Privacy Policy

AiVante is operated under the WholeStack AI brand. In this Policy, “AiVante,” “WholeStack AI,” “we,” and “us” refer to the operator of the AiVante service. If your organization has a signed agreement for AiVante, the provider identified in that agreement is the responsible contracting party and that agreement controls if it conflicts with this Policy.

Questions, privacy requests, and complaints may be sent to support@wholestack.ai. Please do not include medical records, government identifiers, account credentials, or policy numbers in ordinary email.

This Policy applies to the AiVante website, applications, support channels, and related services we operate. It does not govern a carrier, advisor, employer, government program, or other third party you reach through the service.

For account, website, security, and direct support data, we generally act as the business or controller. When a business customer submits personal information to AiVante for its own planning activities, we generally process that information for the customer under its instructions. The customer remains responsible for its notices, legal authority, and permitted uses.

The information we collect depends on how you use AiVante.

We use information only for legitimate service and business purposes, including to:

AiVante may send the text submitted to an AI feature to a configured inference provider to generate a response. The public insurance-support chat is for general education and product support only. It is not approved for protected health information, personal financial information, government identifiers, policy or member numbers, or medical-record details, and it blocks common identifier patterns before a model request is made.

AI output can be incomplete or wrong. It does not make coverage, eligibility, medical, legal, tax, investment, or financial decisions. Authorized users remain responsible for reviewing output and verifying plan-specific facts with official sources and qualified professionals.

We do not sell personal information. We disclose information only as needed to operate AiVante, follow customer instructions, complete a transaction, protect the service, or comply with law. Recipients may include hosting and database providers, authentication providers, monitored error and security services, communications providers, payment processors, professional advisers, and configured AI inference providers.

Service providers receive only the information reasonably necessary for their function and are subject to contractual or legal restrictions appropriate to their role. We may also disclose information in a corporate transaction or when required by valid legal process, subject to applicable safeguards.

AiVante uses necessary cookies and similar storage for authentication, security, preferences, and service continuity. Optional product analytics are not initialized unless the visitor accepts non-essential measurement. The Cookie Policy describes current categories and how to change a choice.

We retain account and Customer Content while needed to provide the service, satisfy a customer agreement, protect users, maintain required evidence or audit records, and meet legal obligations. Retention can vary by record type and customer configuration. Backups and security records may remain for a limited period after active data is removed.

To request access, correction, export, or deletion, email support@wholestack.ai from the address associated with the account. We may need to verify identity and authority. Some information cannot be deleted immediately when retention is required by law, security, an active dispute, or a controlling customer instruction.

We use safeguards designed to protect information, including access controls, signed sessions, tenant-scoped authorization, encryption in transit, audit records for sensitive actions, and operational monitoring. No system is completely secure, and these measures do not guarantee that an incident will never occur.

A customer must not submit protected health information to a public or unapproved AI feature. A separate Business Associate Agreement and explicitly approved processing configuration are required before AiVante will process protected health information through a provider-dependent AI workflow. AiVante does not become an insurer, carrier, plan administrator, covered entity, fiduciary, or licensed adviser merely by providing software.

Depending on where you live, you may have rights to know, access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal a denied request. You may also withdraw consent for optional processing. We do not discriminate for exercising a privacy right.

Send requests to support@wholestack.ai. We will verify and respond as required by applicable law. If your data was supplied by a firm, adviser, employer, or other AiVante customer, we may refer the request to that customer because it controls the record.

AiVante and its providers may process information in the United States and other locations where they operate. Where law requires a transfer mechanism, the responsible parties will use an appropriate safeguard under the applicable agreement.

AiVante is a business and adult planning service and is not directed to children under 13. We do not knowingly collect personal information directly from a child under 13 through the public service. Contact us if you believe a child supplied information without appropriate authorization.

We may update this Policy as the service, providers, or law changes. The effective date above identifies the current version. Material changes will be communicated through the service, by email, or by another reasonable method when required.

Contact: support@wholestack.ai. For security concerns, use the subject line “AiVante security.” For privacy requests, use “AiVante privacy request.”