Privacy Policy
Last updated: April 30, 2026
EnrollSalud is NOT the Health Insurance Marketplace™ website. We provide plan comparison for educational purposes only. For official enrollment, visit HealthCare.gov.
1. Information We Collect
1.1 Information You Provide
When using EnrollSalud, you may provide us with:
| Data Type | Purpose | Required? |
|---|---|---|
| ZIP code & county | Plan availability | Yes |
| Household size, ages, relationships | Household composition for quotes | Yes |
| Annual income | Subsidy estimation (APTC) | Yes |
| Gender | Premium calculation | Yes |
| Tobacco use, pregnancy status | Premium calculation & eligibility | Yes |
| Contact info (name, phone, email) | Connect with licensed agent | Yes (to receive quotes) |
| Language preference | UI personalization | Auto-detected |
1.2 Information Collected Automatically
We automatically collect device type, browser, operating system, IP address and approximate location, pages visited and features used, and cookies for platform functionality and analytics.
1.3 Agent Account Information
When a licensed insurance agent registers for a paid subscription, EnrollSalud collects additional account information beyond what is described in Sections 1.1 and 1.2:
| Data Type | Purpose | Required? |
|---|---|---|
| Full name and email address | Account identification, login, support communication | Yes |
| Mobile phone number | WhatsApp notifications about account activity (new contacts, plan limits, billing) | Yes |
| National Producer Number (NPN) | Verification of licensure status | Yes |
| State(s) of license | Regional plan availability and routing | Yes |
| Profile photo (optional) | Display on the agent's public quote page | No |
| Stripe customer ID and payment method (last 4 digits, brand, expiration) | Subscription billing | Yes |
| IP address and login timestamps | Security monitoring and fraud prevention | Auto |
Payment card numbers and bank account details are NEVER stored by EnrollSalud. All payment data is collected and stored by Stripe, Inc., our PCI-DSS-compliant payment processor. EnrollSalud only receives a tokenized customer ID and metadata about the payment method.
2. How We Use Your Information
We use the information we collect to:
4. Data Security
We implement industry-standard security measures to protect your information:
5. AI Plan Advisor Data Usage
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law.
You may request deletion of your data at any time by contacting us (see Your Rights below).
8. Your Rights
You have the right to:
To exercise these rights, contact us at info@enrollsalud.com.
9. Children's Privacy
EnrollSalud is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. HIPAA Disclaimer
11. Subprocessors
EnrollSalud relies on the following third-party service providers ("Subprocessors") to operate the platform. Each Subprocessor is contractually bound by confidentiality and data-protection obligations. The list below is current as of the "Last Updated" date and may change with at least thirty (30) days' notice posted to this page.
| Subprocessor | Purpose | Data Categories | Location |
|---|---|---|---|
| Vercel, Inc. | Application hosting, CDN, edge functions | All data in transit | United States |
| Supabase, Inc. | Database, authentication, file storage | Account data, lead data, consent records | United States |
| Stripe, Inc. | Payment processing, billing portal | Agent name, email, payment method | United States |
| Resend, Inc. | Transactional email delivery | Agent email, message content | United States |
| Twilio, Inc. | WhatsApp notifications to agents | Agent phone number, message content | United States |
| Anthropic, PBC | AI Plan Advisor (Claude API) | Anonymized cotizador inputs (no PII) | United States |
| Centers for Medicare & Medicaid Services (CMS) | Real-time plan availability and pricing | Anonymized household data (no PII) | United States (Federal) |
| HealthSherpa, Inc. | Optional deep-link enrollment for licensed agents | Agent NPN, lead consent record | United States |
EnrollSalud does NOT transfer agent or consumer personal data outside of the United States. EnrollSalud does NOT sell, rent, or share data with advertising networks, data brokers, marketing partners, or any third party not listed above.
12. Agents' Capture of Consumer Data
12.1 Agent's Role
When a consumer cotizes through an agent's personalized link (e.g., enrollsalud.com/q/[agent-slug]), the agent becomes the primary recipient of the consumer's contact information and quote data. EnrollSalud acts as a service provider that hosts the platform and routes data on behalf of the agent.
12.2 Agent's Independent Communications
Once a consumer's contact data is captured, the agent may use the agent's own channels (personal WhatsApp, SMS, phone, email) to follow up with the consumer outside of the EnrollSalud platform. Communications sent through the agent's own channels are NOT processed, monitored, retained, or stored by EnrollSalud, and are governed by the agent's own privacy practices and applicable law.
12.3 Consumer Rights Toward the Agent
Consumers seeking to exercise data rights (access, deletion, correction, opt-out) regarding communications received from an agent should contact the agent directly. EnrollSalud will assist consumers in identifying the agent of record upon request, but cannot delete data held by the agent outside the platform.
12.4 Consumer Rights Toward EnrollSalud
Consumers may exercise data rights regarding data stored by EnrollSalud (cotizador inputs, consent records, lead history within the platform) at any time by contacting info@enrollsalud.com. See Section 8 of this Policy.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with the revised date. We encourage you to review this page regularly.
14. Contact Information
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: