Privacy Policy

Last Updated: October 8, 2026

This Privacy Policy is provided by Wise Butterfly Inc., doing business as WisePal ("WisePal," "we," "us," or "our"). It covers our handling of information for our platform, bill-negotiation, comparison, and other identified Services, including our own disclosures to separate providers or affiliates. WisePal Insurance Agency, LLC is a separate legal entity; this Policy does not amend or replace its applicable privacy notices or agreements for insurance services.

This Policy explains how we collect, use, disclose, and protect personal information when you use our websites, applications, bill-negotiation services, comparisons, and other identified products and services (collectively, the "Services"). Not every category of information is collected for every Service.

Certain financial information may also be covered by our Consumer Privacy Notice.

1. Information We Collect

The information we collect depends on the Services you choose to use.

Information You Provide to Us

We may collect:

Identity and contact information, such as your name, email address, telephone number, mailing address, service address, and date of birth.

Provider and bill information, such as your service providers, account numbers, plans, prices, billing history, bills or billing statements, products and features, promotional rates, and other information concerning recurring expenses.

Account authentication and verification information, such as account PINs, passcodes, Provider login information, telephone-number verification information, one-time verification codes, or other information used to identify or authenticate a Provider account.

Payment information, such as card, bank-account, billing, and transaction information used to verify a payment method or pay WisePal fees. Payment information may be collected or processed directly by a third-party payment processor.

Financial information, when applicable to a Service you request, such as account balances, transaction information, credit information, loan or debt information, insurance information, or other financial information.

Identity-verification information, which may include information used to verify your identity, telephone number, device, or authority over an account. Depending on the Service, this may include a Social Security number or other identifying information.

Communications, including messages you send to WisePal, customer-support communications, responses to SMS messages, emails, telephone communications, and information generated in connection with bill negotiations.

Call recordings and transcripts, where recording or transcription is permitted by applicable law.

Preferences and instructions, including negotiation preferences, communication preferences, payment selections, consent records, and instructions concerning your Provider accounts.

Information From Accounts You Choose to Connect

Some Services may allow you to connect an account, such as an email account, bank account, financial account, or Provider account.

If you choose to connect an account, we and our service providers may receive information made available through that connection consistent with the permissions presented to you.

For example, an optional email connection may allow WisePal to identify bills, Provider communications, or verification messages relevant to a Service you requested.

A bank or financial account connection may provide account, balance, transaction, or payment-related information used to provide Services you request.

Connecting these accounts is not required unless the particular Service flow tells you that a specific connection is necessary.

Information We Receive From Third Parties

We may receive personal information from:

service providers that perform identity, telephone-number, fraud, or account verification; payment processors and bank-connectivity providers; Providers with whom we communicate at your request; financial institutions; consumer reporting agencies where legally permitted and relevant to a Service; Partners whose products or services you choose to explore; analytics and security providers; and other companies acting at your direction or helping us provide the Services.

Information Collected Automatically

When you use our Website or Platform, we may automatically collect information such as:

device identifiers, IP address, browser type, operating system, pages or screens viewed, referring pages, interactions with the Services, session duration, approximate location derived from IP address, timestamps, cookies, and similar usage and diagnostic information.

2. How We Use Personal Information

We may use personal information to:

Provide bill negotiation services. This includes identifying and verifying a Provider account, reviewing bills, contacting Providers on your behalf, authenticating the account, negotiating discounts or credits, documenting results, calculating savings, and communicating those results to you.

Act as your limited agent. When you request a negotiation, we may use personal information you provide or authorize us to use in communications with your Provider as described in our Terms of Use.

Provide comparisons and savings opportunities. We may analyze information about your bills and expenses and show you products, plans, Providers, or other savings opportunities that may be relevant to you.

Verify identity and prevent fraud. We may use information about you, your telephone number, device, payment method, or accounts to verify identity, confirm authority, prevent unauthorized use, protect the Services, and investigate suspicious activity.

Process and collect payments. We may use payment and transaction information to verify a payment method, place a disclosed authorization hold, calculate and collect fees, administer the payment arrangement you select, resolve payment issues, and maintain transaction records.

Communicate with you. We may send negotiation updates, requests for verification codes or additional information, availability requests, reminders, results, payment notices, support communications, security notifications, and other communications relating to Services you request.

Provide customer support. We use personal information to respond to questions, investigate complaints, resolve disputes, and support your use of the Services.

Develop and improve the Services. We may analyze use of the Services, evaluate negotiation performance, develop new functionality, improve automated and artificial-intelligence systems, conduct quality assurance, and troubleshoot technical issues.

Protect WisePal and others. We may use information to detect or prevent fraud, security incidents, abuse, violations of our Terms, unauthorized account access, or illegal activity.

Comply with law. We may process information to meet legal, regulatory, tax, accounting, litigation, and recordkeeping obligations and to respond to lawful requests.

Market our products and services. Subject to applicable law and your choices, we may tell you about WisePal Services and opportunities available through the platform that may be relevant to you.

3. Artificial Intelligence and Automated Processing

WisePal uses automated systems and artificial intelligence in providing certain Services.

