Privacy Policy

We use your information to:

• Provide you with insurance quotes and process applications
• Communicate with you about your coverage and service requests
• Improve our website and services
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security
• Send you relevant information about products and services (with your consent)
• Analyze site usage to improve user experience (only with analytics consent)

All phone calls to and from MyMesi may be recorded for quality assurance, training, and compliance purposes.

By calling or accepting calls from MyMesi, you consent to the recording of those calls.

Recordings are stored securely and are accessible only to authorized personnel within our organization.

Inbound calls to MyMesi are handled by an automated system that identifies callers and routes them to the appropriate agent.

Caller ID is used to look up existing accounts and match callers to their assigned agent.

If you are a new caller, a record is automatically created with your phone number.

If no agent is available, you will be offered options to receive a quote link via text, request a callback, or leave a voicemail.

When you provide your phone number and give your consent, we may contact you in the following ways:

• When you provide your phone number and consent, we may contact you by phone call or text message
• Calls may be made using an autodialer or prerecorded messages
• We use our local number (773) 754-4745 for outbound agent communications and our toll-free number (844) 460-6963 for inbound customer calls
• Two-way SMS messaging: you can reply to our text messages and your replies are logged
• We may send automated SMS messages including verification codes, quote links, and appointment reminders
• Message frequency varies based on your interactions
• Replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any text message will immediately opt you out of SMS communications and flag your account as Do Not Call
• Replying START or YES will re-activate SMS communications
• You can withdraw consent at any time by replying STOP to any text message or calling (844) 460-6963
• Consent to receive calls or texts is not required to purchase insurance
• Standard message and data rates from your carrier may apply
• We keep records of your consent for compliance purposes
• Reply HELP to any message for assistance

For complete details on our SMS messaging program, see our SMS/Messaging Terms and Conditions.

You can be added to our internal Do Not Call list at any time.

Once on the DNC list, you will not receive outbound calls, SMS campaigns, or be included in our call queue.

If you call us while on the DNC list, your DNC status is automatically removed since you are initiating contact.

You can opt out of SMS by replying STOP to any message.

To request DNC status, call (844) 460-6963 or email privacy@mymesi.com.

Insurance Carriers: We share your information with insurance companies to obtain quotes and process applications on your behalf.

Service Providers: We may share information with third-party service providers who help us operate our business (e.g., technology providers, medical exam providers).

Communication Providers: We use Twilio for phone calls and SMS messaging. Call and message data passes through their systems subject to their privacy policy.

Analytics Providers: If you consent to analytics cookies, anonymized usage data may be processed by third-party analytics services. No personally identifiable information is shared for analytics purposes.

Legal Requirements: We may disclose information when required by law, regulation, or legal process.

We never sell your personal information to third parties for marketing purposes.

Mobile information will not be shared with third parties/affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

MyMesi is committed to protecting your health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state health privacy laws.

• Health information is collected only when necessary for the insurance application and underwriting process
• Access to health information is restricted to authorized personnel who need it to process your application
• Health information is encrypted in transit and at rest using industry-standard encryption protocols
• We do not use your health information for marketing purposes
• Health information is never shared with third parties except as required to process your insurance application or as required by law
• We retain health information only for as long as necessary to fulfill the purpose for which it was collected or as required by law
• Health data is never included in analytics or tracking systems

You have the right to request access to, correction of, or deletion of your health information. To make a request, contact our Privacy Officer at privacy@mymesi.com or call (844) 460-6963.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You can request a detailed report of the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we have shared it
• Right to Delete: You can request that we delete your personal information, subject to certain legal exceptions (such as information needed to complete a transaction, comply with legal obligations, or detect fraud)
• Right to Correct: You can request that we correct inaccurate personal information we maintain about you
• Right to Opt Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. If this changes in the future, we will provide a clear opt-out mechanism
• Right to Limit Use of Sensitive Information: You can direct us to limit our use of sensitive personal information (such as Social Security number, health data, and financial information) to purposes that are necessary to provide our services
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive a different level of service or be charged different rates for exercising your privacy rights

In addition to California, several states have enacted comprehensive privacy laws. If you are a resident of any of the following states, you may have additional rights:

• Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and similar: Right to access, correct, delete, and obtain a copy of your personal data. Right to opt out of targeted advertising, sale of personal data, and profiling. You may appeal our decision on a privacy request by contacting privacy@mymesi.com
• Illinois (BIPA): We do not collect biometric identifiers or biometric information as defined under the Illinois Biometric Information Privacy Act
• New York (SHIELD Act): We implement reasonable safeguards to protect the security, confidentiality, and integrity of private information of New York residents, including administrative, technical, and physical controls

If you are unsure about your rights under your state's privacy laws, contact us at privacy@mymesi.com and we will assist you.

We implement industry-standard security measures to protect your information, including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored personal and health data
• Role-based access controls limiting who can view personal information
• Server-side session management with automatic timeout for inactive sessions
• Rate limiting and bot protection to prevent unauthorized access
• Regular security assessments and monitoring

No method of electronic transmission or storage is 100% secure. If you believe your personal information has been compromised, contact us immediately at privacy@mymesi.com.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

• Quote data: Automatically deleted after 90 days if no application is submitted
• Application and policy data: Retained for the life of the policy plus any period required by insurance regulations
• Call recordings: Retained per applicable regulatory requirements
• Analytics data: Aggregated and anonymized; retained in aggregate form
• Cookie consent records: Retained in your browser's local storage until you clear it or reset preferences

Regardless of your state of residence, you have the right to:

• Access and review the personal information we have about you
• Request corrections to inaccurate information
• Opt out of marketing communications
• Request deletion of your information (subject to legal requirements)
• Request copies of your call recordings
• Request copies of your SMS message history
• Opt out of call recording (note: this may limit our ability to serve you by phone)
• Change your cookie and tracking preferences at any time using the button above
• Opt out of analytics tracking by choosing "Essential Only" on the cookie banner

To exercise these rights, please contact us at privacy@mymesi.com or call (844) 460-6963.