Privacy and Security Policy

Effective Date: September 08, 2026

The Highlights

Forsure.ai ("Forsure," "we," "our," or "us") is committed to protecting your privacy and complying with applicable privacy and health information laws, including the Health Insurance Portability and Accountability Act ("HIPAA"), the California Consumer Privacy Act ("CCPA"), and other applicable federal and state privacy regulations. This Privacy & Security Statement (this "Statement") explains:

  • what personal data we collect,
  • how we use and protect that information, and
  • the rights and choices available to you.

Forsure processes personal data in order to operate our business, support our platform, and deliver healthcare navigation, benefits consulting, and technology services to employers, their employees and dependents, and website visitors. In limited circumstances, we may share information with trusted third parties (for example, service providers, legal authorities when required, or in connection with a corporate transaction). We take data security seriously and implement technical and organizational safeguards to protect your information. If you have questions, you can always contact us at compliance@forsure.ai.

‍

INTRODUCTION

We respect your privacy and are committed to protecting it through this Statement. This Statement describes the types of information we may collect from you or that you may provide to us, for example when you visit our websites, use our platform, interact with our AI agents Alex and Ollie, or communicate with us, and how we use, protect, and disclose that information. Your use of our Services is governed by our Terms of Service, which should be read in conjunction with this Statement.

Forsure is an AI-native healthcare benefits navigation and technology company that supports employers and their employees by providing tools, insights, and expert guidance related to healthcare benefits strategy, plan design, compliance support, benefits navigation, and employee education (collectively, our "Services").

Our Services are used by employers, plan administrators, and business partners in a professional capacity, and by employees, plan members, and their dependents in a personal capacity. Depending on how you interact with us, this Statement applies to you as an employer representative, plan member, dependent, prospective customer, partner, website visitor, or other contact.

Our Role. When you visit our website or use the Services as an individual, Forsure determines how your personal information is used and is responsible for it under this Statement. When your employer or plan sponsor provides the Services to you, Forsure processes your information on behalf of your employer or its group health plan as a service provider and, where protected health information is involved, as a Business Associate under HIPAA. In those cases, your employer's agreement with Forsure and the applicable Business Associate Agreement also govern how your information is handled.

This Statement does not apply to information collected by third-party websites or services that may link to or be accessible from our websites. We encourage you to review the privacy policies of those third parties.

By accessing or using any Forsure website, platform, or communication, you acknowledge that you have read and understood this Statement. We may update this Statement from time to time, and we encourage you to review it periodically.

‍

1. Information We Collect

We collect several types of information in connection with our business operations, including:

Information You Provide to Us

When you visit our websites, request information, use our platform, interact with Alex or Ollie, complete onboarding, submit support tickets, participate in surveys, schedule appointments, or otherwise contact us, you may provide personal information such as:

  • Name
  • Employer or organization
  • Job title
  • Email address
  • Telephone number
  • Mailing address
  • Date of birth
  • Health or insurance information, including plan, coverage, claims, provider, prescription, and care information you share with us
  • Appointment and care preferences
  • Employer or benefits plan information
  • Payment information (processed securely via Stripe)
  • Communications and responses with Alex and Ollie (voice, text, or video)
  • Records of correspondence or communications with us
  • Insurance card images, lab results, prescription information, or data from connected health devices or wearables that you choose to link to the Services.

If you use the Services to manage benefits or care for your dependents or other household members, you may provide their information as well. You represent that you are authorized to do so, and this Statement applies to that information.

We may also collect information provided during in-person meetings, events, or other offline interactions.

Information We Receive from Your Employer or Plan

If your employer or plan sponsor provides the Services to you, we may receive information from them or their vendors, such as eligibility and enrollment records, plan documents, and claims or utilization data, in order to deliver and support the Services.

Information Collected Through Forms

This includes information submitted when:

  • requesting demos or consultations,
  • registering for events or webinars,
  • subscribing to communications,
  • applying for employment or partnerships, or
  • otherwise engaging with Forsure.

Usage Data, IP Addresses, and Cookies

As you interact with our websites or platform, we may automatically collect technical and usage information, including:

  • IP address
  • browser type and version
  • device information and operating system
  • time zone and location data (precise location only if you consent)
  • pages viewed, features used, and actions taken within the app
  • referring URLs
  • cookies and similar tracking technologies

This information helps us understand usage patterns, improve our services, enhance security, and monitor system performance.

