Privacy Policy
Last Updated October 27, 2026
This Privacy Policy describes how Batnac, LLC d/b/a Luva (“Luva”) handles personal information collected through our websites, third-party partners, social media pages, online communications, and any other sites or services that link to this Privacy Policy (collectively, the “Services”).
If you apply for a financial product or service, such as insurance, through Luva or one of our third-party partners, we will use and share any information that we collect from or about you in accordance with our Consumer Privacy Notice, which offers you certain choices with respect to the use and sharing of your personal information.
PERSONAL INFORMATION WE COLLECT
We may collect the following categories of personal information:
Contact information, such as your name, email address, postal address, and phone number.
Demographic information, such as your age, birth year, sex, gender, marital status, military or veteran status, occupation, and education level.
Insurance information, such as your insurance needs and interests, whether you are currently insured, your current insurance carrier, your prior insurance claims, information about prior accidents and driving violations, whether your driver's license has been revoked, and other information you provide in connection with obtaining insurance quotes or related services.
Vehicle information, such as the number of vehicles you own or operate and each vehicle's make, model, year, and ownership status.
Property and household information, such as your property or residence type, property details, homeownership information, homeowner insurance interests, and the number of drivers in your household.
Location information, such as your ZIP code, city, county, and state.
Communications and relationship information, such as recordings of calls with our call center or customer service representatives (where permitted by law), the details of your communications with us, your inquiries, complaints, requests, feedback, and preferences.
Preferences, such as your preferred language, insurance interests, product interests, and other feedback or preferences that you might express during your use of our Services.
Marketing information, such as your preferences regarding newsletters and promotional communications, your responses to surveys and marketing campaigns, your interactions with advertisements, and information regarding marketing campaigns associated with your use of our Services.
Inferences, such as inferences drawn from the information described above to create a profile reflecting your preferences, characteristics, interests, insurance needs, eligibility, and behavior.
Information collected automatically
Device information, such as online identifiers, IP address, device identifiers, browser identifiers, advertising and campaign identifiers, device type, operating system, browser type, language settings, connection type, mobile carrier, network information, and other unique identifiers associated with your device or use of our Services.
Technical and usage information, such as your user agent, domain, referring URLs, query strings and URL parameters, pages or screens viewed, navigation paths, form interactions, access times, duration of access, and other information regarding your use of and interactions with our Services.
Online activity information, such as your interactions with our Services, including pages or content viewed, features used, buttons or links clicked, how long you spend on pages or screens, whether you complete forms, and whether you open our marketing emails or click links contained in those emails.
Approximate location information, such as your general location derived from your IP address, device settings, or other technical information associated with your use of our Services. We use the following tools to collect this data:
Cookies: Cookies are pieces of information stored directly on the device that you are using and allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We and our service providers may use the information for security purposes, to facilitate navigation, display information more effectively, conduct analytics, and personalize your experience. You can read more information about cookies at http://www.allaboutcookies.org/manage-cookies/index.html.
Local storage technologies: These technologies provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Pixel tags: Also known as web beacons and clear GIFs, pixel tags may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates.
Google Analytics: We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google's practices by visiting https://policies.google.com/privacy, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
INFORMATION ABOUT NON-USERS
If you disclose any personal information relating to other people in connection with applying for financial products or services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy and the Consumer Privacy Notice.
SOURCES OF PERSONAL INFORMATION
We collect personal information from the following categories of sources:
We collect personal information directly from you, such as when you use our websites or submit any personal information to us using our websites.
We collect personal information from emails and other communications, your browser, and your device. We use tracking tools like browser cookies, email trackers and web beacons. We do this on our websites and in emails that we send to you. We collect personal information about users over time when you use our websites. We may have third parties collect personal information this way.
We collect personal information about you from third parties. For example, our business partners may share with us the information you provide to obtain financial products and services. Social media platforms may also give us information about you.
We collect information from service providers, contractors, professional consultants and other vendors. Our service providers, contractors, professional consultants and other vendors who provide services on our behalf may also provide personal information about you. We may also obtain personal information about you through third party sources such as lead generation companies, marketing partners, and affiliates.
We combine personal information. For example, we may combine information we get from a third party with information we already have. We may also combine information collected from you on our various platforms.
HOW WE USE PERSONAL INFORMATION
Here's an overview of how we use personal information in providing our Services:
To provide our Services: To fulfill purposes for which you provided the information, such as to facilitate the provision of financial products and services, or to respond to your feedback and inquiries.
To improve the operation of our websites and business. For example, to improve your experience on our websites and the functionality of our websites, such as by analyzing how our websites are being accessed and used, and to evaluate interest in our products and services.
To address our safety, security, compliance and legal obligations.
To conduct corporate transactions.
For marketing purposes. For example, to provide you with information, special offers, and advertisements about insurance and other products and services. This use may constitute "Targeted Advertising" under certain state laws. We may also work with other businesses, such as third-party marketers, that may provide you with information about new products, services and special offers, including offers for insurance products and services.
With your consent. We may collect and use personal information where you have given us consent to do so for a specific purpose not listed above.
We may collect and use anonymized, de-identified, or aggregated information for any purpose permitted by law.
HOW WE DISCLOSE PERSONAL INFORMATION
Here are the types of entities to which we may disclose personal information in providing the Services.
Service Providers | We disclose personal information to third parties who perform services on our behalf. For example, we disclose personal information to vendors that send emails for us or provide payment processing. We may also disclose personal information to companies that operate our websites or run a promotion. |
Advertisers | We disclose personal information to social media, technology and advertising-related companies to advertise or provide related services for us, or for our joint marketing programs. |
Requested Third Parties | We may disclose personal information where you have directed or requested us to make the disclosure, or where necessary for us to provide our Services, such as to insurance companies that respond to your interest in obtaining insurance. Note that such third parties’ collection, use and disclosure of personal information is described in their own privacy policies, notices and statements. |
Necessary Third Parties | We may disclose personal information as we determine necessary for safety, security, compliance and legal purposes. For example, we may disclose personal information to respond to a court order or subpoena. This may include personal information that is discoverable in connection with accident investigations, litigation or both. We may disclose personal information if a government agency or investigatory body requests such information, directly or indirectly. We might also disclose personal information when we are investigating potential fraud or a security incident. |
Professional Consultants | We may disclose personal information to professional consultants such as our accountants, lawyers and financial advisors to enable them to provide the services we request them to provide. |
Affiliates | We may disclose personal information to Luva affiliates for the purposes set out in the Privacy Policy. |
In Connection with a Corporate Transaction | We may disclose, transfer or assign personal information in connection with a sale, merger, consolidation, change in control, transfer of assets, reorganization, liquidation, or another transaction. |
Government Entities and Other Third Parties | We may be required to provide personal information to law enforcement or other governmental authorities when we believe, in good faith, that (i) you or others are acting unlawfully; (ii) it is necessary or appropriate to meet our legal obligations; (iii) it is necessary to protect or defend our rights or the rights or well-being of our customers or other users of our services; or (iv) it is necessary to protect the health and safety of our personnel, customers, guests, and the general public. We may also disclose personal information to investigative bodies in the case of a breach of an agreement or contravention of law, or as otherwise required by law or agreement, such as a third party investigating a payments-related security incident. We may also disclose information to assist us in collecting a debt, or as necessary to exercise our legal rights or defend claims brought against us. |
We may disclose anonymized, de-identified, or aggregated information for any purpose permitted by law.
SECURITY
We seek to use reasonable organizational, technical, and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately as detailed in the "Contacting Us" section below.
MARKETING CHOICES
You have choices regarding marketing-related communications. If you no longer want to receive marketing-related communications from us on a going-forward basis, you may opt-out by following the unsubscribe instructions in any such message, using the unsubscribe link on our “Your Privacy Choices” page here, or by contacting us at [email protected].
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing from us, we may still send you important administrative messages, from which you cannot opt out.
PRIVACY RIGHTS REQUESTS
Please note that if you have applied for, or begun the process of applying for, financial products or services through Luva or one of our third-party partners, your information is governed by our Consumer Privacy Notice. Accordingly, exercising the privacy rights described in this section may not affect how we collect, use, maintain, or disclose information that is subject to the Consumer Privacy Notice. The rights set out in this section generally apply to the extent that your engagement with Luva has been limited to visiting our website or communicating with us outside of initiating or submitting a request for insurance quotes.
You may request:
Information about how we have collected, used, and disclosed personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
Correction of personal information that is inaccurate or out of date.
Deletion of personal information we maintain about you, subject to applicable legal exceptions.
To opt out of the "sale" of your personal information and/or the use of your personal information for targeted advertising, including the "sharing" of your personal information for cross-context behavioral advertising.
To request to opt out of any future sale of your personal information and/or targeted advertising, including the "sharing" of your personal information for cross-context behavioral advertising, click here. For other requests, please contact us in accordance with the "Contacting Us" section below. We will respond to your request consistent with applicable law. You have the right to be free from unlawful discrimination for exercising your rights under applicable law.
In your request, please make clear what personal information you would like to access, change, or delete. For your protection, we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
We do not knowingly sell or "share" personal information of minors under 16 years of age, and we do not use personal information for purposes of profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
To the extent available under applicable law, if we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us as described in the "Contacting Us" section below.
