Privacy Policy

We may collect information you provide directly, such as name, email address, professional credentials, organization affiliation, and account preferences when you register, contact us, or use our Services.

When you use clinical or patient-facing features of our platform, we may process health-related information submitted by you, your care team, or authorized users on your behalf. The categories of data depend on how your organization configures and uses the Services.

We automatically collect certain technical information, such as device type, browser, IP address, log files, and usage data, to operate, secure, and improve the Services.

We use information to provide, maintain, and support the Services; authenticate users; respond to inquiries; and communicate about updates, security, or administrative matters.

We may use de-identified or aggregated data for analytics, quality improvement, research, benchmarking, and product development, consistent with applicable law and any agreements with participating institutions.

We do not sell personal information. We do not use protected health information for unrelated marketing without appropriate authorization.

Where we create, receive, maintain, or transmit protected health information ("PHI") on behalf of a covered entity or business associate, our use and disclosure of PHI is governed by applicable health privacy laws, including the Health Insurance Portability and Accountability Act ("HIPAA"), and by the business associate agreements or data use agreements in place with our customers.

Patients and authorized users should direct questions about medical records, access requests, or corrections to their healthcare provider or the organization that operates their clinical program.

We may share information with service providers who assist us in hosting, security, analytics, customer support, and other operational functions, subject to contractual confidentiality and security obligations.

We may disclose information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, safety, security, or the integrity of the Services.

In connection with a merger, acquisition, reorganization, or sale of assets, information may be transferred subject to appropriate safeguards and notice where required by law.

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the type of data and contractual requirements with participating organizations.

Depending on your location and role, you may have rights to access, correct, delete, or restrict certain uses of your personal information, or to receive a copy of information we maintain about you.

You may opt out of non-essential communications by following unsubscribe instructions or contacting us. Essential service, security, and legal notices may still be sent.

Rights relating to PHI are generally exercised through the healthcare organization that provides your care or sponsors your use of the platform.

We may use cookies, local storage, and similar technologies to maintain sessions, remember preferences, measure performance, and improve user experience. You can adjust browser settings to limit cookies, though some features may not function properly without them.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate parental or guardian authorization as required by law. Clinical programs involving minors are governed by the policies of the participating healthcare organization.

If you access the Services from outside the United States, you understand that information may be processed and stored in the United States or other jurisdictions where we or our service providers operate, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be posted on this page or otherwise communicated as appropriate.