Privacy Policy

1. About

ChiroPAX and its affiliates (“ChiroPAX”, “chiropax.ai”, “we”, “us”, and “our”) is committed to protecting your privacy. This Privacy Policy will help you understand how we collect, use and share your personal information and assist you in exercising the privacy rights available to you.

2. Scope

This Privacy Policy applies to personal information processed by us, including on our ChiroPAX web application (chiropax.ai, and its associated subdomains), our mobile applications, our application program interfaces, and our related online and offline offerings (collectively, the “Services”).

This Privacy Policy does not apply to any third-party websites, services or applications, even if they are accessible through our Services. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

3. Personal Information We Collect

Google Account Information. We are using only Sign-In with Google right now, so when you sign in to ChiroPAX, we collect the following personal information from your Google Account (with your consent): Google Account Username, Email address, and Google Account Profile Picture.

Google Healthcare Data Access. ChiroPAX is using Google Healthcare APIs for storing ChiroPAX customers' Healthcare Data Records (for example Radiological Images). So, ChiroPAX requires you to grant access to “Read, Write and Manage healthcare data” (represented by this Google OAuth scope https://www.googleapis.com/auth/cloud-healthcare).

Your Organization Basic Data. If you are using ChiroPAX on behalf of a Medical Organization, you may be asked to provide some information about your organization (for example, your organization business phone number, Organization Address).

Your Organization Healthcare Data. The healthcare data of your organization (Hospital, clinic, etc.) that you provide to ChiroPAX for storing your organization healthcare data records (for example, DICOM Radiological Images), and viewing and processing/analyzing your healthcare data via the ChiroPAX web application.

Payment Information. Where we sell products and services through the Services, we use third-party services such as Stripe to process your payments. These third-party services will collect information from you to process a payment on behalf of ChiroPAX, including your name, email address, mailing address, payment card information, and other billing information. ChiroPAX does not receive or store your payment information, but it may receive and store information associated with your payment information (e.g., the fact that you have paid, the last four digits of your credit card, and your country of origin).

4. How We Use Your Information

Email Address. ChiroPAX uses your email address to provision your identity in our databases and allow you to sign in and use the ChiroPAX Service; send important email notifications, such as when a ChiroPAX customer organization adds you to its user list; send registration and subscription notifications if you are a ChiroPAX Customer Organization Account Manager; process payment card and/or other financial information to facilitate your use of the Services; and provide access to certain areas, functionalities, and features of our Services, including sharing of content with guest users.

Profile Information. ChiroPAX uses your account profile information (username and picture) for personalizing your login experience while you are using ChiroPAX.

Google Healthcare Data Access. ChiroPAX uses https://www.googleapis.com/auth/cloud-healthcare in order to view, process and analyze your healthcare data (for example, DICOM images) after your consent. If you choose not to allow ChiroPAX to “read, write and manage your healthcare data”, you will not be able to use ChiroPAX properly.

Your Organization Healthcare Data. ChiroPAX allows you to process, edit and analyze your organization's healthcare data (like DICOM images and reports) from the ChiroPAX UI.

5. Disclosing Your Information to Third Parties

We may share any personal information we collect with the following categories of third parties:

• External users. ChiroPAX allows you to share any of your healthcare data records (e.g., DICOM studies) with external guest users. If you choose to share certain data records with certain guest users, ChiroPAX will only allow the users you specified to access only the data records you specified.
• Third-Party Platforms and Services. We will share your personal information and/or your healthcare data with third-party platforms and/or services if you have expressly consented or requested that we do so. We do not endorse, screen or approve, and are not responsible for, the practices or conduct of such third-party services.
• Your Organization and Administrator. We will share your information with your organization at its request and give such organization certain rights over your information. Your information may also be subject to your organization's privacy policy, and we are not responsible for the privacy or security practices of our customers.
• Service Providers, including for the provision of the Services; information, products, and other services you have requested; marketing; payment and transaction processing; customer service activities; and IT and related services.
• Disclosure in the Event of Merger, Sale, or Other Asset Transfer. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as permitted by law and/or contract.
• Disclosures to Protect Us or Others, to comply with law enforcement or legal process, protect rights, property or safety, enforce our policies and contracts, collect amounts owed to us, or prevent or investigate suspected illegal activity.

6. International Data Transfers

All information processed by us may be transferred, processed, and stored anywhere in the world, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistently with the requirements of applicable laws.

7. Your Privacy Rights

In accordance with applicable law, you may have the right to:

• Access personal information about you, including confirming whether we are processing it, obtaining a copy, or receiving an electronic copy to transfer to another company (the “right of data portability”).
• Request correction of your personal information where it is inaccurate or incomplete.
• Request deletion of your personal information.
• Request restriction of or object to our processing of your personal information.
• Withdraw your consent to our processing of your personal information.

If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws and will take steps to verify your identity before fulfilling your request. If you use our Services on behalf of an organization, that organization may be responsible for fulfilling individual rights requests.

8. Data Retention

We store the personal information we receive for as long as you use our Services or as necessary to fulfill the purposes for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and/or comply with applicable laws.

When we have no ongoing legitimate business need or legal reason to process your personal information, we will delete or anonymize it, or, if that is not possible, securely store it and isolate it from further processing until deletion is possible. You may request deletion of your personal information at any time, which will require you to delete your account with us, as we need your personal data to maintain your account.

9. Security of Your Information

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. We may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security breach, we may attempt to notify you electronically by posting a notice on the Services, by mail, or by email.

10. Third-Party Websites/Applications

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. Visiting these other websites or applications is at your own risk.

11. Supplemental Notice for California Residents

This Supplemental California Privacy Notice only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (“CCPA”). The CCPA provides California residents with the right to know what categories of personal information ChiroPAX has collected about them and whether ChiroPAX disclosed that personal information for a business purpose in the preceding 12 months.

ChiroPAX collects the following categories of personal information:

• Identifiers: a real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, or other similar identifiers.
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): name, signature, address, telephone number or employment.
• Protected classification characteristics under California or federal law.
• Commercial information.
• Internet or other electronic network activity.
• Geolocation data.
• Sensory data.
• Inferences drawn from other personal information to create a profile about a consumer.

ChiroPAX discloses information to the following categories of third parties for a business purpose: advertising networks, internet service providers, data analytics providers, operating systems and platforms, social networks, and service providers.

Sales of Personal Information under the CCPA. As defined by the CCPA, ChiroPAX does not sell personal information of California residents, nor do we have actual knowledge of any sale of personal information of minors under 16 years of age.

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information.

Verification. To protect your privacy, we will take steps to verify your identity before fulfilling your request, which may include asking you to log in to your account or verify your email address.

12. Children's Information

The Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you learn that your child has provided us with personal information without your consent, you may contact us as set forth below. If we learn that we have collected a child's personal information in violation of applicable law, we will promptly take steps to delete such information and terminate the child's account, or, if appropriate, seek written consent from the child's guardian.

13. Changes to Our Privacy Policy

We may revise this Privacy Policy from time to time at our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to submit a request to exercise your rights as detailed in this Privacy Policy, please contact us at:

Maxwel Corp, 605 E Evelyn Ave, Mountain View, CA 94041
Email: mkhaled@voyancemed.com