If you would like another person (an "agent") to make a request on your behalf as permitted by applicable law, the agent may use the submission methods noted above. As part of our verification process, we may request that the agent provide proof of their authorization by you to submit the request.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion (e.g., when you enter a promotion, you may not be able to change or delete the personal information provided until after the completion of such promotion). Further, certain personal information may be exempt from requests pursuant to applicable data protection laws or other laws and regulations.
CHATGPT APP
This section applies if you use the Luva app available in ChatGPT, an AI assistant operated by OpenAI (the “ChatGPT App”). It supplements the rest of this Privacy Policy, which also applies to the ChatGPT App except where this section says otherwise.
Information we collect. Through the ChatGPT App, we collect the information you provide in response to quote questions: your name, gender and date of birth; your address, including ZIP code; your vehicle’s year, make and model, daily mileage, use, whether it is owned, financed or leased, and where it is parked; your current insurer, how long you have been insured and your renewal date; and whether you have had violations or accidents. We do not collect your email address, phone number, property details or payment information through the ChatGPT App. These fall within the categories described in “Personal Information We Collect” above. We receive only the information that ChatGPT sends to the ChatGPT App to respond to your request. In return, the ChatGPT App shows you a summary of your profile, an estimated premium range and a link to continue your quote on luva.com with the same answers. We do not receive your full ChatGPT conversation history or your ChatGPT account credentials. Our service provider Waniwani also generates session data (a session identifier, an anonymous ChatGPT user identifier, the time of each step and the results shown to you) when you use the ChatGPT App.
How we use and who receives your information. We use this information to respond to your requests, provide insurance information, operate and secure the ChatGPT App, and for the other purposes described in “How We Use Personal Information.” We do not use information collected through the ChatGPT App for targeted advertising or sell it. It is received by:
● First Interpreter, our pricing partner, which receives your profile to calculate the estimated premium range shown in the ChatGPT App. Its use of your information is governed by its own privacy policy.
● Luva and our carrier partners, who receive your information when you click “Continue to Luva”, to continue your quote and respond to your interest, as described under “Requested Third Parties.” Carriers’ use of your information is governed by their own privacy policies.
● Waniwani, a service provider that operates the ChatGPT app on our behalf and may use your information only for that purpose.
● OpenAI. Information you enter in ChatGPT, and the quote information the ChatGPT App returns to ChatGPT, is processed by OpenAI under OpenAI’s own terms and privacy policy, not this one. We do not control OpenAI’s practices.
How long we keep your information. Waniwani keeps the answers you give in a conversation for 24 hours so you can resume your quote, and keeps session data for 36 months. Information you provide when you continue your quote on luva.com is kept in accordance with the “Retention Period” section below.
Your choices and requests. You can disconnect the ChatGPT App at any time in your ChatGPT settings. Disconnecting stops ChatGPT from sending us new information but does not delete information we already hold. To request access to, correction of, or deletion of information collected through the ChatGPT App, email [email protected] with the subject line “ChatGPT App Request,” or contact us as described in “Contacting Us.” Requests are handled as described in “Privacy Rights Requests,” including identity verification and legal exceptions. To manage information held by OpenAI, use OpenAI’s privacy tools.
RETENTION PERIOD
We retain personal information for as long as needed or permitted in light of the purposes for which it was obtained as outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable law. The criteria used to determine our retention periods include:
The length of time we have an ongoing relationship with you (for example, for as long as you keep using our Services);
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records or communications for a certain period before we can delete them); or
Whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
THIRD-PARTY SERVICES
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties. This includes any third party operating any website or service to which our Services link. The inclusion of a link on our Services does not imply endorsement of the linked site or service by us.
In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal information you disclose to other organizations through or in connection with the Services or on social media.
INFORMATION RELATING TO MINORS
Our Services are not intended for minors under the age of 16 and we do not knowingly collect any personal information from minors under the age of 16 without prior consent as required by applicable law. If you believe a minor under the age of 16 has provided us with personal information, please contact us using the information provided in the "Contacting Us" section below. We will take reasonable measures to delete personal information related to such minor as soon as possible and not use such personal information for any purpose, except where necessary to protect the safety of the minor or others as required or allowed by law.
ADDITIONAL INFORMATION FOR CALIFORNIA AND OTHER SELECT STATE RESIDENTS
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes under California's "Shine the Light" law. To make such a request, please email us at [email protected].
UPDATES TO THIS PRIVACY POLICY
The "Last Updated" legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
CONTACTING US
If you have any questions about this Privacy Policy, the practices of our websites, or your dealings with our websites, please contact us at:
Luva
141 Portland St
Cambridge, MA 02139
Phone: 302-364-5882