Privacy Policy

1. Introduction

Speer Health ("we," "our," or "us") provides software and data analytics solutions for the life sciences and healthcare industries. We value the trust you place in us and are committed to protecting the privacy and security of your data. This Privacy Policy describes how we collect, use, and disclose information in connection with our platform, website, and related services (collectively, the "Services").

2. Scope of this Policy

This policy applies to:

• Customers: Organizations that subscribe to our Services.
• End Users: Individual employees or representatives of our Customers who utilize the platform.
• Website Visitors: Individuals who visit our public-facing websites.

3. Information We Collect

We collect information to provide specialized healthcare analytics and management services:

• Professional Identity Data: Name, business email, job title, NPI number (if applicable), medical license number, and professional affiliations.
• Customer Data: Data uploaded by our Customers to the platform, which may include de-identified patient data, clinical trial information, or sales performance metrics. Note: We process Customer Data strictly in accordance with our Master Services Agreement (MSA) and applicable laws (e.g., HIPAA).
• Usage & Telemetry Data: Information about how you interact with our software, including log files, IP addresses, browser type, and feature usage patterns to improve system performance.
• Cookies and Tracking: We use functional cookies to maintain your session and analytical cookies to understand platform usage.

4. How We Use Your Information

• Service Delivery: To authenticate users, process transactions, and deliver the specific functionality of the Speer Health platform.
• Product Improvement: To train our algorithms and enhance the accuracy of our health insights (using aggregated, anonymized data only).
• Compliance & Security: To verify professional credentials, prevent fraud, and ensure compliance with healthcare regulations.
• Communications: To send administrative information, such as security updates, invoice reminders, or changes to our policies.

5. Data Sharing and Disclosure

Speer Health is a data processor for our Customers. We do not sell personal data.

• Subprocessors: We may engage trusted third-party vendors (e.g., cloud hosting providers like AWS/Azure) to support our infrastructure. These vendors are bound by strict data processing agreements.
• Legal Obligations: We may disclose information if required by law, subpoena, or valid legal process, or to protect the safety and rights of Speer Health or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity.

6. International Data Transfers

If you access our Services from outside the United States, be aware that your data may be transferred to, stored, and processed in our servers. We utilize standard contractual clauses (SCCs) and adhere to applicable frameworks (e.g., GDPR, CCPA) to ensure your data remains protected.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Customer Data is retained in accordance with the specific terms of the customer agreement.

8. Your Rights

Depending on your jurisdiction (e.g., EU, California), you may have rights to access, correct, delete, or port your personal data. To exercise these rights, please contact our Data Protection Officer at mshibly@speerhealth.ai.