Privacy Policy
This policy explains how Quote Variety ("we," "us," or "our") handles information through FindMyACAPlan.com. We provide ACA information, area plan availability, and referrals to licensed insurance agents. This is not a government website or an insurance application.
Information we collect
We collect information you enter, information generated by your use of the site, and location and Marketplace results returned by service providers. We do not ask for Social Security numbers, payment information, medical records, diagnoses, or prescription lists.
| Information | Why we use it | Who receives it |
|---|---|---|
| Contact identifiers First and last name, email address, and phone number on a contact request. Privacy forms may request fewer details. | Respond to requests, arrange requested agent contact, and honor privacy choices. | Operational providers; the receiving agency identified through the contact form’s marketing-partner link. Privacy requests are not marketing leads. |
| Location, age, and coverage details ZIP, city, state, county, date of birth, derived age, and current coverage answer. | Look up area plan availability and provide context for requested agent contact. | CMS receives location and coverage year only; lookup providers receive location inputs. The receiving agency receives the submitted profile, including date of birth and coverage answer. |
| Internet and device information IP address, approximate country and state, browser information, page requests, campaign tags, and first-party preferences. | Run and secure the website, show regional content, remember a check, identify a referral's source, and honor opt-outs. | Hosting and technical providers. Campaign tags accompany a submitted referral. No advertising pixels or cross-site advertising tools are enabled. |
| Plan availability and request records Area plan counts, consent and referral references, submission outcomes, delivery errors, privacy requests, and suppression records. | Display results, document requested contact and delivery, investigate failed submissions, process privacy requests, and prevent unwanted referrals. | The receiving agency gets the submitted profile and consent record. Convoso processes submitted lead data for the receiving agency. Operational providers support request handling and records. |
| Consent-session records Form content, disclosures, entered contact details, location and coverage answers, interactions, IP address, and browser/device details. Date-of-birth input values are masked. | Document the form experience and consent. Recording can occur before submission, including if you leave without submitting. | ActiveProspect’s TrustedForm. A submitted referral includes its certificate URL for the receiving agency. |
How we use information
We use your ZIP to look up area plan availability and your date of birth and coverage answer to give context to an agent referral you request. We also use necessary information to operate and protect the site, investigate problems, document consent, handle privacy requests, and meet legal obligations. An area plan count does not approve coverage or determine insurance eligibility. This form does not calculate a personal premium or subsidy.
Sharing and paid referrals
If you submit a contact request, we send your name, email, phone number, date of birth, city, state, ZIP code, IP address, opt-in time and URL, and TrustedForm certificate URL to InboundPro through its Convoso lead-management system. We may receive compensation for the referral. Depending on the law and arrangement, this disclosure may be considered a sale of personal information. The receiving agency handles the information under its own privacy policy. We keep restricted submission and consent records to document your request and investigate delivery failures or rejections.
CMS receives ZIP, county, state, and coverage year to count plans in an area. We do not send date of birth, names, contact details, or your coverage answer to CMS. Location services receive the inputs needed for a lookup. Hosting and technical providers process information to operate the website. Information may also be disclosed when required by law or reasonably necessary to protect rights, investigate misuse, or respond to lawful requests.
Privacy and do-not-call forms are used to handle those requests, maintain records, and communicate relevant restrictions to a prior recipient when required. Information from those forms is not sent as a new insurance lead.
We use ActiveProspect’s TrustedForm on the quote form to record the form experience and consent, including information entered and interactions before submission. We mark date-of-birth inputs as sensitive so their values are masked in the recording. See the TrustedForm Privacy Notice.
We use Google reCAPTCHA Enterprise on the final quote-form step to detect automated submissions and fraud. Google processes browser, device, and interaction information for this check. Our server sends the verification token to Google before accepting a lead. Google’s Privacy Policy and Terms of Service apply.
