Legal
Privacy Policy
Last updated: [add effective date]
Vizlitics, Inc. ("Vizlitics," "we," "us") builds clinical intelligence software for healthcare organizations. This Privacy Policy explains what information we collect through our website and business relationships, how we use and protect it, and the choices available to you. Clinical data we process on behalf of our health-system clients is governed by HIPAA and the Business Associate Agreements we enter with those clients; this policy does not modify or override those agreements.
What we collect
Information you provide directly
When you contact us, request a demo, or otherwise communicate with us, we collect the details you choose to share — for example your name, institution, work email address, phone number, and the content of your message. If we set up an account for you as part of a service engagement, we collect the information needed to create and maintain it.
Information collected automatically
When you visit our website, we may automatically receive standard technical data such as your IP address, browser and device type, the pages you view, referring URLs, and approximate location (for example, city or region). We collect this through server logs and similar technologies described under Cookies & analytics below.
Client and clinical data
Through our services, we process clinical records and related information on behalf of health-system clients. We handle that information only under our clients' instructions and the terms of our Business Associate Agreements, and we do not use it for our own marketing. Where we improve our models, we do so using de-identified data or data our clients have authorized us to use for that purpose.
How we use information
We use the information we collect to operate our business and deliver our services, on the legal bases of our legitimate business interests, performance of our contracts, your consent where required, and compliance with legal obligations. Specifically, we use information to:
- Provide, maintain, and secure our website and services;
- Respond to inquiries and fulfill demo or information requests;
- Perform and administer our agreements with clients and partners;
- Improve our products, including the ongoing development of our AI and machine-learning capabilities, using de-identified or authorized data;
- Send operational messages and, where permitted, updates about our services;
- Detect, prevent, and respond to fraud, abuse, and security issues; and
- Meet legal, regulatory, and contractual requirements.
Data security
We maintain administrative, technical, and physical safeguards designed to protect the information we hold, including encryption in transit and at rest, access controls, and monitoring. Our practices align with HIPAA requirements and our SOC 2 Type II program. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to meet our legal and contractual obligations. Retention of clinical data processed on behalf of clients is governed by our agreements with those clients. When information is no longer needed, we delete or de-identify it.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to opt out of certain processing or targeted advertising, and to withdraw consent where processing is based on it. To exercise any of these rights, contact us at privacy@vizlitics.com. We will verify your identity before responding and will act within the timeframe required by applicable law.
If your request concerns clinical data we process on behalf of a health-system client, we will refer you to that client, who controls the information and is best positioned to act on your request.
External links
Our website may link to third-party sites we do not control. We are not responsible for the content or privacy practices of those sites, and this policy does not apply to them. Review the privacy policies of any third-party site you visit.
International users
We are based in the United States and process information there. If you access our services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using our services, you consent to that transfer and processing.
Children's privacy
Our website and services are intended for professional and adult audiences and are not directed to children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will post any updates on this page and revise the "Last updated" date above. If we make a material change, we will provide appropriate notice.
Contact us
If you have questions or requests regarding this policy or your information, contact us at privacy@vizlitics.com or info@vizlitics.com.