2. Email Communications

We may use your email address to share important updates about your health or insurance, provide reminders or confirmations, request feedback via surveys, and notify you about new features. You may opt out of promotional emails at any time by clicking the "unsubscribe" link in any email or by contacting us at compliance@forsure.ai. Transactional and account-security emails, such as verification codes and appointment confirmations, are sent as part of the Services and cannot be unsubscribed from while you maintain an account. Emails from Alex or Ollie may appear automated, but all communications are governed by our strict privacy and security standards. We may use limited tracking technologies (such as pixels) to understand whether emails are opened or interacted with. This helps us improve relevance and effectiveness.

‍

3. HOW WE USE YOUR INFORMATION

We use your information to:

  • Provide personalized, proactive support through Alex, Ollie, and human agents
  • Help individuals navigate healthcare and insurance decisions
  • Support plan administrators in managing benefit operations
  • Communicate with your employer or plan administrator as necessary to administer your benefits
  • Send confirmations, alerts, and helpful tips
  • Process payments and manage subscriptions
  • Conduct surveys and collect feedback
  • Monitor platform usage and improve performance
  • Ensure security, prevent fraud, and comply with legal obligations
  • Deliver, maintain, and improve our Services, including personalizing your experience and ensuring overall quality and reliability
  • We do not use your personal information to train AI models.

‍

5. ROLE OF ALEX & OLLIE (AI AGENTS)

Alex and Ollie are Forsure's intelligent assistants who work behind the scenes and directly with users to deliver smarter healthcare and insurance navigation.

Ollie is your AI-powered personal healthcare assistant. Ollie helps individuals understand insurance benefits, find providers, schedule care, explain confusing healthcare terms, and follow up to ensure your needs are met.

Alex is designed to support plan administrators, HR professionals, and benefits teams. Alex provides real-time assistance with benefit and eligibility questions, change reporting for employee status or plan selection, analytics dashboards and automated reporting, help navigating billing, enrollment, and communications, and seamless coordination between your organization and Forsure.

Alex and Ollie are features of the Services operated by Forsure. Information you share with them is collected and used by Forsure as described in this Statement. Alex and Ollie are not licensed medical, insurance, legal, or financial professionals. Human Forsure team members may review interactions with Alex and Ollie to provide support, ensure quality, and investigate safety flags.

‍

6. THIRD-PARTY AI PROVIDERS AND DATA PROCESSING

To operate Alex and Ollie, Forsure relies on third-party cloud and AI infrastructure.

With respect to these providers:

  • They act solely as service providers to Forsure and process data only as necessary to deliver the Services.
  • Forsure maintains data protection agreements with these providers, including Business Associate Agreements (BAAs) where protected health information is involved.
  • Data is processed in accordance with applicable privacy and healthcare regulations and protected using industry-standard security measures.
  • Forsure does not permit third-party providers to use your data to train or improve their models.
  • Forsure does not sell personal data to any third party.

‍

7. SHARING YOUR INFORMATION

We will never sell or rent your data. We may share your data under the following conditions:

With Service Providers. We work with vetted partners under confidentiality agreements who help us host and secure data, provide AI and communication infrastructure, analyze app usage, send transactional emails, text messages, and surveys, deliver customer support, and process payments (e.g., Stripe). These providers are contractually prohibited from using your data for their own purposes.

With Your Employer or Plan Sponsor. If your access to the Services is provided by your employer or plan sponsor, we may provide them with aggregated or de-identified usage and outcomes reporting, and with information necessary to administer your benefits under their plan. We do not share the content of your individual conversations with Alex or Ollie, or your individual health information, with your employer except as you direct, as required by law, or as necessary to administer your benefits.

With Healthcare Providers and Payers at Your Direction. When you ask Ollie to find a provider, schedule an appointment, or resolve a benefits or billing question, we share the information needed to complete that request with the relevant provider, insurer, or plan administrator.

With Your Consent or At Your Direction. You can opt in to share information with third parties like doctors, care coordinators, employers, or family members. We will not share your information with third parties for their marketing purposes without your explicit consent.

Legal or Safety Requirements. We may disclose information to comply with law enforcement requests, subpoenas, court orders, or to protect public safety or legal rights. Where legally permitted, we will make reasonable efforts to notify you of such disclosures.

Business Transfers. If Forsure is acquired, merged, or reorganized, your data may be transferred to the successor organization. We will ensure privacy standards remain intact and will notify affected users of any change in the party responsible for their data.

‍

8. COOKIES & TRACKING TECHNOLOGIES

We may use cookies and similar tracking tools to maintain your session, remember your preferences, and analyze traffic and performance. The types of cookies we use include:

  • Essential Cookies: Required for basic platform functionality, such as maintaining your session and security.
  • Analytics Cookies: Help us understand usage patterns and improve our services (e.g., page views, feature engagement), including heatmap and session-analytics tools on our public website.
  • Preference Cookies: Remember your settings and personalization choices.

You can modify cookie settings in your browser. Some features may not work properly if cookies are disabled. \

‍

9. DATA STORAGE & SECURITY

All data is stored on secure servers located in the United States. We apply rigorous safeguards, including:

  • Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
  • Multi-factor authentication and role-based access control limiting data access to authorized personnel
  • Audit logging of access to sensitive data
  • Regular security assessments, penetration testing, and continuous monitoring
  • HIPAA-aligned data handling practices for protected health information
  • Automated safety systems that monitor for unauthorized access or anomalous activity

While no system is 100% secure, we are committed to minimizing risk and maintaining your trust. We use Stripe to securely process payments and do not store your full payment card information on our servers.

‍

10. HIPAA PRACTICES

Forsure is not a healthcare provider or health plan. When we provide Services to a group health plan or other covered entity, Forsure acts as a Business Associate and handles protected health information (PHI) under a Business Associate Agreement with that entity. Our practices include:

  • Maintaining Business Associate Agreements (BAAs) with all sub-processors who handle PHI
  • Implementing administrative, technical, and physical safeguards for PHI
  • Limiting access to PHI to the minimum necessary for service delivery
  • Training personnel on HIPAA requirements and data handling procedures
  • Conducting periodic risk assessments and maintaining incident response procedures

Where information we hold is not PHI, we apply the same HIPAA-aligned safeguards as a matter of practice.

‍

11. YOUR PRIVACY RIGHTS

You have the following rights with respect to your personal information:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Correction: You may request that we correct or update inaccurate or incomplete personal data.
  • Right to Deletion: You may request that we delete your personal data, subject to legal retention requirements.
  • Right to Opt Out: You may opt out of promotional emails, limit app notifications (via device settings), and manage cookie preferences.
  • Right to Data Portability: Where technically feasible, you may request your data in a structured, commonly used, machine-readable format.
  • Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.

To exercise any of these rights, contact us at compliance@forsure.ai or 888-786-6550. We will verify your identity before completing certain requests and will respond within the timeframes required by applicable law.

Account Deletion

You may request deletion of your Forsure account and associated personal data at any time. We honor deletion requests in accordance with applicable privacy and healthcare regulations, including HIPAA. You may submit a deletion request through either of the following:

  • Email: Send a request to compliance@forsure.ai from the email address associated with your account. Include your full name and the subject line "Account Deletion Request."

After you submit a request:

(1) we will verify your identity within 5 business days to protect against unauthorized requests;

(2) once verified, your account will be deactivated immediately and removed from active systems within 30 days;

(3) personal data associated with your account, including profile information, communication history with Alex and Ollie, and preferences, will be permanently deleted from production systems, subject to the retention exceptions described in Section 14;

(4) you will receive a confirmation email once the deletion is complete.

If your account was created through your employer's benefits program, certain plan-related records may be retained by your employer or plan administrator independent of Forsure. Contact your HR or benefits team for their retention policy.

‍

12. STATE PRIVACY RIGHTS (CCPA/CPRA AND OTHER STATES)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
  • Right to Opt Out of Sale or Sharing: Forsure does not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
  • Right to Limit Use of Sensitive Personal Information: To the extent we process sensitive personal information (such as health information), you may request that we limit its use to purposes necessary to provide the Services.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

Residents of Texas, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have similar rights and may exercise them using the same methods. Certain information, including protected health information governed by HIPAA, may be exempt from some state privacy laws.

To submit a request, contact us at compliance@forsure.ai or call 888-786-6550. You may also designate an authorized agent to submit requests on your behalf.

‍

13. CHILDREN'S PRIVACY

The Services are intended for adults 18 years of age and older. We do not knowingly collect personal information directly from anyone under 18. Information about dependents under 18 may be provided to us by a parent or guardian who uses the Services to manage their family's benefits, and is handled under this Statement. If you believe a child has provided us with personal information directly, please contact us at compliance@forsure.ai and we will promptly delete it.

14. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes described in this Statement, unless a longer retention period is required or permitted by law. In determining retention periods, we consider the duration of our relationship with you, legal obligations requiring data preservation, statutes of limitation for potential legal claims, and legitimate business interests such as fraud prevention and security.

Certain information may be retained after account deletion only as required by law or for legitimate business purposes, including:

  • Records required under HIPAA, ERISA, or other healthcare and insurance regulations
  • Transaction and billing records required for tax, audit, or financial compliance (typically 7 years)
  • De-identified or aggregated data that cannot be linked back to you
  • Information necessary to defend legal claims, prevent fraud, or comply with a subpoena or court order
    ‍

Retained data is stored under the same security and access controls described in Section 9. When personal information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures

‍

15. INTERNATIONAL DATA TRANSFERS

Forsure is based in the United States and our servers are located in the United States. The Services are intended for users in the United States. If you access our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our Services, you consent to the transfer of your information to the United States.

16. LEGAL BASIS FOR PROCESSING

To the extent the General Data Protection Regulation or similar laws apply, we process your personal data on one or more of the following legal bases:

  • Contract Performance: Processing necessary to perform our contractual obligations to you under the Terms of Service (e.g., providing the Services, processing payments).
  • Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving our Services, preventing fraud, ensuring security), where those interests are not overridden by your rights.
  • Consent: Where you have given us specific, informed consent to process your data for a particular purpose (e.g., location data, optional health-related services). You may withdraw consent at any time.
  • Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject (e.g., tax reporting, regulatory compliance, responding to lawful government requests).

17. BREACH NOTIFICATION

In the event of a data breach that affects your personal information, Forsure will:

  • Notify affected individuals without unreasonable delay, and in any event within the timeframes required by applicable law, including HIPAA (no later than 60 days after discovery) and state breach notification laws
  • Notify applicable regulatory authorities as required by law
  • Provide information about the nature of the breach, the data affected, steps taken to address it, and recommendations for protective measures you can take
  • Document all breaches and maintain records of our response actions

For breaches involving protected health information (PHI), we will comply with HIPAA breach notification requirements, including notification to the U.S. Department of Health and Human Services where applicable.

‍

18. AUTOMATED DECISION-MAKING

Forsure uses automated systems, including AI-powered agents Alex and Ollie, to provide personalized recommendations, process information, and deliver our Services. These systems may include automated safety systems that monitor and flag account activity or usage patterns that may violate our Terms of Service, applicable law, or our policies.

When activity is flagged by our safety systems, we may review the relevant information, including account details, usage logs, and content associated with the flagged activity, to investigate potential misuse and take appropriate action, which may include issuing warnings, restricting access, or terminating accounts.

We do not use solely automated decision-making (without human involvement) to make decisions that produce legal effects or similarly significantly affect you. Where automated processing assists in decisions that affect your access to Services, you have the right to request human review, express your point of view, and contest the decision by contacting us at compliance@forsure.ai.

‍

19. SMS TEXT MESSAGING

Forsure provides SMS text messaging to help you stay informed with important account or platform related topics that need your attention. Message types include: login verification codes (2FA), account activity alerts, appointment reminders, and billing or statement notifications. Message frequency varies and standard message and data rates may apply. You consent to receive these messages through our onboarding steps by opting in and providing your mobile device number. You may opt out at any time by replying STOP to any SMS text message you receive from Forsure. Reply HELP for help. For support, contact compliance@forsure.ai.

SMS messages are sent by Forsure to provide customer communications. We do not share or sell mobile opt-in data or phone numbers to third parties or affiliates for marketing purposes. Carriers are not liable for delayed or undelivered messages.

‍

20. CHANGES TO THIS STATEMENT

We may update this Privacy & Security Statement as our platform evolves or as required by changes in applicable law. We will notify you of significant changes via email, in-app message, or through the website. The latest version will always be available at www.forsure.ai/privacy. Your continued use of our Services after any changes constitutes your acceptance of the updated Statement. We encourage you to review this Statement periodically.

21. INCORPORATION INTO TERMS OF SERVICE

This Privacy & Security Statement is incorporated into and forms part of Forsure's Terms of Service. All defined terms used in this Statement but not defined herein shall have the meanings given to them in the Terms of Service. The Terms of Service govern your relationship with Forsure generally; in the event of any conflict between this Statement and the Terms of Service with respect to the collection, use, or protection of personal information, this Statement shall control. The Terms of Service are available at  www.forsure.ai/terms-service].

22. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy & Security Statement or our data practices, please contact us:

‍
Email: compliance@forsure.ai
Phone: 888-786-6550
Website: www.forsure.ai

For HIPAA-related inquiries or to report a potential data breach, please contact our Privacy Officer at compliance@forsure.ai with "HIPAA Inquiry" or "Data Breach Report" in the subject line.

‍

cross