Privacy Policy

We may collect the following types of information when you use our Services: **Personal Information:** Name, email address, phone number, company/organization name, and job title when you create an account or contact us. **Usage Data:** Information about how you interact with our platform, including features used, session duration, and device information. **Motion Analysis Data:** Biomechanical and movement data captured through the Avasci platform. This may include video recordings, joint position data, range of motion measurements, and generated reports. **Payment Information:** Billing details processed through our secure third-party payment providers. [COMPANY TO FILL IN: Specify payment processor(s).]

We use the information we collect to: - Provide, maintain, and improve our motion analysis services - Process and complete transactions - Send technical notices, updates, and support messages - Respond to your comments, questions, and customer service requests - Monitor and analyze usage trends to improve user experience - Comply with legal obligations and enforce our terms We do **not** sell your personal information to third parties.

We may share your information in the following circumstances: **Service Providers:** With trusted third-party vendors who assist in operating our platform (hosting, analytics, email delivery). These providers are contractually obligated to protect your data. **Legal Requirements:** When required by law, regulation, or legal process. **Business Transfers:** In connection with a merger, acquisition, or sale of assets, with appropriate notice. **With Your Consent:** When you have given explicit permission to share specific information. [COMPANY TO FILL IN: List specific third-party services and their purposes.]

We implement industry-standard security measures to protect your data, including: - Encryption of data in transit (TLS/SSL) and at rest - Regular security audits and vulnerability assessments - Role-based access controls - Secure cloud infrastructure with [COMPANY TO FILL IN: hosting provider] While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Avasci is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) where applicable. **Protected Health Information (PHI):** When our platform is used by healthcare providers or in clinical settings, patient motion analysis data may constitute PHI. We implement appropriate administrative, physical, and technical safeguards to protect PHI. **Business Associate Agreements (BAA):** We enter into BAAs with covered entities as required. [COMPANY TO FILL IN: Contact email for BAA requests.] **Patient Rights:** Patients have the right to access, amend, and request restrictions on their PHI in accordance with HIPAA regulations.

We use cookies and similar technologies to: - **Essential Cookies:** Required for the platform to function (authentication, session management) - **Analytics Cookies:** Help us understand how visitors interact with our website (e.g., Google Analytics) - **Preference Cookies:** Remember your settings and preferences You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality. [COMPANY TO FILL IN: List specific analytics/tracking tools used.]

Depending on your location, you may have the following rights: - **Access:** Request a copy of the personal data we hold about you - **Correction:** Request correction of inaccurate or incomplete data - **Deletion:** Request deletion of your personal data (subject to legal retention requirements) - **Portability:** Request your data in a portable format - **Opt-out:** Unsubscribe from marketing communications at any time To exercise any of these rights, contact us at **info@avasci.com**. **California Residents (CCPA):** You have additional rights under the California Consumer Privacy Act, including the right to know what data is collected and the right to opt out of data sales. **EU/EEA Residents (GDPR):** You have the right to lodge a complaint with your local supervisory authority.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods: - **Account Data:** Retained while your account is active and for [COMPANY TO FILL IN: retention period] after account closure - **Motion Analysis Data:** Retained according to your account settings and applicable regulatory requirements - **Communication Records:** Retained for [COMPANY TO FILL IN: retention period] You may request deletion of your data at any time by contacting us.

Our Services are not directed to individuals under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will promptly delete it. When Avasci is used by healthcare providers to analyze minor patients, the provider is responsible for obtaining appropriate parental consent.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after changes are posted constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or our data practices, please contact us: **Email:** info@avasci.com **Address:** [COMPANY TO FILL IN: Full mailing address] **Phone:** [COMPANY TO FILL IN: Phone number] For HIPAA-related inquiries, please contact our Privacy Officer at [COMPANY TO FILL IN: privacy officer email].