Privacy Policy
Last updated: August 2, 2025
PreSense Inc. (“PreSense,” “we,” “our,” or “us”) provides AI-enabled clinical decision support solutions. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites, products, and services (collectively, the “Services”).
HIPAA Note (U.S.): When PreSense processes Protected Health Information (“PHI”) on behalf of a covered entity or business associate, we act as a Business Associate under HIPAA and our use and disclosure of PHI is governed by our Business Associate Agreement (BAA) with that customer. We do not use PHI for advertising or sell PHI.
1) Scope
This Policy applies to:
- Our public websites, portals, and communications.
- Our enterprise Services used by healthcare organizations and their authorized users.
- It does not replace a provider’s HIPAA Notice of Privacy Practices.
2) Information We Collect
- Account & Contact Data: name, role, organization, email, phone, login credentials.
- Customer & Billing Data: organization details, purchase history, payment/PO information.
- Clinical/Operational Data supplied by customers (may include PHI): vitals, labs, notes, device data, and other records uploaded or integrated by our healthcare customers for care operations.
- Device/Usage Data: IP address, identifiers, log files, analytics events, pages viewed, feature usage.
- Support & Feedback: messages, attachments, survey responses.
- Cookies & Similar Tech: to operate and improve the Services; see Cookies below.
3) How We Use Information
We use information to:
- Provide, secure, and maintain the Services (including customer support and account administration).
- Process clinical data as instructed by our healthcare customers under applicable agreements/BAAs.
- Develop and improve features, models, and performance (using de-identified or aggregated data where feasible).
- Communicate about updates, security alerts, and administrative matters.
- Comply with law, enforce terms, and prevent fraud or misuse.
Legal bases (EEA/UK): performance of contract, legitimate interests (e.g., service improvement, security), consent (where required), and legal obligations.
4) How We Share Information
We may share:
- Service Providers/Sub-processors: hosting, security, analytics, support, and other vendors bound by confidentiality and, where applicable, BAA/DPA terms.
- Enterprise Customers: with the customer who provided access to you (e.g., your employer/health system) consistent with our contract.
- Legal/Compliance: to comply with laws, lawful requests, or to protect rights, safety, and integrity.
- Business Transactions: in connection with mergers, acquisitions, or asset transfers (subject to appropriate safeguards).
We do not sell personal information, and we do not use PHI for advertising.
5) Data Retention
We retain information for as long as necessary to deliver the Services, meet legal obligations, resolve disputes, and enforce agreements. Customer-provided clinical data is retained according to our agreement and customer instructions.
6) Security
We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls, monitoring, and audits. No method of transmission or storage is completely secure.
7) Your Privacy Choices & Rights
- Account & Communication Preferences: You can update account information and opt out of non-essential emails via links in messages or by contacting us.
- Cookies: Manage cookies via your browser or device settings.
- EEA/UK/Similar Jurisdictions: You may have rights to access, correct, delete, restrict, object, or port your personal data, and to withdraw consent where applicable.
- U.S. State Privacy (e.g., CA/CO/CT/UT/VA): You may have rights to know, access, delete, correct, and opt out of certain sharing/targeted advertising. We do not sell personal information. To exercise these rights, or to appeal a decision, contact privacy@presense.us.
We will not discriminate against you for exercising your rights.
8) Children’s Privacy
Our Services are not directed to children under 13 (or the age defined by local law). We do not knowingly collect personal information from children via public websites.
9) International Transfers
We may process information in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.
10) Third-Party Links
Our Services may link to third-party sites or services we do not control. This Policy does not cover their practices.
11) Changes to This Policy
We may update this Policy from time to time. The “Last updated” date indicates the latest revision. Material changes will be communicated as appropriate.