Privacy Policy

1. Introduction

At BenefitNest, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our employee benefits platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, job title
• Employee Data: Employment information, dependent details, benefit selections
• Health Information: Claims data, wellness program participation (when applicable)
• Financial Information: Bank account details for reimbursements
• Usage Data: How you interact with our platform

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process benefits enrollments and claims
• Send transactional communications and updates
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Detect and prevent fraud

4. Data Sharing and Disclosure

We may share your information with:

• Your Employer: Aggregate and anonymized data for benefits administration
• Insurance Providers: To process claims and enrollments
• Service Providers: Third parties who assist in operating our platform
• Legal Requirements: When required by law or legal process

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• End-to-end encryption for data in transit and at rest
• SOC 2 Type II certification
• Regular security audits and penetration testing
• Role-based access controls
• 24/7 monitoring and intrusion detection

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. After account termination, we retain data for a reasonable period as required by law or for legitimate business purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities

8. GDPR Compliance

For users in the European Economic Area (EEA), we process personal data in accordance with the General Data Protection Regulation (GDPR). We act as a data processor on behalf of your employer, who is the data controller. We have implemented appropriate safeguards for international data transfers.

9. CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, request deletion, and opt-out of any sale of personal information. We do not sell personal information.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie preferences through your browser settings. Essential cookies are required for the platform to function properly.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@benefitnest.space
Data Protection Officer: dpo@benefitnest.space
Address: 100 Technology Drive, Suite 500, San Francisco, CA 94105