Benepower Inc.

Privacy Policy

Effective Date: May 1, 2025

Benepower, Inc. (“Benepower,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect in connection with our mobile applications, websites, and the broader Benepower Platform (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information. It also addresses how we handle data collected through white-labeled deployments and integrations with third-party applications within the Benepower Marketplace.

1. Scope of Policy

This Policy applies to all users of the Services, including consumers, business users, and enterprise clients. It covers:

• Our core application(s), including Truvo AI and related tools;

• White-labeled versions of the Benepower mobile app and dashboards deployed by benefit coordinators and brokers;

• Integrations with third-party services and apps in the Benepower Marketplace.

This Policy does not apply to the data practices of:

• Independent benefit coordinators or brokers who license Benepower software. These parties operate under their own privacy and security policies. We encourage you to review their respective policies.

• Third-party apps and services accessible through the Benepower Marketplace. Your use of those apps is subject to their own privacy terms.

We are committed to ensuring our Privacy Policy is accessible to users with disabilities. Please contact us if you need this policy in an alternative format or language.

2. Information We May Collect

We collect personal and sensitive data, including:

• Identifiers: name, address, phone number, email, employer, benefits provider, and other relevant details you provide.

• Health and Benefits Information: data derived from claims, benefits utilization, and user inputs (e.g., search history, preferred providers).

• Device and Usage Data: mobile device ID, browser type, IP address, session logs, cookies.

• Location Data: only with user consent, for features requiring geographic context.

• App and Account Activity: preferences, saved content, app interactions.

3. Sources of Information

We collect information from:

• Direct user input

• Employers, benefits administrators, and Third-Party Administrators (“TPAs”)

• Healthcare claims and eligibility feeds

• Automated technologies like cookies and SDKs

• Third-party integrations (with appropriate disclosures)

The third parties referenced above may share information with us or independently collect and process data under their own privacy policies.

4. Use of Information

We use your data to:

• Provide and optimize Services (e.g., provider recommendations, plan navigation)

• Power AI-driven benefits guidance

• Support white-labeled deployment of Services

• Communicate with users about updates, offers, and compliance matters

• Conduct analytics and maintain security and reliability

5. Sharing of Information

We may share data with:

• Service providers acting under contract (e.g., hosting, analytics)

• Partners deploying white-labeled versions of Benepower (under strict limitations)

• Marketplace developers when a user installs or uses their tools

• Regulators or legal authorities as required by law

We do not sell or share your personal data as those terms are defined under applicable law, including for cross-context behavioral advertising. 

6. Third-Party Content and Links

The Services may include links or access to third-party applications. Benepower does not control and disclaims responsibility for the privacy practices of:

• Third-party app developers in the Benepower Marketplace

• Benefit administrators and brokers who deploy Benepower under their own branding

Please review the privacy terms of these entities separately.

7.  Cookies and Web-Based Tracking Technologies

If you use the Benepower web portal, we may use cookies, pixels, and similar technologies to collect data from your browser. This may include:

• IP address and browser type

• Login timestamps and clickstream data

• Website navigation behavior

We may also use third-party services, such as Google Analytics, which set their own cookies to collect usage metrics. You can learn more or opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

Some cookies are essential to the functioning of the website; others are used for analytics. By using our web-based Services, you consent to the placement and use of these technologies unless you adjust your browser settings.

8. User Rights and Choices

Depending on your U.S. state of residence, you may have rights to:

• Access, correct, or delete personal information

• Opt-out of targeted advertising, profiling, or data sales

• Limit the use of sensitive personal data

• Appeal denied privacy requests

You can exercise these rights via privacy@benepower.com.

9. Data Security and Retention

We maintain industry-standard security measures, including:

• Encryption of data in transit and at rest

• Access controls and activity monitoring

• Vendor due diligence for subprocessors

We retain personal data only for as long as necessary to provide our services or comply with legal requirements.

Please note that no electronic transmission or storage method can guarantee absolute security.

10. Children’s Data

Our Services are not intended for children under 13. We do not knowingly collect data from children without verified parental consent.

11. State-Specific Disclosures

Benepower complies with all applicable U.S. state privacy laws that impose consumer data rights. Depending on your state of residence, you may have the following rights:

• To confirm whether we process your personal data;

• To access and obtain a copy of your personal data;

• To request corrections to your personal data;

• To request deletion of your personal data;

• To opt out of processing for purposes of:

  • Targeted advertising;

  • The sale of personal data;

  • Automated profiling that produces legal or similarly significant effects;

• To appeal a denial of your privacy rights request.

