Move Health Advisors Privacy Policy

Ownership & Relationship

This Privacy Policy governs the collection, use, and protection of information submitted to or processed within the Move Health platform and HealthPlanner tool (“Platform”). Move Health, LLC (“Company,” “we,” or “us”) provides software and administrative services to Advisors to assist with insurance planning and analysis for their clients (“Clients”).

In operating the Platform, the Company acts as a service provider to the Advisor. The Advisor remains responsible for maintaining proper consents and authorization from Clients prior to inputting Client personal or health-related information into the Platform.

Regulatory Compliance

The Company maintains safeguards designed to protect information processed through the Platform against unauthorized access, use, or disclosure.

Where an Advisor is subject to applicable privacy or information-security requirements, including Regulation S-P, the Company will handle information processed through the Platform in accordance with applicable law and the contractual terms governing the Advisor’s use of the Platform.

Where required by applicable law or contract, the Company will notify the applicable Advisor of a security incident involving information processed through the Platform.

Information We Collect

• Advisor Account Data: First and last name, business email address, firm or broker-dealer affiliation, phone number, login credentials, and billing details.
• Client Information Inputted by Advisors: Names, dates of birth, geographic locations, financial or household profile details, current insurance coverage details, and Medicare/health planning preferences submitted to perform analyses.
• Platform Usage & Technical Data: IP addresses, login timestamps, device identifiers, audit logs of actions taken within HealthPlanner, and system performance metrics.

How We Use Your Information

We process information within the Platform exclusively to:

• Provide, operate, maintain, and optimize the HealthPlanner application.
• Enable Advisors to generate client-facing insurance models and comparisons.
• Maintain account security, prevent fraudulent activity, and enforce our Terms of Service.
• Comply with applicable federal, state, and legal/regulatory reporting obligations.

We do not sell, rent, or lease Advisor or Client data to third parties, nor do we use Client health or planning data for secondary marketing purposes.

Data Retention & Regulatory Mandatory Holds

The Company retains Advisor account data and Client record sets submitted to the Platform for as long as the Advisor's account remains active, and for as long as necessary to support the ongoing business relationship.

Privacy Requests

Advisors and Clients may submit privacy-related requests concerning information maintained within the Platform by contacting the Company at security@movehealth.io.

For Client information submitted to the Platform by an Advisor, the Company will process requests in accordance with applicable law, its contractual obligations, and the agreements governing the Advisor’s use of the Platform. Depending on the nature of the request, the Company may coordinate with the Advisor or other applicable party to fulfill the request.

The Company may require verification of the identity of the person submitting a request before taking action.

Limitations on Deletion Requests

Upon receipt of a verifiable request to delete personal or Client data, the Company will fulfill the request to the extent permitted by applicable law. However, the Company cannot delete records that are subject to mandatory legal, statutory, or regulatory retention obligations. Where records fall under mandatory record-retention obligations:

• The record set will be removed from active Advisor dashboards and operational platform views.
• The underlying data will be archived securely and restricted solely to compliance, audit, legal defense, and regulatory reporting purposes until the expiration of the required statutory retention period.

Data Security & Hosting

We implement industry-standard administrative, physical, and technical safeguards—including SSL/TLS encryption in transit and AES encryption at rest—to secure Advisor and Client data against unauthorized access, loss, or disclosure. Data processed through the Platform is stored on secure, enterprise-grade cloud servers located in the United States.

Changes to This Policy

We reserve the right to modify this Policy to reflect changes in our technology, regulatory mandates, or legal obligations. We will notify Advisors of material changes via email or through an in-platform notification prior to the change taking effect.

Contact Us

For questions regarding this Platform Privacy Policy or to submit a privacy request: