This Privacy Policy outlines the practices of Reveal MRI, LLC. (“Reveal,” “we,” “our,” or “us”). When you access or utilize our website(s) (referred to as the “Site”), Reveal medical products (“Products”), web and mobile application(s) (“Apps” or “Applications”), and/or online service(s) (“Cloud Services”), you are consenting to Reveal's Privacy Policy. The collective reference to the Site, App, and Cloud Services is denoted here as the “Services”. If you disagree with this Privacy Policy, kindly refrain from using the Product or Services.

This Privacy Policy encompasses:

• The Data we Gather
• Our Usage of the Data we Gather
• Information Sharing and Disclosure
• Online Analytics and Customized Marketing
• Accessing and Retaining Information
• Safeguarding Information
• Communication Preferences
• Transfer and Storage of Collected Information
• Children's Privacy
• Contacting Us
• Modifications to this Policy

The Data we Gather

The data we gather and how we gather and retain it vary depending on your interaction with us (e.g., whether you solely visit the Site or engage with the Product and Services). Various types of information are gathered from you, outlined below.

Information You Share

During your usage of the Services, we might collect data about you, including your name, username, password, email address, postal address, phone number, mobile phone number, payment details, device model and serial number, and other data you input, provide, post, or permit us to access when you perform specific actions (collectively referred to as "User Information"). These actions include but are not limited to:

• Using our Products
• Furnishing registration details and/or setting up an Account
• Providing feedback or reviews
• Requesting specific features or information (e.g., newsletters, updates, and other products)
• Downloading or utilizing the Apps
• Contacting customer support
• Applying for a job posting
• Using our Product
• Connecting with the Services or allowing us access to particular information about you through a social networking service
• Posting user-generated content

Patient Information

When utilizing our Apps and the Product, you have the option to input health details about patients ("Patient Information"). Safeguarding and maintaining the confidentiality of the Patient Information you provide us is of utmost importance to Reveal. Patient Information is securely stored within the App or uploaded to our Cloud Services. We will not collect, utilize, or disclose any Patient Information except as authorized by you, as outlined in this Privacy Policy, as mandated by law, or in alignment with other relevant written agreements (e.g., for U.S. users, a Business Associate Agreement (BAA) stipulated in the Health Insurance Portability and Accountability Act (HIPAA) or, for E.U. users, a similar agreement constituting a Data Protection Addendum) that regulate our handling and disclosure of Patient Information. In the event of any inconsistency between the terms of any applicable written agreement such as the BAA and those detailed in this Privacy Policy, the terms of the written agreement will take precedence.

Examination Details

While utilizing the Product and our App, specific examination details (such as MRI images, measurements, findings, annotations, statistics, examinations, calculations, impressions, indications) will be created ("Examination Information"). Initially, this Examination Information is stored locally, and subsequently, it's exported or securely uploaded to our Cloud Services to enable access through our Apps. Our Services are structured to segregate Examination Information from any identifiable user information or Patient Information, unless encrypted and stored on your personal mobile device. De-identified Examination Information might be transmitted without encryption.

Information Automatically Gathered

During your utilization of the Services, there is information we gather automatically, as detailed within this segment.

Usage and Analytical Data

We might automatically gather specific details about the computer or devices, including mobile devices, that you employ to access the Product or Services. To aid in collecting this data, we might utilize third-party analytics providers and technologies, such as cookies and similar tools.

Website Information

When utilizing our Site, we may collect and evaluate data such as your Internet Protocol (IP) address, browser specifics, browser language, operating system, your location (state or country) during access, entry and exit pages as well as Uniform Resource Locators (URLs), platform type, user engagements (keystrokes, mouse movements like location and clicks), domain names, initial pages visited, subsequent pages viewed and their sequence, duration on specific pages, timestamps of Service usage and content uploads or postings, error logs, and analogous information.

Mobile Device Information. When you use the Services via a mobile device, we may gather details like geolocation data (as outlined in the subsequent section below), unique identifiers for devices (such as UDID or IDFA for Apple devices like iPhone and iPad), and additional information regarding your mobile phone or other mobile device(s), like the operating system, version, and duration spent in different sections of our App and other applications on your device.

Product Utilization Details. We collect specific analytical data concerning your use of the Product and App (like models, configurations or settings of the utilized Products, selected workflows, log files, utilized buttons, boot logs, temperature details, usage metrics, or support inquiries and outcomes). While most of this information is collected and employed in an anonymous and aggregated manner, we maintain log files in an identifiable format for a duration to aid in troubleshooting and for other purposes. This information assists us in refining our Product and Services, diagnosing issues, and examining device malfunctions.

Cookies and Comparable Technologies. We utilize “cookies” and akin technologies, such as web beacons, to assist in recognizing you across different Services, enhance your user experience, optimize our Services, bolster security measures, evaluate the use and efficiency of our Services, and serve and gauge online marketing. Cookies are alphanumeric identifiers positioned on your devices. Third parties may also employ cookies and similar technologies on the Services. You can regulate cookies through your browser settings and other available tools. Most browsers provide guidance on how to manage this in their “help” section. By accessing and utilizing the Services, you agree to the placement of cookies and beacons in your browser and HTML-based emails, in accordance with this Privacy Policy.

Details from External Sources

We might acquire additional details concerning you from external sources like marketers, collaborators, researchers, and other entities. The information we gather from or about you might be merged with data obtained from such external sources, affiliates, or information derived from any other subscription, product, or service we offer. By linking to a third-party network, platform, app, or service via our Services, you authorize us to gather, retain, and utilize, in accordance with this Privacy Policy, any information you consented to be provided to us by the social network or other third-party based on your settings on that particular third-party social network or platform. Your consent is established upon your interaction with the third-party network, platform, or service through our Services or when you link one of our applications through such services.

Email Correspondence

In order to enhance email relevance, we may receive a notification when you access Reveal emails, provided your device supports this functionality.

Anonymous or De-Personalized Data

As previously mentioned, we keep Examination Information in a de-personalized format, isolating it from associated Patient Information. Additionally, we might process other data obtained through our Services or other channels in a way that doesn't identify any specific individual. Our utilization and disclosure of aggregated or de-personalized data (inclusive of de-personalized Examination Information) aren't bound by limitations within this Privacy Policy. We reserve the right to analyze, evaluate, or share this information (individually or collectively) without restrictions and for any purpose. For instance, we might conduct image analyses on compilations of de-personalized MRI images stored on our Cloud Services.

Our Usage of the Gathered Data

The information gathered serves various purposes:

• Provision of purchased or requested Products and Services and delivering updates or details concerning your interactions with us.
• Notification regarding new Product or Services features, special events, and newsletters.
• Compilation and assessment of reports and data pertaining to our user base and patterns of Product/Services usage.
• Examination of accuracy, efficiency, usability, and popularity of the Products/Services (e.g., monitoring traffic and usage on our Site and App).
• Support provision, enhancement of content and features, and development of new products/services.
• Personalization of content and marketing displayed on the Services.
• If granted permission, sending marketing communications (e.g., mail, email, text, telephone, push notifications, or other agreed-upon means) about Reveal products, software updates, Cloud activity (e.g., in digest format), and third-party products, software, or services we believe may interest you. Opt-out options are available as outlined in Section 7 below.
• Aid in fraud prevention, and enforcement of legal terms governing your use of the Product and Services.
• Administration and troubleshooting of the Product and/or Services.

Legal Grounds for Processing (EU residents): For EU residents, information is collected and processed based on legal grounds according to applicable EU laws. This involves collection and use of your information when:

• Essential for Product and Services provision, including operations, customer support, personalized features, and safety/security.
• It serves a legitimate interest (not outweighed by your data protection interests), such as research, marketing, protecting legal rights, and interests.
• When explicit consent for a specific purpose is granted by you.
• When data processing is necessary to comply with legal obligations.

You retain the right to revoke your consent for information usage at any time, without affecting prior processing. In cases where information is used due to our or a third party's legitimate interest, you have the right to object. However, this may result in discontinuation of Product or Services use in some instances.

Information Sharing and Disclosure

We strictly refrain from renting, selling, or distributing collected information to third parties, except as explicitly outlined in this Privacy Policy. The instances in which we may share your information include:

Third-Party Service Providers

Our service providers may be granted access to collected information to assist in business activities such as delivering services, order completion, payment processing, marketing, and similar functions. For instance, a company like FedEx may handle parcel shipments on our behalf, and we might share your User Information with them. However, these parties are granted access only to the necessary personal information required for their service, and we impose stringent security and privacy measures on them in compliance with the law.