AI-powered and automated systems may assist with bill negotiation, Provider calls or chats, bill analysis, account verification workflows, customer communications, transcription, quality assurance, customer support, fraud prevention, and product development.

Personal information may be processed by WisePal's technology providers where necessary to provide these functions.

We may use information described in this Policy to operate, evaluate, test, train, develop, and improve technologies that support the Services, to the extent permitted by applicable law, this Policy, and the restrictions governing the source of that information. Where feasible and appropriate, this may involve aggregated or de-identified information, subject to Section 12.

Source-specific restrictions applicable to information obtained through connected accounts control over any broader description of permitted uses in this Policy. A general reference to product improvement, artificial intelligence, de-identification, advertising, or another use does not authorize a use prohibited by those restrictions.

4. How We Disclose Personal Information

We may disclose personal information as follows.

Providers You Ask Us to Contact

When you request a bill negotiation, we disclose information to the applicable Provider as reasonably necessary to identify your account, verify your authority, review your bill or service, and perform the negotiation.

This may include your name, address, telephone number, email address, account number, bill information, plan information, PIN or passcode, authentication information, or other information you supplied or authorized us to use.

Service Providers

We disclose information to companies that perform services for WisePal, such as:

cloud hosting and data storage; telecommunications, voice, SMS, and email services; artificial-intelligence and automation technology; payment processing; bank connectivity; identity and telephone-number verification; fraud prevention; customer support; analytics; security; document processing; and professional services.

These companies receive information to perform services for WisePal and are subject to applicable contractual and legal obligations.

Advertising and Analytics Partners

We may disclose identifiers and online activity information to analytics and advertising partners for the purposes described in Sections 5 and 9.

Partners and Third-Party Products

When you affirmatively request information about, compare, apply for, obtain, or pursue a particular third-party product or service, we may disclose information to the applicable Partner or Provider as described in that request and reasonably necessary to facilitate it. A bill-negotiation request or general acceptance of our Terms does not by itself direct us to send your information to an unrelated third party to market a different product to you.

Such third parties may have their own privacy policies and terms.

Affiliates

Our affiliates include WisePal Insurance Agency, LLC. We may disclose information to affiliates where permitted by law and consistent with our Consumer Privacy Notice. Affiliate status does not expand the purposes for which information may lawfully be used. The Agency's own handling of information remains subject to its applicable agreements and notices.

Corporate Transactions

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

Legal, Safety, and Compliance Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

comply with law, regulation, subpoena, court order, or lawful governmental request; enforce our agreements; investigate or prevent fraud or security incidents; protect the rights, safety, or property of WisePal, our users, or others; or establish, exercise, or defend legal claims.

Verifying Authority and Resolving Complaints

We may disclose relevant authorizations and account-submission, verification, communication, and Service records to Providers, communications or payment service providers, and other parties reasonably involved in verifying our authority, investigating a fraud or misconduct complaint, or resolving a dispute. These disclosures are limited to the applicable purpose and remain subject to applicable law and data-source restrictions.

At Your Direction

We may disclose information when you direct us or consent to the disclosure.

5. Marketing and Advertising

WisePal does not sell personal information for monetary payment or to data brokers.

We use information to promote WisePal's Services and work with advertising partners to show, measure, and improve our advertisements, including advertisements based on your previous interactions with our Services. For these purposes, we may share identifiers and online activity information described in Section 1.

Disclosures made in providing our Services or facilitating products you request are described in Section 4. Our Consumer Privacy Notice describes our practices concerning applicable financial information.

These activities remain subject to applicable privacy rights and restrictions governing the source and use of the information.

6. Payment Processing

WisePal may use third-party payment processors to collect and process card or bank-account information.

Depending on the payment method, WisePal may not receive or store the complete card or bank credentials used by the processor.

Payment processors process information subject to their own privacy and security obligations.

7. Email, Bank, and Provider Account Connections

If you choose to connect an email, bank, financial, or Provider account, we use information obtained through the connection for the purposes disclosed when you connect it and as described in this Policy. We seek to limit access to information reasonably relevant to providing the Services.

Information obtained through connected accounts may be subject to additional terms, permissions, and restrictions imposed by the applicable account provider. Those restrictions control where they are more specific than the general permissions in this Policy.

You may be able to disconnect an account through the applicable Service, through the third-party account provider, or by contacting WisePal. To request disconnection or deletion of connected-account information held by WisePal, contact support@wisepal.com. Disconnection and deletion are distinct requests. Information already obtained may be retained for legitimate purposes described in Section 11, subject to applicable law and data-source restrictions. A deletion request does not itself cancel an earned payment obligation.

8. Communications

We may use your email address and telephone number to send communications concerning Services you request, including negotiation updates, verification requests, reminders, results, payment notices, security alerts, and support messages.

Where required, we obtain appropriate consent before sending marketing communications. You may use the opt-out method in a marketing communication from Wise Butterfly Inc., or contact support@wisepal.com, to request that the applicable marketing stop.

Opting out of marketing does not by itself cancel a requested Service or an earned payment obligation. Further non-marketing communications remain subject to applicable law and any applicable revocation of consent.

