Privacy should be clear.

Scope of this policy

This Privacy Policy describes how TeyaHealth ("TeyaHealth," "we," "us," or "our") handles personal information when you visit teyahealth.com, contact us, request a demonstration, communicate through our website chat, or otherwise interact with our public website and marketing activities.

This policy does not replace a healthcare practice's Notice of Privacy Practices and does not govern patient information that we process on behalf of a healthcare customer through the TeyaHealth product. That information is handled under our customer agreements, including a Business Associate Agreement when applicable, and the healthcare customer controls the information.

Information we collect

We collect information from you, automatically from your device, and from service providers or advertising partners that help us measure and improve our outreach.

How we use information

• Respond and provide services: answer questions, schedule demonstrations, operate website chat, and provide requested information.
• Operate and protect the website: maintain functionality, troubleshoot, prevent fraud and automated abuse, and secure our systems.
• Understand and improve: analyze visits, interactions, performance, and the effectiveness of content and campaigns.
• Market TeyaHealth: send communications where permitted, measure conversions, attribute visits to campaigns, and show relevant business-to-business advertising.
• Comply and enforce: meet legal obligations, respond to lawful requests, and protect our rights and those of others.

Where applicable, we rely on consent, performance of a contract or steps requested before a contract, our legitimate interests, and compliance with legal obligations. You may withdraw consent where consent is the legal basis.

Advertising, analytics, and cookies

Our website currently uses the technologies described below. These providers may receive device and usage information when their tools load. Their handling of information is also governed by their own terms and privacy notices.

Google Ads and future advertising services

We do not currently use Google Ads on this website. If we activate Google Ads or another advertising or measurement provider, it may use cookies, tags, or similar technologies to measure visits and conversions, attribute campaigns, limit ad frequency, and—where permitted—support audience or remarketing features. We will update this policy and provide any notice or consent mechanism required by applicable law before using a materially different technology.

We do not sell personal information for money. Some laws define the use of advertising cookies or pixels as "sharing," "sale," or processing for "targeted advertising" even when no money changes hands. Where those laws apply, you may have the right to opt out as described below.

How we disclose information

We may disclose personal information to:

• Service providers that host, secure, support, analyze, or help operate our website, communications, contact form, and chat.
• Advertising and analytics providers as described above, subject to applicable choices and restrictions.
• Professional advisers and authorities when reasonably necessary for legal, security, compliance, or claims purposes.
• Transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
• Others at your direction or when you consent to the disclosure.

We do not share mobile numbers or SMS opt-in consent with third parties or affiliates for their own marketing. We may use providers that transmit messages on our behalf, subject to their contractual obligations.

Your choices and privacy rights

Advertising and communication choices

• Use the privacy choices panel when you first visit the site to accept, reject, or separately manage optional analytics and advertising technologies. You can reopen it later through the "Privacy choices" control in the website footer.
• Use browser settings to block or delete cookies. Blocking cookies may affect site functionality.
• Use Google's Google Analytics Opt-out Browser Add-on or your browser's privacy controls to limit Google Analytics collection.
• Use the advertising controls offered by Meta, Google, and your device or browser.
• Follow the unsubscribe instructions in a marketing email or contact us to change communication preferences.
• Where applicable law gives you an opt-out right for sale, sharing, or targeted advertising, send a request with the subject "Privacy Choice" to contact@teyahealth.com. We will not discriminate against you for exercising a privacy right.

Access, correction, deletion, and other rights

Depending on where you live and subject to legal exceptions, you may have the right to request access to or a copy of personal information, correction, deletion, portability, restriction or objection to processing, withdrawal of consent, and an appeal of a denied request. You may also have the right to opt out of sale, sharing, or targeted advertising and to limit certain uses of sensitive personal information.

To make a request, email contact@teyahealth.com or call +1 (617) 284-6176. Describe the right you want to exercise and the state or country where you live. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law.

If you are in the European Economic Area or United Kingdom, you may also lodge a complaint with your local data protection authority. If you are in a U.S. state that provides an appeal right, you may appeal our decision by replying to our response.

Healthcare data and HIPAA

TeyaHealth builds software for healthcare practices; we do not provide medical care. A healthcare customer may ask us to process protected health information on its behalf as a business associate under HIPAA. In that situation, the customer's instructions, our agreement with the customer, and applicable healthcare privacy law govern our processing.

If your request concerns medical records, treatment, billing, or other patient information held by a healthcare practice, contact that practice. The practice is generally responsible for responding to patient-rights requests and providing its Notice of Privacy Practices.

Retention, security, and international processing

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to respond to requests, maintain business and security records, comply with legal obligations, and resolve disputes. Retention periods vary based on the type of information, our relationship with you, and legal requirements. Google Analytics event-level data is configured to be retained for 2 months; aggregated reports may remain available for longer because they do not identify individual users in those reports.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, transmission, or storage system is completely secure, so we cannot guarantee absolute security.

TeyaHealth and our providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers.

Children's privacy

Our public website is intended for healthcare professionals and other adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this website. Contact us if you believe a child has provided information through the site.

Changes to this policy

We may update this policy as our services, advertising practices, providers, or legal obligations change. We will post the updated policy here, revise the effective date, and provide additional notice when required by law.