Privacy Policy

oseight provides services to professional practices ("Customers"). If you are a Client of a Customer, your information may be collected and processed by the Customer through oseight. To the extent a Customer is a Covered Entity or Business Associate under HIPAA and makes PHI available to oseight through the Services, oseight acts as a Business Associate under the BAA. Customers are responsible for their own privacy practices with Clients.

We collect Personal Information you provide directly and information collected automatically through your use of the Services, including:

• Account information such as name, email, and practice details.
• Billing information and payment method tokens processed by our payment partners.
• Usage data such as IP address, device identifiers, browser type, interactions with the Services, and analytics events associated with website or product use.
• Support communications and feedback.

We use Personal Information to:

• Provide, operate, and secure the Services.
• Process payments, maintain wallet balances and replenish settings, and support messaging or waitlist preferences.
• Support onboarding, integrations, and customer support.
• Comply with legal obligations.
• Improve and develop the Services.

We may share Personal Information:

• With service providers who help operate the Services under confidentiality obligations.
• With payment processors to complete transactions.
• With Customers when required to deliver Services.
• For legal reasons such as compliance with law, subpoenas, or to protect rights and safety.
• In corporate transactions such as mergers, acquisitions, or asset sales.

We do not sell Personal Information or PHI.

You may update account information through the Services or by contacting support. Subject to applicable law, you may request access, correction, or deletion of certain information.

We use cookies and similar technologies to provide essential functionality, analyze performance, and improve the Services. We may also use analytics providers to measure website and product usage, provided that we do not intentionally send PHI, payment card data, or other sensitive data in those analytics events. You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

We retain Personal Information as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. We maintain reasonable administrative, technical, and physical safeguards designed to protect information.

To the extent HIPAA applies and PHI is made available to oseight through the Services, oseight's handling is governed by the BAA. We do not use PHI except as permitted by the BAA and applicable law.

The Services are intended for U.S.-based Customers. If you access the Services from outside the U.S., you do so at your own risk. We do not knowingly collect information from children under 13.

Questions about this Privacy Policy: support@oseight.com.