Privacy Policy

Introduction

aureumhealth ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI catalog and governance control plane platform.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree, please do not use our services.

Information We Collect

Information You Provide

• Account information (name, email address, company name, job title)
• Contact information when you request a demo or contact us
• Payment information processed by our third-party payment processors
• Communications with us (emails, support tickets, feedback)

Information Collected Automatically

• Usage data (features used, actions taken, time spent)
• Device information (IP address, browser type, operating system)
• Log data (access times, pages viewed, errors encountered)
• Cookies and similar tracking technologies

Platform Data

• AI asset metadata (model names, versions, ownership, configurations)
• Governance workflow data (approval states, review decisions, audit logs)
• Performance metrics and monitoring data
• Cost and usage analytics

How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative information, updates, and security alerts
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• With your consent, send marketing communications

Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and principle of least privilege
• Regular security audits and penetration testing
• SOC 2 Type II compliance (in progress)
• HIPAA-compliant infrastructure and processes
• Immutable audit logging for all data access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to:

• Provide our services and fulfill the purposes described in this policy
• Comply with legal, regulatory, and audit requirements
• Resolve disputes and enforce our agreements

Audit logs are retained for a minimum of 7 years in compliance with healthcare and financial regulations.

Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (cloud hosting, payment processing, analytics)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection: To protect our rights, property, safety, or that of others
• With Consent: When you direct us to share information

Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing
• Objection: Object to certain processing activities
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@aureumhealth.ai.

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain session state and authentication
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized content and features

You can control cookies through your browser settings, but disabling cookies may limit functionality.

International Data Transfers

Our services are hosted in the United States. If you access our services from outside the U.S., your information will be transferred to, stored, and processed in the U.S. We implement appropriate safeguards for international data transfers, including Standard Contractual Clauses where applicable.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us: