Privacy Policy

This Privacy Policy explains how Hygia Technologies, Inc. ("Hygia," "we," "us," or "our") collects, uses, discloses, and protects personal information through its public-facing website, including hygiatech.ai, and the Hygia mobile application (collectively, the "Services"). This Policy should be read together with Hygia’s Cookie Policy and Accessibility Statement.

1. Scope

This Policy applies to the public Website, Website-based inquiries, and the Hygia mobile application. Information processed through specific customer programs, provider-sponsored Gia deployments, or other authenticated healthcare services may also be governed by additional privacy notices, customer agreements, consents, HIPAA notices, or business associate agreements.

2. Information We Collect

Depending on the manner in which a visitor uses the Website, Hygia may collect the following categories of information:

a. information the visitor provides, such as name, business or personal email address, telephone number, organization, job title, inquiry details, demo requests, partnership or investor inquiries, media inquiries, job-application information, and other information the visitor chooses to submit;

b. technical and usage information, such as IP address, browser and device information, operating system, referring page, pages viewed, timestamps, approximate location derived from IP address, and interactions with Website features;

c. cookie and similar-technology information, as further described in Hygia’s Cookie Policy; and

d. communications information arising from correspondence with Hygia by email, telephone, or other channels.

The public Website is not intended to collect payment-card information, account passwords for Hygia healthcare products, or medical records submitted through general inquiry forms. Personal information collected from California-resident job applicants through the Website is processed in accordance with this Policy and any additional notice provided to applicants at the time of application.

3. Health Information and HIPAA

Visitors should not submit protected health information or other sensitive medical information through a general Website inquiry form. Hygia may act as a business associate to healthcare organizations in connection with separate customer deployments. Where Hygia processes protected health information on behalf of a covered entity or another business associate, such processing is governed by HIPAA, the applicable business associate agreement, customer instructions, and product-specific privacy terms, and not solely by this Policy.

4. How We Use Information

Hygia uses personal information to:

a. operate, secure, maintain, and improve the Website;

b. respond to requests for information, demonstrations, partnerships, investor relations, media inquiries, careers, and other communications;

c. route inquiries to appropriate Hygia personnel;

d. understand Website performance and usage, subject to applicable cookie and tracking choices;

e. protect against fraud, abuse, security threats, and violations of law or of Hygia’s terms;

f. comply with legal obligations and establish, exercise, or defend legal claims; and

g. send marketing or business communications where permitted by applicable law, subject to applicable opt-out rights.

Hygia’s use of information in connection with artificial-intelligence systems is described further in Section 5.

5. Use of Information in Connection with Artificial Intelligence

Hygia is an artificial-intelligence company. Except as described in this Section, information submitted through general Website inquiry forms, demo requests, and other public-facing Website interactions is not used to train, fine-tune, or validate Gia or any other Hygia machine-learning model deployed in a patient-facing or clinical workflow. Hygia may use aggregated or deidentified Website interaction data — such as the general nature of inquiries received or engagement with a public product demonstration — to inform product development, to improve the Website, and to train, evaluate, or benchmark models used for non-clinical purposes, such as Website chat assistance or marketing personalization. Interaction with a public demonstration of Gia is illustrative only, as described in Hygia’s Terms of Use, and is not treated by Hygia as a source of patient data. Where Hygia processes information within a customer deployment on behalf of a covered entity or business associate, any use of that information for model training or improvement is governed exclusively by the applicable customer agreement, business associate agreement, and HIPAA, and not by this Policy.

6. Legal Bases for Processing

Where a legal basis is required, Hygia processes personal information as necessary to respond to a visitor’s request or to take steps requested by the visitor, to pursue legitimate business interests not overridden by the visitor’s rights, to comply with applicable law, and, where required, on the basis of the visitor’s consent. A visitor may withdraw consent for future processing where consent constitutes the applicable legal basis.

7. How We Disclose Information

Hygia may disclose personal information to: vendors and service providers supporting hosting, security, analytics, customer relationship management, communications, recruiting, and Website operations; professional advisers; affiliates; governmental authorities or other parties where required or permitted by law; and parties involved in a financing, merger, acquisition, reorganization, sale of assets, or similar corporate transaction. Hygia may also disclose information at a visitor’s direction or with the visitor’s consent.

8. Sale, Sharing, Targeted Advertising, and Sensitive Information

Hygia does not sell Website visitors’ personal information for monetary consideration. Depending on the technologies actually deployed on the Website, certain disclosures made in connection with cross-context behavioral advertising or targeted advertising may be treated as a "sale" or "sharing" under certain U.S. state privacy laws. Hygia will provide any legally required opt-out mechanism and will configure its public disclosures to correspond to the Website’s actual technology stack. Hygia does not use general Website inquiry forms to solicit sensitive health information.

9. Cookies, Analytics, and Tracking Technologies

The Website may use cookies, pixels, local storage, analytics tools, and similar technologies. Hygia’s Cookie Policy describes the categories of technologies used and the controls available to visitors. Because health-related browsing may be sensitive in nature, Hygia evaluates third-party tracking technologies with particular care and does not intend for general Website tracking tools to receive protected health information from authenticated patient services.

9A. Mobile Messaging

If you affirmatively opt in to the Hygia Technologies text-messaging program, Hygia collects your mobile telephone number, the date and time of consent, the consent language shown to you, and related technical information needed to document your request. Hygia uses this information to send informational, account, service, and care-support messages, to honor opt-out and help requests, and to operate and secure the messaging program.

Mobile opt-in data and consent will not be shared with third parties or affiliates for their marketing or promotional purposes. Hygia may disclose this information to telecommunications carriers and service providers only as necessary to deliver messages, maintain the program, prevent fraud or abuse, or comply with law. Those providers may not use the information for their own marketing.

