis, IN 46278.
We’ll respond within 45 days. Opt-outs, withdrawn permissions and contact preferences take effect within 10 business days. If we need more time, up to another 45 days, we’ll tell you why. To protect you, we’ll ask for enough information to confirm who you are, usually your name, phone number or email, and ZIP code, and we’ll use it only to verify your request. You don’t need to verify your identity to opt out.
Authorized agents. Someone you authorize can make a request for you. We may ask for proof that you gave them permission, and may ask you to confirm your identity with us directly.
Appeals. If we turn down your request, you can appeal by replying to our decision or emailing privacy@providesure.com with “Appeal” in the subject line. We’ll respond within 45 days. If you disagree with the result, you can contact your state attorney general.
No discrimination. We won’t treat you differently for using these rights.
Calls, texts and emails. To stop marketing emails, use the unsubscribe link in any email. To stop calls or texts, tell us during a call, reply STOP to a text, email donotcall@providesure.com, or contact us any other reasonable way. We act on these requests as soon as we can, and within 10 business days. You may still hear from us about a request you made, an application in progress or coverage you have through us.
13. State notices
California residents. This section adds what California law requires. Sources and purposes for each category are in Sections 3 and 4, and retention periods are in Section 10. In the past 12 months, we collected and disclosed these categories:
| Category | Examples | Disclosed for a business purpose to | Sold or shared |
|---|---|---|---|
| Identifiers | Name, phone number, email, postal address, IP address, online identifiers | Service providers; insurers when you apply; the agencies we work under; as the law requires | Ad click IDs shared with ad platforms, unless you opt out. To another agency or marketing organization only with your permission (naming each organization for Medicare) |
| Customer records | Contact details, policy information, payment details given when you apply | Insurers; the agencies we work under; service providers | No |
| Protected characteristics | Age, and ages of household members | Insurers; service providers | No |
| Commercial information | Coverage you consider or buy | Insurers; the agencies we work under; service providers | No |
| Internet activity | Pages viewed and site interactions | Service providers | No |
| Approximate location | From IP address and ZIP code | Service providers | No |
| Audio and electronic information | Call recordings | Service providers; the insurance company whose plan we discussed, when it asks to review the call; regulators and as the law requires | No |
| Professional information | Business details in partner inquiries | Service providers | No |
| Inferences | Coverage that may fit your needs | Not disclosed | No |
| Sensitive personal information | Health information you share with agents; Medicare status; Medicare or Social Security number and payment details when you apply | Insurers, including when they review a call recording; the agencies we work under; service providers | No |
We tell a referral partner how we helped you only when you ask us to on your call, which California law doesn’t count as a sale or sharing; you can withdraw that permission anytime on Your Privacy Choices or by calling us. To opt out of the sharing with ad platforms in the table, use Your Privacy Choices, which serves as our “Do Not Sell or Share My Personal Information” link. Under the California Financial Information Privacy Act, we don’t share your nonpublic personal information with nonaffiliated companies outside the permitted exceptions unless you’ve agreed first. We don’t sell or share the personal information of anyone we know is under 16. We use sensitive personal information to provide the services you ask for, which California law allows without a separate limit; we share it with a referral partner only when you ask us to, and you can withdraw that anytime. Apart from the referral partners and organizations described in Section 5, with your permission, we don’t share personal information with third parties for their own direct marketing. The rights in Section 12 include California’s rights to know, delete, correct, opt out of sale and sharing, and limit the use of sensitive personal information.
Nevada residents. You can ask us not to sell your covered information, as Nevada law defines a sale, through Your Privacy Choices or at privacy@providesure.com. We honor these requests whether or not a particular sharing meets Nevada’s definition.
Consumer health data (Washington, Nevada and Connecticut). Our Consumer Health Data Privacy Policy explains how we handle consumer health data under these states’ laws.
Residents of other states. We offer the rights in Section 12 wherever you live, though some are legal rights only in certain states. If your state’s privacy or insurance law gives you additional rights, we honor them; ask us how they apply to you.
14. Children
Our services are for adults 18 and older, and we don’t knowingly collect personal information from children. A parent or guardian applying for family coverage may give us information about their children, such as ages, to get quotes; we use it only for that purpose. If you believe a child has given us information, contact us and we’ll delete it.
15. Changes to this policy
We review this policy at least once a year. When we change it, we update the date at the top. If we make a material change to how we use information we’ve already collected, we’ll notify you and, where the law requires, ask for your consent first. Past versions are available on request.
16. Contact us
Senior Choice Plans LLC, doing business as ProvideSure (in California, New Wave Insurance Services)
Attn: Privacy
7602 Woodland Drive, Suite 130, Indianapolis, IN 46278
privacy@providesure.com
1-800-830-7574 (TTY 711), Monday to Friday, 9 a.m. to 6 p.m. ET; from October 15 to December 7, Monday to Friday 9 a.m. to 8 p.m. ET