Privacy Policy
1. Introduction
At MRIMath (“Company,” “we,” “our,” or “us”), we are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use our software designed to assist healthcare providers in analyzing MRIs to make high-quality treatment decisions.
2. Information We Collect
2.1 Personal Information
When you use our software, we may collect personal information, including but not limited to:
- Contact details (name, email address, phone number)
- Professional details (job title, healthcare provider information)
- Health-related data, such as MRI images and patient health records, as provided by you.
2.2 Usage Data
We may collect information about your use of our software, including:
- Technical details (IP address, browser type, operating system)
- Usage patterns (features used, time spent, interactions within the software)
3. How We Use Your Information
We use the collected information to:
- Provide and improve our software and services
- Analyze MRIs
- Communicate with you regarding your account, updates, and support
- Enhance user experience and software functionality
Comply with Law and Prevent Harm – We may disclose your Personal Information or any information submitted via the Site or Service if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce any applicable terms of service, including investigations of potential violations thereof; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to the rights, property or safety of the Company, our users, yourself or the public. We may be required to disclose Personal Information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
Aggregate and De-identify Data – As noted above, this Policy addresses the collection and sharing of Personal Information, that is, information that can reasonably be connected with a particular user. We may occasionally de-identify and/or aggregate Personal Information – to the extent permitted by law – to the point that it can no longer be associated with a particular user. When that occurs, such information is no longer Personal Information and not subject to this Policy.
Particularly with respect to MRI files, as noted above there is certain metadata that is included with MRI files that is specific to a patient, along with the MRI image itself. In the event that we wished to retain the MRI image, we would de-identify that image by removing patient identifiers in accordance with applicable guidance under HIPAA.
4. How We Share Your Information
We do not sell or rent your personal information. We may share your information under the following circumstances:
- With Your Consent: When you provide explicit consent for us to share your information.
- Service Providers: With third-party vendors who assist us in operating our software and providing services (e.g., cloud storage providers), provided they agree to uphold similar privacy standards.
- Legal Requirements: When required to comply with legal obligations, enforce our terms, or protect our rights, property, or safety.
5. Data Security
We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of data in transit and at rest
- Access controls and secure authentication methods
- Regular security audits and updates
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal requirements, or resolve disputes. When information is no longer needed, we will securely delete or anonymize it.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access and update your personal information
- Request to know - Users may submit two types of Requests to Know: (1) A request for the specific pieces of Personal Information that we have collected about you in the past twelve months; or (2) a request for the categories of Personal Information that we have collected about you in the past twelve months, and we have used and disclosed that Personal Information.
- Request deletion of your personal information
- Restrict or object to the processing of your personal information
- Withdraw consent where consent is the basis for processing
To exercise these rights, please contact us using the information provided below.
8. Other Provisions
Accessibility and Language
Any person that is unable to access this Policy may request this Policy in an alternative format or language by contacting us at: [email protected].
International Users
The Company and its servers are located in the United States and are subject to applicable local, state, and federal laws. Users who choose to access the Site or Service do so on their own initiative and at their own risk, and are responsible for complying with all applicable laws, rules, and regulations. Users who choose to access the Site or Service consent to the use and disclosure of information in accordance with this Policy and subject to such laws. We may limit the Site’s or Service’s availability, in whole or in part, to any person, geographic area, or jurisdiction we choose, at any time and in our sole discretion. We do not represent or warrant that the Site or Service or any part thereof is appropriate or available for use in any other jurisdiction.
Children’s Privacy
The Site and Service are neither directed to nor structured to attract Users under the age of 16. If you are under the age of 16, you are not permitted to use the Site or Service. The Company does not knowingly collect Personal Information from users under the age of 16. If you are a parent with concerns about children’s privacy issues in conjunction with the use of the Site or Service, please contact the Company at: [email protected].
Do Not Track Signals and Collection of Information for Third-Party Advertising
The Company is required to disclose how it responds to “Do Not Track Signals” and whether third parties collect personally identifiable information about users when they use online services. The Company honors "do not track" signals and does not track, use cookies, or use advertising when a “do not track” mechanism is in place. The Company does not authorize the collection of personally identifiable information from our users for third-party use through advertising technologies.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy periodically to stay informed about how we protect your information.