NY Medicaid work requirements start January 1. For enrollment organizations →

Privacy Policy

Last Updated: October 15, 2026

Renova Benefits (“we,” “us,” or “our”) is a technology platform that facilitates Medicaid recertification and benefits retention coordination. We are not a government agency, not an eligibility determination body, and we do not provide medical treatment or create medical records. We do not guarantee benefits. This Privacy Policy describes how we collect, use, disclose, and protect information when you use Renova Benefits, including our websites and applications. Liability and data responsibility rest with Renova Benefits. Please read this policy carefully.

1. HIPAA and PHI

Renova Benefits is a technology service provider. Where we handle protected health information (“PHI”) as defined under the Health Insurance Portability and Accountability Act (“HIPAA”), we do so under your authorization and/or under contractual safeguards with partners and vendors, and in accordance with applicable law. Depending on context, we may act as a business associate or as an authorized recipient of PHI. We do not represent ourselves as a healthcare provider or health plan. Our handling of PHI is consistent with the purposes and disclosures described in our “Authorization for Use and Disclosure of Information & Electronic Consent” document and with applicable federal and state privacy and security requirements.

2. Data We Collect and Categories

We may collect and process the following categories of data:

  • PHI (if applicable): Health information that identifies you or could reasonably be used to identify you, when provided in connection with benefits coordination and only as authorized by you or under applicable law.
  • Program and eligibility data: Medicaid ID/CIN, renewal status, recertification dates, documents you upload or we transmit (e.g., proof of income, residency), and related program information.
  • Financial eligibility data: Information used for eligibility or redetermination purposes, to the extent you provide it or it is transmitted by authorized entities.
  • Contact and demographic data: Name, address, email, phone number, date of birth, and similar information you or an authorized party provide.
  • Device and usage data: IP address, device and browser metadata, logs of platform use, and similar technical data for security, audit, and operation of the platform.
  • Text messages: The mobile number you give us, your opt-in and opt-out, and the text replies you send. We use these only to send Medicaid renewal reminders and coverage alerts. We do not use them for marketing or phone calls.
  • Renewal details: Insurance carrier (optional), renewal month, and the campaign fields utm_source, utm_campaign, and utm_medium. We use these only for Medicaid renewal reminders and coverage alerts.

We collect and retain only the information reasonably necessary to provide our services and to comply with legal obligations. This site uses the Meta Pixel to count page visits. No form data, name, phone, or coverage information is sent to Meta.

3. Purposes of Processing

We use the data described above for purposes that align with our authorization and platform role, including:

  • Renewal and recertification facilitation and tracking
  • Redetermination support processes
  • Secure documentation collection and transmission to authorized program entities
  • Secure communications with you and with authorized program entities (e.g., state agencies, MCOs, assistors, brokers, program administrators)
  • Security, fraud prevention, audit, and compliance logging
  • Customer support
  • Legal and regulatory compliance

We process personal information based on, as applicable: your authorization; your consent; contractual necessity to provide platform services; and/or compliance with legal obligations. This policy is U.S.-focused; we do not overstate our regulatory classification.

4. Sharing and Disclosures

Where PHI is involved, disclosures are made consistent with the executed “Authorization for Use and Disclosure of Information & Electronic Consent.” We may share your information in the following circumstances:

  • Authorized program entities: State agencies, managed care organizations (MCOs), assistors, brokers, and program administrators, as permitted by your authorization and applicable law.
  • Service providers and subprocessors: Vendors that help us operate the platform. Where PHI is involved, we use HIPAA-compliant arrangements where required.
  • Legal: When required by law, court order, subpoena, or similar process, or to protect rights, safety, or property.
  • Business transfers: In connection with a merger, sale, or other transfer of assets, subject to applicable law and any notice we provide.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Todas las categorías anteriores excluyen los datos de consentimiento y aceptación de mensajes de texto; esta información no se compartirá con terceros.

We do not sell personal information. We do not sell PHI. We do not disclose personal information for marketing purposes without your explicit consent. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile information and SMS opt-in data are not shared with third parties or affiliates for marketing or promotional purposes. We use a messaging service provider only to deliver texts on our behalf; it may not use your information for any other purpose.

No vendemos ni compartimos sus datos de consentimiento de SMS ni su información personal con terceros para fines de marketing. La información móvil y los datos de consentimiento de SMS no se comparten con terceros ni con afiliados para fines de marketing o promocionales. Usamos un proveedor de servicios de mensajería solo para entregar los textos en nuestro nombre; no puede usar su información para ningún otro fin.

A text is not private. Someone else can read it, including anyone who can open your phone. If you opt in, you accept that risk.

5. Children and Minors

The Renova Benefits platform is not directed to children under 13. Information relating to minors may be provided in connection with benefits coordination only by a parent, guardian, or authorized representative. You must be 18 or older to agree to text messages, unless a parent or guardian agrees for you.

6. Your Rights

Depending on applicable law, you may have the right to:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your information where applicable law permits.
  • Portability: Request a copy of your data in a portable format where required by law.
  • Revoke authorization: You may revoke your “Authorization for Use and Disclosure of Information & Electronic Consent” at any time through the platform (where available) or by contacting us at privacy@vitatechgroup.com. Revocation does not affect uses or disclosures made before we received the revocation.
  • Communication preferences: Update how we contact you. You can opt out of texts by replying STOP. STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT also opt you out.
  • Complaints: File a complaint with us at privacy@vitatechgroup.com. You may also have the right to file a complaint with a supervisory authority or, for HIPAA-related concerns, with the U.S. Department of Health and Human Services Office for Civil Rights (www.hhs.gov/ocr/privacy/hipaa/complaints/). We will not retaliate for good-faith complaints.

Certain state laws may provide additional privacy rights (e.g., rights to know, delete, or opt out of certain sales or sharing). We will honor such rights to the extent required by applicable law.

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information. Our systems are designed in alignment with HIPAA requirements and industry-standard security and privacy frameworks. We do not claim specific certifications (e.g., SOC 2) unless we have completed a formal audit and disclosed that to you.

8. Retention

We retain your information as long as needed for program coordination, audit logging, dispute resolution, and to meet our legal and regulatory obligations. Retention is consistent with our documented retention schedules and applicable law. Information is stored and processed in the United States unless otherwise disclosed.

9. Breach Notification

If a breach of your personal information or PHI occurs that requires notification under applicable law, we will notify you and, where required, regulators in accordance with those laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will be revised when we make material changes. Continued use of the platform after changes constitutes acceptance of the updated policy to the extent permitted by law.

11. Contact Us

For privacy questions, requests, or to exercise your rights, contact us:

Email: privacy@vitatechgroup.com

RENOVA BENEFITS · Privacy Policy · October 15, 2026