Legal Compliance

We may divulge personal information if required by law, such as complying with subpoenas, court orders, legal processes, ensuring health and safety, or protecting an individual's interests when timely consent cannot be obtained. However, this excludes the selling, renting, or sharing of personally identifiable information from customers for commercial purposes, contravening the commitments outlined in this Privacy Policy.

Prevention of Unlawful Activities

Information disclosure may occur to investigate, prevent, or address potential illegal activities, suspected fraud, threats to personal safety, violations of Terms and Conditions regarding accessed Products or Services, defending legal rights, or safeguarding against legal claims to protect our rights and property.

Merger or Acquisition

As part of our business growth, we may engage in activities like selling, purchasing, merging, or partnering with other entities. In such instances, collected information may be among the transferred assets.

Online Analytics and Customized Marketing

Utilizing Online Analytics

We may engage third-party web analytics services, such as Google Analytics, on our Services. These service providers use technology akin to that outlined in the section on Automatically-Collected Information to aid in analyzing user interactions with the Services, including tracking the third-party site from which your visit originates. The data collected through this technology is either disclosed to or directly collected by these service providers, who utilize it to assess your use of the Services.

For specific purposes associated with online marketing, we utilize Google Analytics, as detailed in the subsequent section. If you wish to prevent Google Analytics from employing your data for analytics, you can install the Google Analytics Opt-Out Browser Add-on by clicking here.

Customized Online Marketing

External entities offering products or services accessible or promoted through the Services may utilize cookies or similar tracking technologies on your device to gather details regarding your Service usage. This serves two main purposes: (i) to guide, refine, and deliver marketing material based on your previous visits to our and other websites, and (ii) to report the correlation between our marketing content, marketing service utilization, interactions with such content, and visits to our websites.

Furthermore, we might authorize additional third-parties (e.g., ad networks, ad servers like Google Analytics, DoubleClick, etc.) to deliver tailored marketing on the Services, deploying their cookies or tracking technologies on your device. This Policy does not govern or provide us access to non-affiliated third-party cookies or tracking technologies on your device used by ad servers, ad technology, or ad networks. These entities often present opt-out options for tailored marketing. For instance, you can visit the Google Ads Settings page to opt out of Google Analytics for Display Advertising or customize Google Display Network ads.

Note that despite opting out of tailored marketing, integrated marketing technology within the Services may still deliver marketing content, albeit not personalized to your preferences. We don't manage the above-mentioned opt-out links and hold no responsibility for your choices made through these mechanisms or their continued accuracy and availability.

While using the App, you might receive personalized in-app marketing content. Each operating system—iOS, Android, Windows—offers instructions on preventing such tailored in-app marketing. Review the support materials or privacy settings for the respective operating system to opt out of this service. For other devices or operating systems, refer to the privacy settings for the relevant device or contact the platform operator.

Information Access and Retention

Information Access

If you need to rectify or modify any gathered information, you can email us using the contact details listed in the "How to Contact Us" section below. As a resident of the European Union, you might possess additional rights to access, rectify, download, or erase your information, along with the ability to limit and object to specific data processing. These rights are detailed in the remainder of this section. If you encounter difficulties exercising these rights using the information provided, please reach out to us using the contact details found in the "How to Contact Us" section.

While some rights are applicable in a general context, certain rights are limited to specific circumstances. You can manage some preferences by logging into the Services (for registered users) and adjusting settings within the Services or your Account. For Services administered by an institution administrator (refer to "Notice to End Users" below), you might need to contact your administrator initially for assistance. For all other inquiries, you can reach out to us as detailed in the "Contact Us" section below for further guidance.

Certain requests and preferences might face limitations, especially if they involve information retention permitted by law or based on compelling legitimate interests. Should you have unresolved concerns, you retain the right to file a complaint with a data protection authority in your country of residence, employment, or where you believe your rights were violated.

Account Deactivation: If you decide to discontinue using our Services, you or your administrator may deactivate your Services Account. In cases where you or your administrator encounter difficulties deactivating the Account, please contact us using the information below. For additional information on information deletion, refer to the details below.

Information Deletion: Our Services allow you to delete specific personal information from within the Services, such as certain profile details within your profile settings. However, some information may need retention for record keeping, transaction completion, or compliance with legal obligations.

Request to Cease Information Use: If you previously consented to limited information use, you can contact us to withdraw that consent. However, this won't affect prior processing. Opt-out options for marketing purposes are available within your Service Account settings (for registered users) or by contacting us. Upon such requests, we may require time for investigation and facilitation. If there's a delay or dispute concerning the continued information use, we'll restrict further use until the request is fulfilled or the dispute is resolved.