9. Cookies and Similar Technologies

We and our partners use cookies and similar technologies to operate and secure the Services, remember preferences, understand how the Services are used, and support the advertising described in Section 5.

Third-party analytics and advertising providers may collect information about your online activities over time and across different websites or services.

You can manage certain tracking activities through browser or device settings and controls offered by the relevant providers. The effect of these controls depends on the technology and service involved.

Our Website does not currently implement a site-wide response to the legacy browser "Do Not Track" signal.

10. Data Security

WisePal uses administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure.

These safeguards may include access controls, encryption, monitoring, secure infrastructure, employee controls, and vendor-management measures.

No security system is completely secure, and we cannot guarantee that unauthorized access or disclosure will never occur.

11. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including:

providing and supporting the Services; completing negotiations and future authorized reattempts; maintaining payment and accounting records; preventing fraud; maintaining evidence of authorizations and Service results; resolving disputes; enforcing agreements; and complying with legal and regulatory requirements.

Retention periods may differ depending on the type of information and the Service involved.

When information is no longer reasonably necessary, we may delete, anonymize, or de-identify it, subject to applicable law.

12. Aggregated and De-Identified Information

We may create aggregated statistics or otherwise transform information for analytics, research, benchmarking, product development, and improvement of technologies supporting the Services, subject to this Policy, applicable law, and data-source restrictions.

We may elect to maintain information as legally de-identified information and rely on the treatment available to that information, but only when the applicable requirements are satisfied. For information we maintain on that basis, we commit to maintaining and using it in de-identified form and not attempting to re-identify it, except as permitted by law to test the effectiveness of de-identification. Before relying on a de-identification exemption, applicable requirements for reasonable measures and recipient restrictions must be satisfied.

Information that does not qualify for that treatment remains subject to the applicable requirements for personal information. Aggregation, removal of direct identifiers, or use of the term "de-identified" does not override restrictions attached to the source of the information.

13. Your Privacy Rights

Depending on where you live, the Services involved, and the law that applies, you may have rights to confirm processing, access or obtain a portable copy of personal information, request correction or deletion, obtain information about sources and disclosures, or opt out of specified sales, targeted advertising, or profiling used for legally significant decisions. Some laws provide additional rights concerning sensitive information. Rights and exceptions may differ for information governed by financial privacy laws.

To submit a privacy request, including an applicable advertising opt-out or consent-revocation request, contact support@wisepal.com. Describe the request and the information reasonably needed to identify the relevant interaction with WisePal. You do not need to create an account solely to make a request.

We may verify identity before responding to access, correction, deletion, or similar requests where appropriate. We do not require verification for an opt-out where the applicable law prohibits it. An authorized agent may submit a request as permitted by law, subject to applicable verification requirements.

Where applicable law provides a right to appeal a privacy-request decision, send an appeal to support@wisepal.com and identify the decision. Applicable legal response periods, appeal rights, and permitted exceptions govern. We do not discriminate against you for exercising a right protected by applicable privacy law.

14. California Privacy Disclosures

The categories of information we collect and their sources are described in Section 1. Our purposes and disclosures are described in Sections 2 through 9, and our retention criteria are described in Section 11.

California residents may contact support@wisepal.com to request review or correction of personal information maintained by WisePal. Applicable verification requirements and exceptions may apply.

Our treatment of browser Do Not Track signals and third-party tracking is described in Section 9. Changes to this Policy are described in Section 19.

Additional rights apply where a California privacy law covers WisePal and the information involved. Certain financial information is governed by separate financial privacy requirements, including those described in our Consumer Privacy Notice.

15. Financial Privacy

Certain information and Services are subject to additional financial privacy requirements. Our Consumer Privacy Notice describes applicable financial-information sharing practices and choices.

Where a Consumer Privacy Notice or applicable financial privacy requirement is more specific than a general description in this Policy, that more specific provision governs the information and activity it covers.

16. State-Specific Rights

Residents of certain states may have additional privacy rights where the applicable law covers WisePal and the information involved. Applicable thresholds, exemptions, and exceptions remain available. Nothing in this Policy limits rights that cannot lawfully be waived.

17. Children's Privacy

The Services are intended for adults.

WisePal does not knowingly offer the Services to children under 18 or knowingly collect personal information from a child under 18 for purposes of establishing a WisePal account.

If you believe a child has provided personal information to WisePal without appropriate authorization, contact us.

18. Third-Party Websites and Services

The Services may link to third-party websites, products, services, or applications.

WisePal does not control the privacy practices of those third parties.

Before providing information directly to a third party, you should review that party's privacy disclosures.

19. Changes to This Privacy Policy

We may update this Policy to reflect changes in our Services, practices, or applicable requirements. We will post the revised Policy here and update its date. Where additional notice or consent is required, we will provide it through the Services, by email, or by another legally permitted method before relying on the change.

20. Contact Us

For questions or requests concerning this Policy, contact:

Wise Butterfly Inc. / WisePal
251 Post Ave
Westbury, New York 11590
support@wisepal.com