Privacy Policy
Brandiron Benefits is a product of Victor Vauss, LLC. This Privacy Policy explains how Victor Vauss, LLC, doing business as Brandiron Benefits ("Brandiron," "we," "us" or "our"), collects, uses and protects information when you visit brandironbenefits.com (the "Site") or use the Brandiron Benefits platform (the "Platform"). By using the Site or Platform, you agree to the practices described here.
Who this policy covers
This policy covers visitors to the Site and the business customers who license the Platform ("Licensees"), such as third-party administrators, brokers, consultants and stop-loss MGUs. Licensees use the Platform to serve their own employer groups and plan members. Health information processed on the Platform on a Licensee's behalf is protected health information ("PHI") under HIPAA and is governed by the Business Associate Agreement ("BAA") between Brandiron and that Licensee, not by this policy.
Information we collect
- Information you give us. Your name, work email, company, role, phone number and anything you share when you request a demo, contact us or open a support ticket.
- Account information. Login details, role and activity for users of the Platform, including the audit trail of actions taken.
- Platform data. Information Licensees and their users enter or upload, such as employer group details, plan components, pricing, documents and employee intake responses.
- Technical information. IP address, browser and device type, pages visited and similar data collected automatically when you use the Site.
How we use information
- To provide, secure, maintain and improve the Site and Platform
- To respond to demo requests, inquiries and support tickets
- To communicate with you about your account, service updates and changes to our terms
- To protect against fraud, abuse and security incidents
- To comply with legal obligations and enforce our agreements
Health information
Victor Vauss, LLC processes PHI only as a business associate of our Licensees, under a signed BAA, and only to provide the Platform. Employee health questionnaire answers are delivered to the recipient the Licensee designates and are then deleted on the Licensee's schedule. We do not sell PHI, use it for marketing, or share it with any party except as the BAA and HIPAA allow.
How we share information
We do not sell personal information. We share information only with service providers that help us run the Site and Platform, such as hosting, email delivery, form and scheduling tools and payment processing, and only as needed for them to perform those services. Any provider that may handle PHI is bound by a BAA. We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, subject to this policy.
Forms and third-party services
Demo requests on the Site are collected through Typeform. Information you submit there is also subject to Typeform's privacy policy. The Site may link to other websites; we are not responsible for their privacy practices.
Cookies
The Site uses only the cookies and similar technologies needed to operate it and, where used, to understand how visitors use it. You can control cookies through your browser settings.
Data retention
We keep personal information for as long as needed to provide the Site and Platform, meet our contractual and legal obligations, and resolve disputes. Platform data is retained and returned or deleted as set out in each Licensee's agreement and BAA.
Security
We use administrative, technical and physical safeguards appropriate to the information we hold, including encryption, multi-factor authentication for administrative users, role-based access controls, record-level isolation between employer groups and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information. To make a request, contact us at the address below. If your information is held on the Platform by one of our Licensees, we will direct your request to that Licensee, who controls that information.
Children
The Site and Platform are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children through the Site.
Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows when it was last changed. Material changes will be posted on this page.
Contact us
Questions about this policy or our privacy practices: [email protected]