Information we collect
When you request a plan review, schedule a call, or apply to partner with us, we collect the information you provide: your name, phone number, email address, ZIP code, and details about your coverage preferences. If you enroll in a plan through us, we collect the additional information carriers require to process your enrollment, such as your Medicare number, date of birth, doctors, and prescriptions.
How we use it
We use your information to respond to your requests, compare plans available in your area, complete enrollments you ask us to complete, and provide ongoing service such as annual plan reviews. We may contact you by phone, text, or email about your request. We do not sell your personal information, and we do not share it with third parties for their own marketing.
Who we share it with
We share information only as needed to serve you: with insurance carriers to obtain quotes or process an enrollment you request, with technology vendors that power our plan-comparison and scheduling tools, and where required by law or CMS regulation. All partners are required to protect your information.
Your choices & rights
You may ask us at any time to correct or delete the information we hold about you, or to stop contacting you: call 909-755-6037 or use the contact form. California residents have additional rights under the CCPA, including the right to know what personal information we have collected and to request its deletion. We honor all verified requests.
Security & retention
We keep your information only as long as needed to serve you and to meet legal and CMS record-keeping requirements, and we protect it with industry-standard safeguards.
Google Calendar in Medcora Broker Portal
This section describes the optional Google Calendar connection that signed-in brokers can use in Medcora Broker Portal. It covers Google Calendar data separately from the general website and insurance-service information above.
What the connection requests and reads
A broker chooses their own Google account and grants permission in Google's window. Medcora requests the account's identity and verified email, a read-only list of the broker's calendars, and read-only calendar events. It does not request permission to create, change or delete events or send invitations, and it does not read Google Contacts, attendees, organizers or attachments. For the calendar and month the broker selects, Medcora reads each event's identifier, status, title, location, notes, start and end time, and recurrence references.
Which events are shown
The broker marks the selected calendar as either Medicare-only or mixed. On a Medicare-only calendar, every appointment is shown, including events whose notes are empty or don't mention Medicare. On a mixed calendar, only events whose notes contain the word Medicare are shown. Other events are read on the server during this filtering and are not returned to the broker's Calendar page.
What is recognized in the notes
Event notes are converted to plain text on the server. Labeled lines can be recognized for name, address or location, phone, email, date of birth, county, current or former plan, pharmacy, primary care provider and clinic, medications, Part A and Part B effective dates, Medicaid, Extra Help (LIS) and other coverage. A label is used only when it has one distinct valid value. If the notes have no address label, the event's location can be used as the address.
What the broker sees
In their own signed-in session, the connected broker's Calendar shows each shown appointment's details, the recognized fields, and a plain-text view of the remaining notes, with recognized lines and the Medicare tag left out.
Use and sharing
The Calendar connection does not send calendar notes or recognized details to Cora or to a CRM. A broker can choose Start intake to copy an appointment's recognized details into an Intake worksheet; sending anything to a CRM from Intake is a separate action the broker takes there. Choosing a map link sends that appointment's address to Apple Maps or Google Maps. Google user data is not sold, used for advertising, or used to train AI models. Medcora's use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
What is stored
The Calendar connection itself processes event titles, locations, notes and recognized details for each request and does not store them in Medcora's database. Details a broker copies with Start intake follow the Intake workflow from then on: submitting that intake can save them with the intake's records and send them to the broker's connected CRM. While a broker is connected, Medcora stores that broker's Google connection tokens and account and calendar selection, encrypted. When a broker records an appointment result, Medcora stores it with the broker's Production records: the appointment date, time slot and type, and a keyed reference to the calendar event. These records do not include event titles, notes or contact details.
Disconnecting and removing access
In Calendar settings, Disconnect turns off the connection, removes the stored connection tokens and the encrypted account and calendar selection, and asks Google to revoke Medcora's access. If revocation can't be confirmed, the Calendar page links to Google Account connections, where you can remove Medcora's access; you can also do this directly at your Google Account connections. Disconnecting doesn't delete Google events or recorded Production results. For questions about recorded results, contact Medcora using the details below.
Contact us
Questions about this policy or your information: call 909-755-6037.