Privacy & Security

How we protect your information

Nauticus is a technology platform operated by Navillus Technologies LLC. Participating licensed insurance agents and agencies use Nauticus to help service their clients. Here is plainly what we do with your information, who can see it, and the choices you have. We only describe safeguards we actually have in place.

What we protect, and how

Encrypted connection

Information you send to Nauticus travels over an encrypted connection (HTTPS/TLS), so it isn't readable as it moves between your device and our servers.

Your password is stored as a one-way hash

We save only a one-way bcrypt hash of your password — never the password itself — so it can be checked when you sign in but cannot be read back by anyone, including our staff.

Access is checked on every request

Every time your information is opened, our servers confirm the request belongs to your account. Other consumers and unassigned advisors cannot reach your household.

Documents are kept private

Files like enrollment records are stored in private storage with no public links. They can only be retrieved by you or your authorized advisor through an authenticated request.

The right information, with your permission

You can ask general questions without providing your Medicare number or Social Security number. If you request help checking eligibility or enrolling in coverage, your licensed insurance agent may need additional information, such as your Medicare number. A Social Security number may be needed for certain verification processes, such as checking Medicaid eligibility. Before requesting sensitive information, your licensed insurance agent should explain why it is needed and obtain your permission through the applicable verification or enrollment process. Please do not enter these numbers in the general Ask chat; your advisor will explain the appropriate way to provide them.

Who can access your information, and why

You — to view and manage your household.
Your licensed insurance agent — the licensed insurance agent assigned to you, to help with your Medicare review and enrollment. If no advisor is assigned yet, one is assigned only when you ask for help.
Your servicing agency's authorized support staff — a small number of authorized staff at the agency servicing your household, to provide support.
Platform service providers — vetted providers under contract (secure hosting, private file storage, email delivery) that process data only to run the service.

Signed in, you can see exactly who is assigned to your household on your home screen under “Privacy & who can access your information,” and request a change there.

Your choices

You can ask us to access, correct, or delete your information — use Request an access change in your household, or ask your licensed insurance agent. We action requests through our team; some records may be retained where a law or legitimate business need requires it.

What we don't claim

We won't overstate our protections. We do not claim to be HIPAA-certified or “bank-level,” and we don't promise that every stored copy and backup is encrypted at rest or that data is deleted instantly. If you need specific assurances for your situation, ask your licensed insurance agent and we'll tell you what we can and cannot confirm.