How we handle your information.

Effective date: September 26, 2026 · Last updated: September 26, 2026

1. Websites covered

This policy applies to:

• mavenonehealth.com
• kestrelpricer.com
• txcovered.mavenonehealth.com

(together, the "Sites"). It does not cover our software products or services provided under a separate agreement with our customers. Those are governed by the terms of that agreement.

2. Information we collect

Information you give us

When you fill out a form on our Sites (for example, to request a demo, contact us, or sign up for updates), we collect:

• Name
• Company name
• Email address
• Display name

We do not ask for any other personal information through our Sites.

Display names entered on the Ghost Hunt game will be shown on the leaderboard. Email addresses are never displayed. You may contact us to have your information deleted.

Please do not submit health information. Our Sites are built for business visitors from health plans and related organizations. They are not designed to receive protected health information (PHI) or personal health data, and we ask that you not submit any.

Information collected automatically

When you visit our Sites, we and our service providers collect certain information automatically using cookies, pixels, and similar technologies. This may include:

• IP address and general location (city, state, country)
• Browser type, device type, and operating system
• Pages you visit, links you click, and how long you stay
• The website or ad that referred you to our Sites
• Cookie and advertising identifiers

3. How we use information

We use the information we collect to:

• Respond to your requests and inquiries
• Send you marketing emails about our products, services, and events (you can unsubscribe at any time)
• Understand how visitors use our Sites and improve them
• Measure how well our advertising works
• Show our ads to people who have visited our Sites, on other websites and platforms (known as "retargeting")
• Protect the security of our Sites and prevent fraud
• Comply with legal obligations

4. Analytics and advertising tools

We use the following third-party tools on our Sites. Each provider collects and processes information under its own privacy policy.

Matched audiences. We may upload a hashed (encrypted) version of email addresses from our contact list to Google, Meta, or LinkedIn so we can show ads to existing contacts or to people with similar professional profiles. These platforms use the hashed data only to match it to their users and do not receive the plain email address from us.

You can also opt out of interest-based advertising from many companies through the Network Advertising Initiative and the Digital Advertising Alliance.

5. How we share information

We do not sell your personal information for money.

We share information only:

• With service providers who help us run our Sites, analytics, advertising, and email (such as those listed above)
• With advertising platforms through the tools described in Section 4. Under some state laws, including California's, this counts as "sharing" personal information for cross-context behavioral advertising. See Section 10 for how to opt out.
• For legal reasons, when required by law, subpoena, or court order, or to protect our rights, property, or safety or that of others
• In a business transaction, such as a merger, acquisition, or sale of assets, in which case your information may transfer to the new owner under the terms of this policy

6. Cookies and your choices

Cookies are small files stored in your browser. You can control cookies through your browser settings, including blocking or deleting them. Blocking cookies may affect how some parts of our Sites work.

Global Privacy Control (GPC). If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information for that browser.

Do Not Track. Some browsers send "Do Not Track" signals. There is no common industry standard for these signals, so our Sites do not respond to them. We do honor GPC as described above.

7. Email marketing

If you give us your email address, we may send you marketing emails. Every marketing email includes an unsubscribe link. You can also email us at info@mavenonehealth.com to be removed. We may still send you non-marketing messages, such as replies to your requests.

8. How long we keep information

We keep form submissions and email contact information for as long as we have a business relationship with you or until you ask us to delete it. Analytics and advertising data are kept according to the retention settings of each provider. We delete or anonymize information when we no longer need it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

10. Your privacy rights

California residents

If you live in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, may give you the right to:

• Know what personal information we collect, use, and share about you
• Access a copy of your personal information
• Correct inaccurate personal information
• Delete your personal information, subject to certain exceptions
• Opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• Not be discriminated against for exercising these rights

Categories of personal information we collect (in the past 12 months):

We do not collect sensitive personal information as defined by the CCPA. We do not knowingly sell or share the personal information of anyone under 16.

To opt out of sharing, turn on Global Privacy Control in your browser, use the opt-out links in Section 4, or email info@mavenonehealth.com with the subject line "Do Not Sell or Share."

California "Shine the Light." California residents may ask whether we have disclosed personal information to third parties for their own direct marketing purposes. We do not do this.

Residents of other states

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with consumer privacy laws may have similar rights to access, correct, delete, and opt out of targeted advertising. If we deny your request, you may appeal by replying to our decision.

How to make a request

Email info@mavenonehealth.com or write to us at the address below. We will need to verify your identity before responding, usually by confirming your email address. You may use an authorized agent to make a request on your behalf; we may ask for proof that the agent is authorized. We will respond within 45 days.

11. Children's privacy

Our Sites are intended for business professionals and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top. If the changes are significant, we will post a notice on our Sites.

13. Contact us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us: