Abstractive Health, Inc. Privacy Policy

Account Information. We may collect contact information such as your name, phone number, email, address, or single sign-on login information to create an account and allow you to access it.

Analytics and Passively Collected Data. We collect data about how you use Abstractive Health Services and Informational Website through pixel tags and cookies including your IP address, mobile device ID, click or tap history, type of OS or browser and other actions on the Services. This information is collected from your phone or web browser as you interact with web and mobile apps and helps us improve your experience with the Services.

Feedback and Support. Whether you have an idea to make Abstractive Health better or need a little help, we store the emails you send us and use them to help us prioritize how to improve our product.

De-identified Data. De-identified Data is non-personal information that is aggregated or de-identified so that it cannot reasonably be used to identify an individual. We use de-identified data for research and development of new products or tools, to refine our algorithms and machine learning applications, and to improve the Services and the services we provide. We may disclose such information publicly and to third parties, for example, in public reports about health, to partners under agreement with us, or in benchmarking information we provide to the medical community.

We process personal data to provide the Service to you:

• We use your name, email address, and mobile phone number to manage your account, contact you about your use of Abstractive Health, respond to your requests, and inform you of new features or products.
• We use Analytics and Passively Collected Data to understand how you use Abstractive Health, to test features and tools, ensure Abstractive Health is working properly, and protect it from bad actors.
• We use personal data to improve Abstractive Health. For example: to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; develop new products or tools; and refine our algorithms and machine learning applications.
• We use your email address to send you information about Abstractive Health or our Partners. You can opt-out from receiving messages at any time by clicking “unsubscribe” in any email you receive.
• We use your contact information and information about how you use the Services to send promotional communications that may be of specific interest to you. These communications are aimed at driving engagement and maximizing what you get out of the Services, including information about new features, survey requests, events and other information we think may be of interest to you. We also communicate with you about new product offers, promotions and contests.
• We are always looking for ways to make our Services smarter, faster, more secure, integrated and useful to you. To that end, we use collective learnings about how people use our Services and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Services.
• We use personal data to promote the safety and security of Abstractive Health, our users, and other parties. For example, to protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and other policies.

We never sell personal data. We only share it with your consent or when required or permitted by law.

Here are the circumstances under which your personal data may be shared:

When you consent, agree or direct us to share it. There may be times when you ask us to perform an action that will share your data. For example:

• The Abstractive Health Service includes links and interactions with third parties that aren’t controlled by Abstractive Health. We partner with these organizations because they provide benefits that we think makes the Abstractive Health experience more beneficial to you. We do not share personal data with partners unless you direct us to do so and we include a link to the partner’s privacy policy in the Services so you will know how your data will be used by that partner.
• Please note that once your data is shared with a third party, it is covered by any policies that apply to that third party and you will have to contact them directly to access or delete your personal data.

To provide the Abstractive Health Services. We transfer data to service providers and other partners who process it for us, based on our instructions and in compliance with this Privacy Policy and other confidentiality and security measures enforced by legal contract. This processing can include services such as customer support, cloud storage, marketing, data analysis, research, and surveys.

We use Google Analytics, a web analysis service operated by Google Inc. (“Google”). Google Analytics uses cookies (text files) stored on your computer to allow for analysis of your visits to websites and interactions with them in order to personalize your experience and improve the Services. You may prevent data from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on.

To comply with the Law. We may disclose the information we collect from you in order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.

Please note: Our policy is to notify you of legal process seeking access to your information, such as search warrants, court orders, or subpoenas, unless we are prohibited by law from doing so. In cases where a court order specifies a non-disclosure period, we provide delayed notice after the expiration of the non-disclosure period. Exceptions to our notice policy include exigent or counterproductive circumstances, for example, when there is an emergency involving a danger of death or serious physical injury to a person.

To Protect Us and Others. We may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Policy, or as evidence in litigation in which Abstractive Health is involved.

Business Transfers. If we are acquired by or merged with another company, if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding or reorganization, we will give affected users notice before transferring any personal data to a new entity.

We use a combination of technical, administrative, and physical controls to keep user data secure. Data is always transmitted via secure channels. Data is encrypted in transit and at rest using the industry best practice encryption standards (e.g. S/MIME, X.509 certificates, TLS) to safeguard your information. Data is protected as it travels over the internet during read and write operations using HTTPS. We use HIPAA-compliant products and services for health data storage and processing. In addition to using state-of-the-art security systems, we also have strict internal access-control policies to prevent privacy violations.

Abstractive Health is not intended for children. Abstractive Health is not directed at children under the age of 13. If we become aware that we are collecting data from a child under 13, we will promptly delete the data and the account. If you have reason to believe that a child under the age of 13 provided data to us without parent or guardian consent, please contact us at giordana@abstractivehealth.com.

You may access and modify personal data that you have submitted by logging into your account and updating your profile information on the Platform. Please note that copies of information that you have updated, modified or deleted may remain viewable in cached and archived pages of the Service for a period of time. Your personal data is stored and accessible on your device as well as in the cloud.
‍

We store information associated with your account until your account is deleted. You can delete your account by contacting us at giordana@abstractivehealth.com. Please note that it may take 24 hours to delete your account information, and we may preserve it for legal reasons or to prevent harm, including as described in the “When Is My Personal Data Shared?” section.

This Privacy Policy complies with the California Consumer Privacy Act (CCPA), which requires that we provide California residents with notice that you have the right to:

• opt-out of the sale of personal information,
• know about personal information collected, disclosed or sold,
• request deletion of personal information, and
• be treated without discrimination should you exercise these rights.

More information regarding the: sources from which we collect personal information can be found above in the section titled “What Personal Data Does Abstractive Health Collect About Me?”; business and commercial purposes for which we collect your personal information can be found above in the section titled “How We Use Your Information”; categories of recipients with whom personal information is shared or sold can be found in the section above titled “When Is My Personal Data Shared?”

We do not sell any personal information collected from your use of the Abstractive Health Service.

To make a request under the California Consumer Privacy Act, or for any questions or concerns about our Privacy Policy or practices, please contact us at giordana@abstractivehealth.com.

We will notify you before we make material changes to this policy and give you an opportunity to review the revised policy before deciding to continue using Abstractive Health.

You can reach us by email at giordana@abstractivehealth.com.