Sale, sharing, and your choices
Use Do Not Sell or Share My Personal Information to save a browser preference without giving your name or email. You can also identify an earlier referral using the phone number or email you supplied. We block new referrals associated with an active opt-out and record requests concerning earlier disclosures for review. The area options check remains available.
No advertising pixels or disclosures to advertising networks for cross-context behavioral advertising are enabled on this site. If these practices change, we will update this policy and provide the relevant choices before the new processing begins.
Cookies, browser storage, and privacy signals
First-party cookies remember an opt-out and, after a submitted referral, a reference that lets us apply a later preference to that referral. Browser session storage may keep ZIP/location details, campaign tags, and public area plan availability cached for five minutes. We do not save date of birth, coverage answers, or unsubmitted contact fields to browser storage. TrustedForm separately records the quote-form session as described above. Access-controlled pages may use authentication cookies. Clearing browser storage can remove these local records.
We honor Global Privacy Control as a sale/sharing opt-out for the browser and any referral we can associate with it. For another device or other contact details, submit an opt-out request. A conventional browser “Do Not Track” signal is not treated as a separate setting. Google Fonts may receive your IP address and browser information when loading site fonts.
How long we keep information
We keep information for its disclosed purpose, taking account of outstanding requests, legal recordkeeping, disputes, security, and the need to honor opt-outs. Privacy-request information is not used to market insurance.
- Unsubmitted check: ZIP/location details and campaign tags may stay in browser session storage until cleared or the session ends. Public area plan availability is cached there for five minutes. Session restoration can preserve stored records. We do not save date of birth, coverage answers, or contact fields to browser storage. TrustedForm separately records the form session and maintains its records under its privacy notice.
- Privacy cookies: Browser opt-out and referral-reference cookies last up to one year unless cleared. An active Global Privacy Control signal continues to apply.
- Submitted referrals: The agency retains information under its own policy. We keep a referral reference, receiving agency, time, delivery status, the contact disclosure and partner list you accepted, the TrustedForm certificate URL, and hashed contact identifiers for routing and privacy follow-up. Our restricted submission log also records verified contact information, city, state, ZIP, IP address, opt-in time and URL, Convoso lead ID, and delivery or rejection reasons so we can investigate unsuccessful submissions. Requests blocked before verification are logged without their contact fields. We do not retain full dates of birth in these databases.
- Privacy requests: Request and response records are retained for at least 24 months where required. Suppression records are retained as needed to honor the choice; do-not-call records are kept for at least five years.
- Security records: Technical providers retain logs under their operational policies. Our request rate-limit records expire after a short abuse-prevention window and are removed during subsequent request processing.
Your privacy rights
Depending on applicable law, you may request access to or a copy of your information, correction, deletion, an opt-out of sale/sharing or targeted advertising, limits on certain sensitive-information uses, or review of a privacy decision. Information may be retained for legal duties, security, disputes, or to honor a suppression request.
Submit a request online. For access, correction, or deletion, we may verify your identity using information reasonably related to the request. Do not send identity documents unless specifically requested through a suitable channel. An authorized representative may submit a request and may need to show authority. Identity verification is not required to save a browser opt-out.
Where California law applies, we acknowledge access, correction, and deletion requests within 10 business days and ordinarily respond within 45 calendar days. We explain any permitted extension. Sale/sharing opt-outs are processed as soon as feasible and within applicable deadlines. We do not unlawfully discriminate for exercising privacy rights. See California Privacy Rights.
Children
This site is intended for adults and is not marketed to children. Contact us if you believe information was submitted without appropriate authority.
Security and external websites
We use access controls and technical safeguards appropriate to the site, including restricted access to privacy-request records. No internet service can guarantee complete security. Linked agencies, CMS, and other external websites have their own policies. This policy covers FindMyACAPlan.com and does not replace theirs.
Changes and contact
We update this policy when our practices change and show the revision date below. Material changes receive additional notice where required. Questions and privacy requests can be submitted through our Contact page.
Last revised: October 29, 2026