These rights are available under laws in:

• Virginia (VCDPA)

• Colorado (CPA)

• Connecticut (CTDPA)

• Utah (UCPA)

• Texas (TDPSA)

• Florida (FDBR)

• Tennessee (TIPA)

• Oregon (OCPA)

• Montana, Indiana, Iowa, Delaware, and others (as their laws take effect)

To exercise these rights, please contact us at privacy@benepower.com. We will authenticate your request as required by law and respond within the legally mandated time frame.

You may appeal any denial of a privacy rights request by submitting a written appeal to the same contact address. We will review and respond in accordance with applicable state laws.

Benepower does not sell personal information as defined under Nevada law. However, Nevada residents may still submit a formal request to opt out of future sales via emailing us at privacy@benepower.com.

We also comply with Washington’s My Health My Data Act, treating any consumer health data we collect as sensitive and subject to heightened protections, including individual consent for collection and sharing where required.

This Policy is designed to comply with:

• California (CCPA/CPRA): We support access, correction, deletion, opt-outs, and “Do Not Sell/Share My Info” requests.

• Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida, Tennessee, and others: We support access, correction, deletion, opt-outs, and consent for processing sensitive data.

• Nevada: We do not sell personal information as defined by Nevada law.

• Washington (My Health My Data Act): We treat health-related information with heightened protections.

12. Mobile Application-Specific Disclosures

Device Permissions

The Benepower app may request access to:

• Location Services: For provider recommendations and plan-related services.

• Push Notifications: For health reminders or platform alerts.

• Microphone: If you use our voice-enabled AI (e.g., Truvo AI), we may collect and process voice inputs.

• Camera and Photos: To enable upload of ID documents or for profile customization (only with consent).

• Contacts: Only with opt-in consent for specific features (if applicable).

Permissions can be controlled in your device settings.

Mobile Analytics and Tracking

We use SDKs to collect:

• Crash diagnostics

• Usage metrics

• Session and behavioral data

This information helps us improve the app. We do not share health-related data with advertisers.

In-App Purchases

If applicable, any payments are handled via the Apple App Store or Google Play and we do not store your payment credentials.

Platform-Specific Disclosures

• Apple iOS: We comply with Apple’s AppTracking Transparency requirements.

• Android: We follow Google Play privacy standards, including data minimization and permission scoping.

13.  HIPAA and Health Information

Benepower may collect or process health-related information on behalf of health plans, TPAs, or other benefit administrators. In those contexts, Benepower acts as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and complies with all applicable requirements, including those governing the privacy, security, and permissible uses of Protected Health Information (PHI).

In other cases, Benepower may act as a “mere conduit” of PHI—transmitting data without access or retention for non-routine purposes. In such instances, HIPAA may not apply directly to Benepower’s handling of that information.

Benepower also provides direct-to-consumer features that are not offered on behalf of a Covered Entity. In those contexts, HIPAA does not apply. However, we continue to protect your health-related information under applicable state laws and this Privacy Policy.

Users of Benepower’s consumer-facing services should be aware that their data may not be classified as PHI under HIPAA unless processed on behalf of a Covered Entity or as part of a HIPAA-governed transaction.

Benepower may collect or process health-related information on behalf of health plans, TPAs, or other benefit administrators. In those contexts, Benepower acts as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and complies with all applicable requirements, including those governing the privacy, security, and permissible uses of Protected Health Information (PHI).

In other cases, Benepower may act as a “mere conduit” of PHI—transmitting data without access or retention for non-routine purposes. In such instances, HIPAA may not apply directly to Benepower’s handling of that information.

Where Benepower collects information directly from consumers (e.g., through self-service features or AI tools) and not on behalf of a Covered Entity, such data may not be subject to HIPAA but will still be handled in accordance with this Privacy Policy and applicable state laws.

14. Changes to This Policy

We may update this Policy periodically. If material changes are made, we will notify users through the Services or by email.

15. Contact Us

If you have questions or would like to exercise your privacy rights, contact us at:

Benepower Privacy Office
privacy@benepower.com
5500 Military Trl #154, Jupiter, FL 33458