Privacy Policy

Introduction

Kovid BioAnalytics ("KBA," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, share, and protect information when you visit or use our website, services, software solutions including OpenEMR platform implementations, analytics tools, and other offerings (collectively, the "Services"). We understand the sensitive nature of healthcare, bioinformatics, and life sciences data. Our privacy practices are designed to comply with applicable laws and regulations, including the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and other relevant privacy frameworks.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address, company name, job title
• Account Information: Username, password, account settings
• Technical Information: IP address, browser type, device information, cookies, usage data
• Professional Information: Professional qualifications, specialties, work history, educational background

Protected Health Information (PHI)

As a provider of healthcare technology services and OpenEMR solutions, we may process Protected Health Information (PHI) on behalf of our healthcare clients. When we do so, we act as a "Business Associate" under HIPAA and process such information in accordance with our Business Associate Agreements (BAAs) with those clients.

Non-Personal Information

We collect non-personal, aggregated, and technical information when you use our Services, including:

• Usage statistics and trends
• Performance metrics
• Anonymized analytical data
• Technical diagnostics

How We Use Your Information

We use the information we collect for the following purposes:

• Providing and maintaining our Services
• Processing transactions and fulfilling orders
• Responding to inquiries and providing customer support
• Improving and personalizing our Services
• Sending administrative information, updates, and marketing communications
• Ensuring the security and integrity of our Services
• Complying with legal obligations and enforcing our policies
• Conducting research and development for new products and services
• Analyzing usage patterns to enhance user experience

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors and service providers who perform services on our behalf, such as cloud hosting, data analysis, payment processing, and customer service.
• Business Partners: Organizations with whom we collaborate to provide services, subject to appropriate confidentiality and data protection agreements.
• Healthcare Clients: For our OpenEMR services, we process data according to the instructions of our healthcare clients and in compliance with our BAAs.
• Legal Requirements: When required by law, court order, governmental regulation, or similar legal process.
• Business Transfers: In connection with a corporate transaction, such as a merger, acquisition, or sale of assets.
• With Your Consent: We may share information with third parties when you have given us your consent to do so.

Data Security

We implement appropriate technical, administrative, and physical safeguards designed to protect the information we collect. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information in accordance with industry standards and legal requirements. For OpenEMR implementations and other healthcare solutions, we implement additional security measures as required by HIPAA and other applicable regulations.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, such as:

• Access: Request access to personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information in certain circumstances
• Restriction: Request restriction of processing of your personal information
• Portability: Request transfer of your personal information
• Objection: Object to processing of your personal information
• Automated Decision-Making: Not be subject to automated decision-making with significant effects

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

• Kovid BioAnalytics
• Email: privacy@kovidbioanalytics.com
• [Complete postal address and phone number]