Privacy Policy

Scope of This Policy

Oler Health Inc., a Delaware corporation ("Oler," "we," "us," or "our"), operates olerhealth.com (our "Website") and app.olerhealth.com (our "Application"). This Privacy Policy describes how we handle personal information for our own business purposes, including Website inquiries, customer relationships, and account administration and support.

Information we process on behalf of healthcare customers through the Application, including clinical information ("Customer Data"), is governed by the applicable customer agreements, including the Business Associate Agreement ("BAA") and Master Services Agreement ("MSA"), and applicable law. The Customer Application Data section below summarizes those practices. This policy does not replace those agreements or a healthcare provider's privacy notice.

Information We Collect

When you contact us through the Website, we receive the name, email address, organization, and message you submit. We also receive information you provide by email or other direct communications. For account administration and support, we handle business contact details and information needed to respond to your request, including a phone number if provided for Application communications.

Our hosting infrastructure may process technical information, such as IP addresses, browser information, and request logs, to deliver and secure the Website. This is separate from advertising or analytics tracking. The public Website is not intended to receive clinical records; please do not include patient information in Website forms or general inquiries.

Website Tracking and Application Cookies

The public Website does not use advertising or analytics trackers. The Application may use necessary cookies to authenticate users and maintain secure sessions. These Application functions are separate from the public Website.

How We Use Information

We use personal information to respond to inquiries, manage customer relationships, administer accounts, provide support, send transactional communications, operate and secure our services, prevent misuse, and meet legal obligations. Our handling of Customer Data is described separately below.

How We Share Information

We share information with service providers as needed to operate our services, including hosting, authentication, email delivery, and SMS delivery providers. These providers are subject to contractual restrictions on their use and protection of the information. Application service providers, including AI providers, process Customer Data subject to the applicable customer agreements and legal requirements.

We may also disclose information as required by law or as permitted by law to protect the security of our services and the rights and safety of Oler, our customers, or others, subject to applicable contractual restrictions. We do not sell personal information.

Customer Application Data

We process Customer Data on behalf of healthcare customers to provide the contracted Application services, in accordance with customer instructions, the applicable BAA and MSA, and applicable law. Customers are responsible for their own privacy notices and for authorizing the information they provide to us.

AI Processing and Model Training

We use AI providers to process Customer Data as part of delivering Application features. We do not use Customer Data to train AI models unless that use is expressly authorized by the applicable customer agreements and permitted by applicable law. Any such use must comply with the applicable BAA and MSA. Processing information to provide an AI-powered feature is distinct from using that information to train a model.

US Data Residency

We process and store Customer Data solely in data centers located in the United States.

Customer Data Retention and Deletion

Retention and deletion of Customer Data are governed by the applicable customer BAA and MSA and applicable law. Requests concerning clinical records should generally be directed to the healthcare organization responsible for those records. We assist our customers with requests as required by our agreements and applicable law.

Business Information Retention

For information we handle for our own business purposes, we determine retention based on the nature of the information, the purpose for which it was collected, our ongoing relationship with you, and applicable legal requirements. We retain it only as long as needed to respond to inquiries, administer that relationship, maintain necessary business records, resolve disputes, or meet legal obligations. This does not replace the Customer Data retention terms described above.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. Access is restricted to employees, agents, and contractors who need it to perform their duties. No method of transmission or storage can guarantee absolute security.

Third-Party Websites

This Website or Application may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. We recommend that you check the privacy statements of other sites you visit before providing any personal information. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.

Privacy Requests and Choices

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. To make a request about information Oler handles for its own business purposes, contact support@olerhealth.com. We may need to verify your identity and authority before responding. We handle requests in accordance with applicable law, including any limitations or exceptions.

For Customer Data, contact the healthcare organization responsible for your information. If you contact us directly, we will help direct your request to the appropriate customer. Please do not send clinical records or other sensitive information with an initial privacy inquiry.

Children's Privacy

Our Website and Application are intended for business and healthcare professionals, not for use by children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information directly to us, please contact us so we can take appropriate steps to delete it. This is separate from any information about minors that a healthcare customer may lawfully provide as Customer Data.

SMS Communication

We use SMS only for transactional alerts and login codes, including one-time passwords. We do not send marketing text messages. We obtain consent where required by applicable law; this Privacy Policy does not itself constitute consent to receive messages.

We share phone numbers and necessary message information with SMS delivery providers solely to deliver and support these communications. We do not sell or share mobile phone numbers or SMS consent information with third parties for their own marketing or promotional purposes.

Contact support@olerhealth.com for help with SMS messages or to request that they stop. Stopping login codes may affect your ability to sign in, and stopping transactional alerts may prevent you from receiving service notifications.

Changes to This Policy

We may update this policy as our practices or legal obligations change. We will post the revised policy here and update the date above. For material changes, we will provide additional notice and obtain consent where required by applicable law. Updates to this policy do not amend a customer's BAA or MSA.

Questions

If you have any questions about this Privacy Policy, please contact us at support@olerhealth.com.