Gravie Website Privacy Policy

Gravie knows that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. This document describes our Privacy Policy.

Gravie Agency LLC is licensed to sell health insurance to businesses, individuals and families. Gravie Administrative Services LLC is a licensed Third Party Administrator and provides administrative services to groups offering self-funded group plans to their employees or members. Gravie Agency LLC and Gravie Administrative Services LLC are wholly owned subsidiaries of Gravie, Inc. This Privacy Policy applies Gravie Agency LLC, Gravie Administrative Services LLC and Gravie, Inc. Throughout this document, we will refer to all entities as “Gravie.” Sometimes we will simply say “we,” “us” or “our.”

When you register on the Gravie website, you become a “Member,” with certain rights and privileges described in this Privacy Policy, the website Terms of Service, and the website Terms of Use. We may refer to you as a Member, but more often, we will use the terms “you” or “your”.

This Privacy Policy applies to your use of the website at and (the “Website”). It only applies to information collected via the website. This Privacy Policy describes how we gather and use information on the Website, including certain personally identifiable information. By using this Website, you agree that we may collect, disclose and use your personally identifiable information as described herein.

This website is intended for a United States audience. Any information you provide, including any personal information, will be transferred to and processed by a computer server located within the United States.

Collection and Use of Information

Personally Identifiable Information (PII)

We collect PII from users of this website who voluntarily choose to disclose this information in order to access the products and services available through this website. Available products and services include personalized online decision support systems to help you review, compare and select policies of insurance, health savings accounts (HSAs), health reimbursement arrangements (HRAs), group health plans, and other products and services made available by Gravie. We will also help you to arrange for payment of insurance policies.

In order to provide these services (the “Gravie Service”), we need to collect some of your PII, which may include your name, date of birth, address, contact information, and whether you use tobacco. If you are considering family coverage, we will need to collect the same information on family members. If you are enrolling in a group health plan, you may be asked to respond to medical questions on an application for coverage. To arrange for payment of individual insurance policies, you will need to provide us with bank information. To determine your eligibility for government subsidies (such as premium tax credits on a state or federal health care exchange), we will need your social security number and financial information.

The decision to provide your information is completely voluntary and is not required. However, if you choose not to provide the requested information, Gravie will not be able to make its products and services available to you.

We collect PII from you when you:

  • register to become a Member;
  • use tools on the website;
  • conduct a transaction (e.g., purchase coverage) through the Gravie Service; and
  • choose to provide us with additional information.

Legal Authority to Collect PII

Gravie Agency LLC has entered into an agreement with the Centers for Medicare and Medicaid Services (CMS) to assist consumers in shopping, completing applications, and assisting in determining eligibility for premium tax credits for Qualified Health Plans (QHPs) offered through the federally facilitated marketplace (FFM). This agreement, along with section 1312(e) of the Affordable Care Act and the privacy and security standards set forth in the Affordable Care Act and 45 C.F.R. 155.260, establish the scope of our authority to collect PII for the purposes outlined above. Gravie Agency LLC is also a licensed insurance producer in certain states and has entered into agreements with certain health insurance carriers to market and sell their products on and off the exchange. In accordance with state licensing, appointment, and privacy requirements, Gravie Agency LLC collects PII for purposes of providing services under these agreements.

Gravie Administrative Services LLC is licensed as a third party administrator in multiple states. Gravie Administrative Services LLC contracts with plan sponsors to provide administrative services to self-funded group health plans under the Employee Retirement Income Security Act (ERISA). Gravie Administrative Services LLC collects PII for purposes of providing these services.

Gravie, Inc. also collects PII for the purposes of providing additional products and services, subject to the user’s agreement to its Terms of Service, Terms of Use, and this Privacy Policy.

Non-Personal Information

We collect information other than PII (“Non-Personal Information”) from all visitors to this Website in order to enhance the user’s experience while visiting the Website and to improve the design and content of the Website, including:

  • the number of visitors to this website;
  • the websites from which visitors enter this website;
  • the pages visitors visit while on this website;
  • the actions (e.g., button clicks) visitors take while on this website;
  • the length of these visits;
  • the names of the visitors’ Internet providers and internet protocol addresses;
  • the visitors’ browser information;
  • the speed of the visitors’ connections, and
  • the search terms used to find this website, as applicable.

We also use technology that helps us compile aggregated statistics about our users and their use of the Website. This aggregated information does not contain any PII and is used for improving the Website and the tools on the Website (including improvements to the recommendation engine), aggregated reports, benchmarking and other marketing purposes. Aggregated information cannot be traced back to specific users by third parties other than third parties who are acting as our agents. We may contract with third parties to compile these aggregated statistics for us.

Gravie Pages on Third-Party Websites

We maintain accounts on third party websites, such as social media sites, as tools to better interact with the public. The security and privacy policies of third party websites apply to your activity on those sites. Users of third party websites often share information with the general public, user community, and/or the third party operating the website. You should review the privacy policies of all websites before using them and ensure that you understand how your information may be used. You should also adjust privacy settings on your account on any third party website to match your preferences.

Choices About Your Personal Information

We want to keep your PII accurate. You may contact us at regarding requesting a change to or to update the PII you have provided.

