Privacy Policy -- Toravine

Toravine ("we," "us," or "our") is a product of Smart Technology Investments LLC. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Medicare plan optimization services.

1. Information We Collect

Information you provide directly:

Email address (if you create an account)
Medicare profile data (age, ZIP code, medications, providers, conditions, income)
Payment information (processed by Stripe; we do not store card numbers)

Information collected automatically:

IP address and approximate geolocation
Browser type, operating system, device type
Pages visited, time on page, referring URL

2. How We Use Your Information

To run Medicare plan optimization calculations
To generate and deliver optimization reports
To process payments and manage credit balances
To send transactional emails
To improve the product and detect fraud

3. Health Data Handling

The health profile data you provide (medications, conditions, provider preferences) is used solely for plan optimization. We do not sell health data to third parties. Health data entered without an account is processed in your browser and not stored on our servers. Account-linked health data is stored encrypted and can be deleted by deleting your account.

4. Data Sources

Our models use CMS Plan Finder data, CMS formulary files, CMS Star Ratings, AHRQ MEPS expenditure distributions, and FDA NDC databases. These are aggregate federal datasets. We do not collect personal data from these sources.

5. Third-Party Services

Cloudflare -- CDN, DDoS protection, Workers API hosting, D1 database
Stripe -- Payment processing (PCI-DSS compliant)
Vercel -- Web application hosting

6. Your Rights

You may access, correct, delete, or port your personal data. Contact privacy@smarttechinvest.com.

7. California Privacy (CCPA/CPRA)

We do not sell or share personal information. CCPA requests: email privacy@smarttechinvest.com with "CCPA Request" in the subject.

8. Data Security

TLS encryption in transit, encrypted storage at rest, and access controls. We will notify you of any breach as required by law.

9. Contact

Smart Technology Investments LLC
Email: privacy@smarttechinvest.com