Message frequency varies. Message and data rates may apply. Text STOP to opt out or text HELP for help. Consent to receive text messages is not a condition of purchase.

10. Data Retention

Hygia retains personal information only for so long as reasonably necessary for the purposes described in this Policy, including to respond to inquiries, maintain business records, satisfy legal and regulatory obligations, resolve disputes, enforce agreements, and protect security. Retention periods vary by data type and context. Hygia may retain deidentified or aggregated information where permitted by applicable law.

11. Security

Hygia maintains administrative, technical, and organizational safeguards designed to protect personal information, including controls appropriate to the nature of the information and Hygia’s systems. No security measure can guarantee absolute security.

12. U.S. State Privacy Rights

Depending on a visitor’s state of residence and whether an applicable law governs Hygia’s processing, a visitor may have the right to request access to, correction of, deletion of, or a portable copy of certain personal information; to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive personal information; and to appeal the denial of a privacy request. Hygia will respond to an appeal within the time and in the manner required by the applicable law. These rights are subject to applicable legal exceptions and verification requirements. Hygia will not discriminate against any visitor for exercising an applicable privacy right.

13. Categories of Personal Information Collected and Disclosed

The following table summarizes the categories of personal information Hygia has collected through the Website, the purpose for which each category is used, and the categories of third parties, if any, to which each category has been disclosed for a business purpose, in each case as those terms are used under the California Consumer Privacy Act, as amended. Hygia has not sold personal information for monetary consideration and has not disclosed personal information for cross-context behavioral advertising purposes, except as may be described in Hygia’s Cookie Policy. Refer to the Cookie Policy for details about the technologies we use and how long each one stores information in your browser.

Category	Examples	Purpose	Disclosed To
Identifiers	Name, business email, telephone number, IP address	Operate and secure the Website; respond to inquiries	Service providers (hosting, security, email, CRM)
Internet or electronic network activity	Browsing and usage data, pages viewed, referring page, device/browser information	Analytics and Website improvement, subject to cookie choices	Analytics providers; advertising providers, if deployed
Professional or employment-related information	Organization, job title, job-application information	Respond to inquiries; evaluate employment applications	Recruiting service providers; professional advisers
Geolocation data (approximate)	Location derived from IP address	Analytics; fraud and security monitoring	Analytics and security service providers
Commercial information	Inquiry details, demo requests, partnership or investor inquiries	Route inquiries to appropriate personnel	Internal personnel; professional advisers

14. Consumer Health Data

Certain state laws regulate consumer health data outside the scope of HIPAA, including the Washington My Health My Data Act and Connecticut’s Data Privacy Act, as amended. To the extent such a law applies to information collected through the public Website, Hygia will:

a. provide a consumer health data privacy notice describing the categories of consumer health data collected and the purposes for such collection;

b. obtain valid authorization before collecting consumer health data beyond what is necessary to provide a requested product or service, and before sharing consumer health data with a third party, in each case where such a law requires authorization;

c. obtain consent before collecting consumer health data where such a law requires consent rather than authorization; and

d. refrain from establishing a geofence around an in-person healthcare facility for purposes restricted by such laws.

Hygia’s public contact forms are designed to discourage the submission of health information. Hygia will publish a separate Consumer Health Data Privacy Notice, linked from this Policy, if the Website begins intentionally collecting consumer health data outside HIPAA-covered workflows.

15. Global Privacy Rights

A visitor located in a jurisdiction that grants additional privacy rights, including the European Economic Area, the United Kingdom, or Switzerland, may, under applicable law, have rights of access, correction, erasure, restriction, objection, portability, and complaint to a supervisory authority. Where applicable, international transfers of personal information will be effected using a lawful transfer mechanism, such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum.

This Policy does not represent that every global privacy law applies to Hygia in every circumstance.

16. Children

The public Website is not directed to children under the age of thirteen (13), and Hygia does not knowingly collect personal information from children under thirteen (13) through the Website. Separate Hygia healthcare programs may involve minors solely under the terms, authorizations, and privacy requirements applicable to those programs.

17. Automated Technologies

The Website may include artificial-intelligence-enabled or other automated features. Unless otherwise disclosed at the point of use, Hygia does not use information submitted through public Website inquiries to make decisions producing legal or similarly significant effects with respect to Website visitors. To the extent Hygia’s processing of a visitor’s personal information constitutes a decision described in Article 22 of the GDPR, the visitor has the right not to be subject to such a decision based solely on automated processing, and may request human review, express the visitor’s point of view, and contest the decision, by contacting privacy@hygiatech.ai.

18. Your Choices and Requests

A visitor may unsubscribe from marketing emails using the unsubscribe mechanism contained in the applicable message, and may manage non-essential cookies through the Website’s cookie controls where available. To submit an applicable privacy request, contact privacy@hygiatech.ai or write to the mailing address in Section 21. Hygia may need to verify the requestor’s identity and authority prior to completing a request. An authorized agent may submit a request on a visitor’s behalf where permitted by applicable law.

19. Third-Party Links

The Website may link to third-party sites or services. The privacy practices of such third parties are governed by their own notices, and not by this Policy.

20. Changes to this Policy

Hygia may update this Policy as its Website, practices, or legal obligations change. The Effective Date set forth above identifies the version of this Policy then in effect. Where required by applicable law, Hygia will provide additional notice of material changes.

21. Contact Information

Hygia Technologies, Inc.

1200 Brickell Avenue, Suite 1950, Miami, FL 33131

Privacy inquiries: privacy@hygiatech.ai

General inquiries: marketing@hygiatech.ai