Vediq Inc. (“Vediq,” “we,” “us” or “our”) provides healthcare technology and related services. This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit vediq.net, contact us, request a demo, receive an invitation to or use a Vediq service, or otherwise interact with us.
Information we collect
Depending on how you interact with Vediq, we may collect:
- Contact and business information, such as your name, work email address, organization, role and the information you provide when requesting a demo or contacting us.
- Account and identity information, such as your name, email address, organization, user or tenant identifiers, role, authentication status and access permissions. Authentication may be provided by Microsoft Entra ID or another identity provider.
- Usage, device and technical information, such as IP address, browser and device type, pages or features used, dates and times of access, diagnostic information, and security or audit events.
- Communications, including requests, feedback and support correspondence.
- Service data, which may include information submitted to or generated through Vediq products on behalf of a healthcare organization.
Please do not submit protected health information through our public website, demo-request form or general email address.
Healthcare and customer data
Healthcare organizations may use Vediq services to process information on their behalf. For that information, the healthcare organization determines why and how the information is processed, and Vediq processes it as a service provider under the applicable customer agreement. When Vediq processes Protected Health Information (“PHI”) on behalf of a HIPAA covered entity, that processing is governed by a Business Associate Agreement (“BAA”). Questions about a patient record or a healthcare organization’s privacy practices should be directed to that organization.
This Privacy Policy describes Vediq’s general privacy practices and does not amend or replace a customer agreement, BAA, data processing agreement or other signed agreement with Vediq. If this Privacy Policy conflicts with an applicable agreement concerning PHI or customer-controlled data, the applicable agreement controls.
De-identified information
Where permitted by the applicable customer agreement, BAA, law and restrictions applicable to the source data, Vediq may create information that has been de-identified in accordance with applicable HIPAA requirements. Properly de-identified information may be used for service analytics, benchmarking, testing and validation, and development and improvement of Vediq’s services and models. Vediq does not attempt to re-identify information used under this provision.
How we use information
We may use personal information to:
- provide, operate, maintain and improve our websites, products and services;
- create and administer accounts, invitations, authentication and access controls;
- respond to inquiries, demo requests, feedback and support requests;
- communicate about our services and our relationship with your organization;
- monitor performance, diagnose problems and develop new functionality;
- protect the security, integrity and availability of our systems and prevent fraud or misuse;
- comply with legal obligations, enforce agreements and establish or defend legal claims; and
- carry out other purposes disclosed when information is collected or with your direction or consent.
The uses described above do not expand Vediq’s rights with respect to PHI or other customer-controlled healthcare data. When Vediq processes PHI on behalf of a healthcare organization, Vediq uses and discloses that PHI only as permitted by the applicable BAA, the customer’s authorized use of the services, applicable law and applicable source restrictions. Vediq does not use identifiable PHI for advertising, unrelated general-purpose AI model training or another customer’s benefit.
How we disclose information
We may disclose personal information:
- to the organization through which you receive or use Vediq services;
- to vendors and service providers that support hosting, identity, security, communications, analytics, support and other business operations, subject to appropriate contractual and confidentiality obligations; when a subcontractor creates, receives, maintains or transmits PHI on Vediq’s behalf, Vediq requires the subcontractor to agree in writing to the applicable PHI restrictions and safeguards required by law and the applicable BAA;
- when required by law or legal process, or when reasonably necessary to protect rights, safety, security or property;
- in connection with a financing, merger, acquisition, reorganization or sale of all or part of our business, subject to applicable law; or
- with your direction or consent.
We do not sell personal information. We do not sell PHI or use identifiable PHI for advertising or unrelated general-purpose AI model training.
Cookies and similar technologies
Our website and service providers may use cookies, logs and similar technologies that are necessary to operate the site, remember settings, maintain security and understand service performance. You can control cookies through your browser settings, although disabling necessary cookies may affect site or service functionality.
Retention and security
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide services, meet contractual and legal obligations, resolve disputes and protect our systems. Retention may also be governed by an agreement with your organization. For PHI processed on behalf of a covered entity, retention, return, destruction and any permitted continued protection of retained copies are governed by the applicable BAA and applicable law. We use administrative, technical and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Your choices and rights
You may ask to access, correct or delete personal information that Vediq controls, or ask questions about our processing, by contacting us below. Your rights may depend on where you live and may be subject to legal exceptions. If your information was provided through a healthcare organization or another Vediq customer, please direct your request to that organization; we will assist it as required by our agreement and applicable law.
Children
Our public website and services are intended for organizations and authorized professional users, not for children to use independently. We do not knowingly collect personal information directly from children through the public website.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the effective date. If changes are material, we may provide additional notice as required by law or our agreements. A later posting or revision of this Privacy Policy does not amend an existing customer agreement, BAA or other signed agreement unless that agreement expressly provides otherwise.
Contact us
For privacy questions or requests, email info@vediq.net.