Privacy Policy

1. Introduction

Prospera.ai ("Prospera," "we," "us," or "our") provides a practice-management platform for healthcare providers. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit www.prospera.ai (the "Site") or use our services (the "Services"). By using the Site or Services, you agree to the practices described here.

2. Information We Collect

We collect information you provide directly, information generated through your use of the Services, and information from a limited set of service providers.

• Account information: name, email, phone, practice details, and login credentials.
• Practice and patient data uploaded or generated by providers using the Services, including clinical notes, lab results, communications, and billing records.
• Usage data: device type, browser, IP address, pages viewed, and interactions with the Services.
• Support and communications: messages you send to us, including through demo requests and email.

3. How We Use Information

We use information to operate, secure, and improve the Services; to authenticate users; to provide support; to process payments; to communicate about the Services; and to comply with legal obligations.

4. Protected Health Information (PHI)

When our customers use the Services to store or process PHI, we act as a Business Associate under HIPAA and as a service provider under PIPEDA . We handle PHI only as permitted by the applicable Business Associate Agreement or Data Processing Agreement with the practice. Practices are the controllers of their patient records.

5. How We Share Information

We do not sell personal information. We share information only with:

• Service providers that host infrastructure, process payments, deliver communications, and provide analytics under written contracts.
• Integrated providers you connect (e.g., lab networks) at your direction.
• Authorities when required by law or to protect the rights, safety, and property of Prospera, our customers, and their patients.
• A successor in the event of a merger, acquisition, or reorganization.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, audit logging, and regular security reviews. No system is fully secure; we work continuously to improve our controls.

7. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Practice-owned records are retained according to the practice's instructions and applicable retention requirements.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port personal information, and to object to or restrict certain processing. Patients should direct requests about their records to their healthcare provider. To exercise rights regarding information Prospera holds about you directly, contact us using the details below.

9. International Transfers

Prospera operates in Canada and the United States. Information may be processed in either country subject to appropriate safeguards and applicable law.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children except as authorized by a treating practice.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date below and, when appropriate, provide additional notice.

12. Contact Us

If you have questions or requests about this policy, contact us:

Prospera.ai

Email: privacy@prospera.ai

Phone: (310) 589-6380