Data Portability: Subject to certain contexts, data portability allows you to obtain specific information in a format transferable between service providers. We'll furnish you with an electronic file of your essential Account information upon request.

Retention of Information

For registered users, we retain your personal information while your Account remains active or as necessary to provide the Services or fulfill your requests. To cancel your Account or request cessation of information use, contact us using the details below. Nevertheless, cancelling your Account may restrict access to the Product or specific Services. After cancellation, we'll retain and utilize your information as required by legal obligations, conflict resolution, and agreement enforcement.

How we Safeguard Information

We've implemented commercially reasonable physical, electronic, and managerial protocols to protect against unauthorized access, maintain data security, and ensure proper utilization of the information gathered via the Services. These protective measures are adjusted based on the sensitivity of the collected and stored information.

While we take suitable steps to prevent unauthorized information disclosures, we cannot assure a 100% secure environment. Consequently, we cannot guarantee or warrant that any information you transmit to us will remain entirely secure or never be disclosed in a manner inconsistent with this Privacy Policy.

Communication Preferences

The information collected by Reveal adheres to the purposes outlined in this Privacy Policy and is subject to the choices detailed throughout. If you wish to opt out of receiving promotional communications from us, you can use the unsubscribe link provided in each email, modify your email preferences within your Services Account settings (for registered users), or reach out to us to remove your contact information from our promotional email list or registration database. Please note that processing your requests in compliance with relevant laws may require some time. Additionally, note that registered users of our Product or Services or those engaged in transactions with us do not have the option to opt out of non-marketing communications initiated by Reveal.

Third-Party Links and Marketing Content

The Services might feature links to third-party websites whose privacy practices and content are beyond our control. We don't take responsibility for the privacy practices or content on those third-party websites. Our Site might display advertisements and links to other websites served by third-party advertisers. Reveal doesn't furnish personally identifiable customer information to these advertisers. However, when these advertisers serve ads on our websites, they might automatically receive your IP address. They may also utilize cookies, JavaScript, and other technologies for ad measurement and to personalize ad content. Reveal lacks access to or control over the functionalities they utilize, and their information practices fall outside the scope of this Privacy Policy.

Where Information is Stores and Transferred

Patient Information and any personally identifiable user data are housed in data centers situated in the US, except in cases where local health regulations in the country of Product usage prohibit such storage. In instances where US storage is restricted, this information will be securely stored in a jurisdiction complying with the laws of the country where the Product was utilized.

Examination Information, consistently de-identified, is stored within US-based data centers.

Other Data, such as information inputted on Reveal's website (revealmri.com) for sales, marketing, or procurement purposes, may be provided to online data storage providers operating centers across various global locations.

Your utilization of the Product and/or Services may entail the transfer, storage, and processing of collected data to the aforementioned countries and jurisdictions. This includes Other Data, which may be transferred to jurisdictions outside your current location. Data stored in these locations may be subject to the laws and regulations of those jurisdictions, which might not align with the privacy and data protection laws of your residing jurisdiction.

By using the Product and/or Services, where such consent is legally valid, you agree to the transfer of your information to our facilities in other jurisdictions and to those of third-party service providers with whom we share data, as delineated herein.

Children

We prioritize safeguarding the online privacy of children. To uphold this commitment, children under the age of 13 are restricted from sharing any personal information with us. Additionally, users of our Product and Services must ensure that any data regarding a minor (including Patient Information and/or Examination Information) is solely provided to us with parental consent. If you suspect that we might have gathered information from your child without appropriate consent, please reach out to us using the contact details provided below, and we will take necessary steps to remove it.

Contact Us

If you have any inquiries, feedback, or concerns about our Privacy Policy or procedures, please reach out to us via email athello@revealmri.com, and we will strive to address them promptly.

Changes to This Policy

Regarding changes to this Policy, we maintain the right to modify this Privacy Policy at any time to align with alterations in the law, our data practices, the functionalities of our Product and/or Services, or technological advancements. Kindly revisit this page periodically for updates. Your ongoing utilization of the Product and/or Services after the publication of any modifications to this policy indicates your acceptance of those changes. In the event of significant alterations to this Privacy Policy, we will publish the revised version here and inform you via email or by issuing a notice on our website before the changes take effect