Privacy Policy
Who we are
Rikor Health is operated by [LEGAL ENTITY NAME], [STATE AND ENTITY TYPE, e.g. a Utah limited liability company] (“Rikor,” “we,” “us”), at [BUSINESS MAILING ADDRESS]. This policy covers rikorhealth.com and the Rikor platform that employers and employees sign in to. Questions: hello@rikor.io.
Information you give us
- Enquiry forms — name, business or brand, role, email, phone, state, number of locations or employees, and anything you write in the notes.
- The cost calculator — for each person you enter, the details needed to price plans: name, age, ZIP code, spouse and children's ages, tobacco use and household income, plus your email if you ask us to send results or invite employees.
- Signing in — your email address, or basic profile information from Google if you choose to sign in with Google.
- Employer setup — business details and address, documents you upload (such as an EIN confirmation), your contribution choices, and your employee roster (names, emails, dates of birth and locations).
- Employees — the plan you choose, household details needed for quotes and enrollment, confirmation that you have qualifying coverage, and requests for member support.
Information collected automatically
Like any website, our hosting provider records technical information when you visit — such as IP address, browser type and the pages requested — for security and to keep the service running.
Cookies and browser storage. We use only what the site needs to work: keeping you signed in, remembering progress in a form so a refresh doesn't lose it, and returning you to the right page after sign-in. We don't currently use analytics, advertising or tracking cookies. If we add any, we'll ask for your permission first and update this policy.
How we use information
- to answer your enquiries and send you the information you asked for;
- to show plan prices and estimates in the calculator;
- to set up and administer an employer's health benefit — plan documents, required employee notices, enrollment, coverage verification and support;
- to send service messages, such as confirmations and required notices;
- to keep the service secure, prevent abuse and fix problems;
- to meet legal obligations.
We don't sell personal information, and we don't share it for cross-context behavioural advertising.
Who we share it with
We share information only with service providers that help us run Rikor, and only what they need:
- Vercel — website hosting.
- Supabase — database, sign-in and file storage.
- Google — sign-in, only if you choose “Sign in with Google.”
- Resend — delivery of emails we send you.
- HealthSherpa — health plan quotes and enrollment. To price plans it receives the details entered for that purpose, such as ZIP codes, ages, household size and income.
- Health West Administrators — member support for employees enrolled through an employer's plan.
We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer such as a merger, in which case this policy would continue to apply.
Links to other sites — including our partner Protect My Franchise and government sites — are governed by those sites' own policies.
Health plan information
An ICHRA is a group health plan. Health information handled on behalf of an employer's plan is subject to the HIPAA privacy and security rules and to that plan's own notice of privacy practices. This website policy doesn't replace that notice.
How long we keep it
We keep information for as long as needed for the purpose it was collected — for example, while an employer uses Rikor — and afterwards for as long as the law requires us to keep plan records, or as needed to resolve disputes. Enquiries that don't lead anywhere are deleted when no longer needed.
How we protect it
Information is encrypted in transit, access is limited to people and systems that need it, and records are separated so that one employer can't see another's data. No system is perfectly secure, and we'll notify you if a breach affects your information as the law requires.
Your choices
You can ask to see, correct or delete personal information we hold about you by emailing hello@rikor.io. Depending on where you live, you may have additional rights under state law; we'll respond to requests as those laws require. If you're an employee and your information came from your employer, we may need to work with your employer to respond. Some records — such as required plan records — may need to be kept even if you ask us to delete them.
Children
Rikor is meant for employers and adult employees. We don't knowingly collect information from children except where a parent or guardian provides a dependent's details for coverage.
Changes
If we change this policy, we'll update the effective date above, and for significant changes we'll give more prominent notice.
Contact
[LEGAL ENTITY NAME], [BUSINESS MAILING ADDRESS]. hello@rikor.io