Effective date: January 1, 2025

OvaryIt Holdings, Inc. ("OvaryIt", "we", "us") operates PRISM and related services. This Privacy Policy describes how we collect, use, and share information about you when you use our services.

Information we collect

We collect information in the following ways:

Information you provide: Name, email, phone number, pharmacy information, and professional credentials when requesting a demo or creating an account.
Usage information: Log data, device information, browser type, IP address, pages visited, and interactions with our services.

We use the information we collect to:

Provide, maintain, and improve our services
Communicate with you about your account, updates, and support
Analyze usage patterns to enhance user experience
Protect against fraud and unauthorized access

How we share your information

We do not sell your personal information. We may share information in these circumstances:

Service providers: With vendors who assist in operating our services, under contractual obligations to protect your data.

HIPAA compliance

PRISM is a HIPAA-covered platform. We maintain a comprehensive HIPAA compliance program including Business Associate Agreements (BAAs) with covered entities, technical safeguards (encryption, access controls, audit logging), administrative safeguards, and workforce training. Protected Health Information is never used for marketing or advertising purposes. Our SOC 2 certification demonstrates our commitment to security best practices.

Data retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Clinical data is retained in accordance with applicable healthcare record retention requirements. You may request deletion of your account data by contacting us, subject to legal and regulatory retention requirements.

Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, multi-factor authentication, role-based access controls, regular security assessments, and continuous monitoring. While no system is completely secure, we are committed to protecting your data using best practices.

Cookies and tracking

We use cookies and similar technologies to maintain session state, remember your preferences, and analyze site usage. You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

Your rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention requirements)
Opt out of marketing communications

Children's privacy

Our services are designed for healthcare professionals and are not directed to individuals under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact us

For privacy inquiries or to exercise your rights, contact us at:

Email: legal@ovaryit.com

Phone: (850) 633-1100

Mail: OvaryIt Holdings, Inc., Attn: Privacy, Tallahassee, FL