Privacy Policy
Last updated: October 9, 2026
First Health Insurance Solutions ("FHIS", "we", "us") operates the website firsthealth-insurancesolutions.com and the FirstHealth Agent tools used by our licensed insurance agents and administrators (together, the "Services"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to website visitors, prospective customers, and agents who use our agent tools.
1. Information we collect
a. Information you give us
- Visitors and prospective customers: name, email address, phone number, state, age, and the plan or product you ask about when you submit a form, request plan details by email, or book an appointment.
- Agents: name, email address, phone number, licensing and contracting information, and the documents needed for contracting and commission payment (for example W-9 and ACH details). These are submitted through our contracting forms and are used only for contracting and payment.
b. Information collected automatically
Our website may collect basic technical data such as IP address, browser type, device type, pages viewed, and referring page, using cookies and similar technologies, to keep the site working and to understand how it is used.
c. Google user data (agent email-sending feature)
Agents may choose to connect their own Google (Gmail) account to our agent tools so that approved email templates can be sent to their prospects and clients from the agent's own email address. If an agent connects a Google account, we request the following:
| Google data / permission | What it is | Why we need it |
|---|---|---|
Basic profile: name and email address (openid, email, profile) |
The name and email address of the Google account the agent signs in with. | To identify the agent, show which account is connected, and fill in the agent's name and email in the template signature. |
Gmail send-only permission (https://www.googleapis.com/auth/gmail.send) |
Permission to send email on the agent's behalf. This permission does not allow us to read, search, list, modify, or delete any email in the agent's mailbox. | To send the specific email the agent chooses to send (from an approved template, to the recipients the agent enters) from the agent's own Gmail address. |
| OAuth access token / refresh token | A credential issued by Google after the agent grants permission. | To perform the send action the agent requested, without asking the agent to sign in again for every email. |
We do not access the contents of an agent's inbox, sent folder, drafts, contacts, calendar, or any other Google service.
2. How we use information
- To respond to your requests, send the plan information you ask for, and schedule appointments.
- To help licensed agents assist their clients and to process agent contracting and commission payments.
- To operate, secure, and improve the Services, and to prevent fraud and abuse.
- To meet legal, regulatory, and insurance-compliance obligations.
How we use Google user data specifically
We use Google user data only to provide the user-facing feature the agent requested: sending emails the agent initiates from the agent's own Gmail account, using templates approved by FHIS administrators. We do not use Google user data for advertising, we do not sell it, we do not use it to build user profiles for unrelated purposes, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. No human at FHIS reads an agent's Google data, except where the agent explicitly asks us to for support, where needed to investigate abuse or security issues, or where required by law.
3. How we store and protect information
- Data is transmitted over encrypted connections (HTTPS/TLS).
- Our application data is stored with Google Cloud / Firebase, which encrypts data at rest.
- Google OAuth tokens are used only to send the email an agent requests. Access to stored tokens is limited to the connected agent's own account and to our server-side services, and tokens are not included in emails, logs, or analytics.
- Access to agent and customer records is limited to personnel who need it for their role.
- No method of transmission or storage is perfectly secure, but we work to protect your information and review our safeguards regularly.
4. How we share information
We do not sell your personal information. We share it only as follows:
- Service providers that host our systems or help us run the Services (for example cloud hosting, customer-relationship management, scheduling, and email-delivery providers), under obligations to protect it and use it only for our purposes.
- Insurance carriers and licensed agents, when you request a quote, plan, or enrollment, so they can respond to you.
- Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or FHIS.
- Business transfers: in a merger, acquisition, or sale of assets, subject to this policy.
Google user data is not transferred or disclosed to third parties except as necessary to provide the email-sending feature the agent requested, to comply with applicable law, or as part of a merger or acquisition with notice to the affected users.
5. Health and sensitive information
We ask you not to send medical details through general email or web forms. Where we do handle health-related or financial information in connection with an application, we limit it to what is needed for the request and handle it under applicable law. Emails sent through the agent email-sending feature use approved templates and are not intended to contain protected health information.
6. Data retention and deletion
- Google tokens: kept only while the agent's Google account remains connected. They are deleted when the agent disconnects the account, when the agent's access is removed, or on request.
- Other information: kept as long as needed to provide the Services, meet legal and regulatory retention requirements, resolve disputes, and enforce our agreements, then deleted or de-identified.
7. Your choices and rights
- Revoke Google access at any time at myaccount.google.com/permissions. Once revoked, we can no longer send email from your account.
- Request access, correction, or deletion of your personal information, or ask to be removed from communications, by contacting us below. We will respond within a reasonable time and as required by law.
- You may unsubscribe from marketing emails using the link in the message or by contacting us.
- You can control cookies through your browser settings.
Depending on where you live, you may have additional rights under state privacy laws. Contact us to exercise them.
8. Children's privacy
The Services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
9. Third-party links
Our Services may link to carrier, partner, or other third-party websites. We are not responsible for their privacy practices, and we encourage you to read their policies.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows the latest version. If we make material changes to how we use Google user data, we will notify affected agents before the change takes effect.
11. Contact us
First Health Insurance Solutions
Email: [email protected]
Phone: 941-231-6917
Website: https://firsthealth-insurancesolutions.com