Links to Other Websites

This Website includes links to other websites. This Privacy Policy does not apply to these links. We do not endorse and are not responsible for the operation or content of these websites. Please consult the privacy policy for each website you visit.


We collect information about you and your use of this Website through the use of cookies. Cookies are small files that a website can store on your computer’s hard drive for record-keeping or other administrative purposes. If you are concerned about the use of cookies, you can choose to enable a feature in your browser software that will erase cookies, block all cookies or warn you before cookies are stored or exchanged. If you reject cookies, you will only be able to view the site.

Information Automatically Collected and Stored

When you browse through our Website, we use Google’s Universal Analytics software to gather and store a variety of information about your visit. This information can be used to identify you as an individual by Gravie and may be connected to other data Gravie has about you, including PII.

The basic information we collect during your visit includes:

  • the name of the domain you use to access the Internet (for example,, if you are using a Comcast online account, or, if you are connecting from Stanford University's domain);
  • the date and time of your visit to our website;
  • the pages, your activity on those pages, and documents you viewed on our website;
  • the URL of the website you visited prior to ours;
  • the type and version of your web browser and operating system, and
  • your location at the time of your visit, down to the city-level.

Some examples of the ways we use your activity information:

  • customizing your experience on the website including managing and recording your preferences;
  • marketing, product development and research purposes;
  • tracking resources and data accessed on the website;
  • developing reports regarding website usage, activity and statistics;
  • assisting users experiencing website problems;
  • enabling certain functions and tools on the website, and
  • tracking paths of visitors to the website and within this website.

The data is available to designated staff who require this information to perform their duties. It is retained only for as long as needed for proper analysis.

Data Security

Data security is implemented through physical, administrative and technical safeguards we put in place and operational procedures we follow to protect PII. We protect your transactions involving PII over the Internet using Transport Layer Security (TLS) technology. We restrict access to your PII in our database to our authorized employees, our agents and certain of our authorized partners.

HIPAA Compliance

Some PII we collect may be Protected Health Information (“PHI”) within the meaning of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Examples of PHI include the demographic information you provide during registration combined with enrollment and payment information. To the extent applicable, Gravie agrees to comply with HIPAA and the rules issued pursuant to HIPAA. Certain applicable laws and contracts may also require insurers and third party vendors to protect PHI collected by us through this website.

Disclosure of Information

Pursuant to the "Gravie Release of Information” form that you are required to agree to and sign if you wish to access the Gravie Service, or to the extent allowed by HIPAA without such Release of Information, we may use and/or disclose the information you provide in the following ways:

  • With marketing vendors, in order to keep you informed about Gravie’s products and services via phone, email or other means. Please note that we will never sell your information for marketing purposes and you always have the right to opt-out of receiving communications from us.
  • With our business partners, including employers, third party vendors, and referral partners, in order to coordinate payments, provide products and services, and enable administrative functions related to the products and services you choose.

You do not have to sign the “Gravie Release of Information” form; however, if you do not sign, Gravie will not be able to make its products and services available to you.

Any other disclosures of the information you provide will only be made with your written authorization, or as required by law.

Pursuant to the “Gravie Release of Information” forms that are optional, you may request Gravie Agency LLC and Gravie Administrative Services LLC to exchange information in order to facilitate services between the two entities (e.g., HRA reimbursements, use of HRA contributions towards premium expenses).

Children’s Privacy

This Website is not intended for use by children under the age of 18. We will not knowingly collect any Personal Information from visitors under the age of 18 online through this Website, except that parents/legal guardians or Personal Representatives of children under the age of 18 may register on a child’s behalf in order to purchase a child-only plan. If you think that we have collected Personal Information from a visitor under the age of 18, please contact us.

California Residents’ Privacy Rights

Do Not Track

Gravie does not currently use technology that recognizes web browser “Do Not Track” signals or other similar mechanisms.

Other Third Parties

Pursuant to the “Gravie Release of Information” form, Gravie shares some information with third party marketing vendors for Gravie’s marketing and communications. However, Gravie will not share your information with third parties for their direct marketing purposes. Therefore, we are not subject to the requirements of California Civil Code 1798.83.

Grievances and Complaints

In accordance with California Civil Code Sec. 1789.3, California residents are entitled to know that they may file grievances and complaints with the Complaint Assistance Unit of the Division of Consumer Services of the Department of Consumer Affairs. Grievances and complaints may be submitted in writing to 400 R Street, Suite 1080, Sacramento, CA 95814; or by phone at 916.445.1254 or 800.952.5210; or by email to

Contact Us

If you have any questions, comments or concerns about our privacy policy or your privacy please contact us by phone at or by email at

Complaints and Grievances

You may contact us directly with any complaints by phone at or by emailing

You may also submit a complaint to the Centers for Medicare and Medicaid Services (CMS) via the Federally Facilitated Marketplace (FFM) Call Center by calling: 800.318.2596, 24 hours per day, 7 days per week, except holidays.

California residents also have the right to submit any complaints or grievances, as described above in the “California Residents’ Privacy Rights” section.

Changes to Our Privacy Policy

We may modify, alter or update our privacy policy at any time, so we encourage you to review our privacy policy frequently. We will not provide individual notice to you of changes to our privacy policy, but when we make updates to our privacy policy, we will update the date in this section.

This page was last updated January 9, 2018.