AUTHENTIC8 PRIVACY POLICY

Last Updated: April 2, 2025

1. INTRODUCTION

This Privacy Policy (“Policy”) describes how Elev8 Health Inc (“Elev8 Health,” “we,” “our,” or “us”) collects, uses, discloses, and protects information when you use our Authentic8 portal (“Portal”). This Policy applies to all users of the Portal and supplements our Terms of Service.

Elev8 Health is committed to protecting the privacy and security of your information. We understand the sensitive nature of healthcare information and take our obligations seriously, including compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and other applicable laws.

2. INFORMATION WE COLLECT

We use the term “personal data” to refer to any personal information regarding a natural person that may be used directly to identify the person (e.g., name and email address).

Personal data also includes usage data that is automatically collected when you use this Portal including other interactions with us. Usage data that does not directly identify you by name or include your contact information, may be used to identify that a specific computer or device has accessed our Portal and which if combined with certain other information could be used to identify you.

2.1 Account Information

When you register for an account, we collect:

  • Name and contact information
  • Professional credentials and affiliations
  • Username and password
  • Employment information

2.2 Protected Health Information

As part of our Patient Access Services, we may collect, receive, maintain, or transmit protected health information (“PHI”) as defined under HIPAA, including:

  • Patient demographic information
  • Insurance and benefits information
  • Medical diagnosis and procedure codes
  • Physician orders and prescriptions
  • Prior authorization documentation
  • Patient charts and medical records
  • Clinical notes and documentation
  • Communication regarding healthcare services

2.3 Usage Information

We automatically collect certain information about your use of the Portal:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Access times and duration
  • Features used and activities conducted

This data may be passively or automatically collected (that is, gathered without your actively providing the information) using various analytics and reporting technologies, such as cookies, web beacons, and other similar methodologies. (See below COOKIES AND TRACING TECHNOLOGIES)

2.4 Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to collect information about your interactions with the Portal:

  • Essential cookies necessary for Portal functionality
  • Analytics cookies to understand usage patterns
  • Session cookies to maintain your session state
  • Authentication cookies to verify your identity

You can manage cookie preferences through your browser settings, though disabling certain cookies may limit your ability to use some Portal features.

  • Web beacons (sometimes called single-pixel gifs or clear gifs) are used to assist in delivering cookies, and they allow us to count users who have visited pages of our Portal. We may include Web Beacons in promotional e-mail messages or our newsletters in order to determine whether messages have been opened and acted upon.
  • “Cookies” are tiny pieces of information stored by your browser on your computer’s hard drive. Cookies are also used to customize content based on your browser. Most browsers are initially set to accept cookies. If you want to disable cookies, there is a simple procedure in most browsers that allows you to turn off cookies. Please remember, however, that cookies may be required to allow you to use certain features of our Portal.
  • We may use cookies and other data collection methodologies discussed below to collect personal data and usage data to assist with navigation, monitoring Portal usage, and web traffic, assist with our promotional and marketing efforts and personalized ads, and customize and improve our Portal and services.
  • We do not partner with third-party advertising networks to either display personalized ads on our Portal or to manage our advertising on other sites via the use of third-party cookies and other third-party tracking devices. We reserve the right to serve personalized ads that are based solely on first-party cookies and other tracking devices from this Portal.
  • You can control the placement of cookies and other data collection methodologies for purposes of opting out. You should note that although most browsers are initially set up to accept cookies, you may be able to change your browser settings to cause your browser to refuse first party or third-party cookies or to indicate when a third-party cookie is being sent. However, disabling or limiting cookies may cause certain features of this Portal to not function properly or optimally. Check your browser’s “Help” files or other similar resources to learn more about handling cookies on your browser. In addition, visit –> http://www.allaboutcookies.org/manage-cookies/
  • When using mobile applications, you may receive personalized in-application advertisements. Depending on your device, you may be able to reset your mobile device’s advertising identifier at any time by accessing the privacy settings on your mobile device. In addition, each operating system (iOS for Apple phones, Android for Android devices and Windows for Microsoft devices) provides its own instructions on how to prevent the delivery of personalized in-application advertisements. You may review the support materials and/or the privacy settings for the respective operating systems in order to opt-out of these advertisements. For any other devices and/or operating systems, please visit the privacy settings for the applicable device or contact (or review the applicable privacy web page of) the applicable platform operator.
  • We may participate with third-party analytics partners to monitor and analyze Web traffic and to keep track of user behavior on this Portal via third-party cookies. These third-parties place or recognize a unique third-party cookie on your browser, and they may use web beacons (pixel tags). (See above COOKIES AND WEB BEACONS)
  • Google Analytics is a third-party web analysis service that may use third-party cookies and web beacons (pixel tags). Google utilizes the data collected to track and examine the use of this Portal, to prepare reports on its activities, and to share them with other Google services. Information collected: personal data including usage data and cookie data. You may opt-out of the Google Analytics service with the Google’s Browser Add-on that’s available at –> https://tools.google.com/dlpage/gaoptout.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 Providing and Improving Our Services

  • Facilitating Patient Access Services
  • Processing and submitting authorization requests, claims, and benefit verifications
  • Communicating status updates and determinations
  • Maintaining and improving the Portal
  • Troubleshooting technical issues

3.2 Administration and Security

  • Verifying your identity and credentials
  • Managing your account
  • Enforcing our Terms of Service
  • Preventing fraudulent or inappropriate activity
  • Ensuring the security of the Portal

3.3 Analytics and Research

  • Analyzing usage patterns and trends
  • Evaluating service performance
  • Developing new features and services
  • Conducting research to improve healthcare processes

3.4 AI and Machine Learning Applications

With appropriate safeguards and de-identification where required, we may use data to:

  • Train machine learning models to improve efficiency of Patient Access Services
  • Develop predictive analytics to better identify potential coverage issues
  • Automate routine aspects of the authorization process
  • Improve document processing capabilities

We implement strict protocols to protect patient privacy when using data for these purposes, including de-identification techniques, access controls, and algorithmic fairness reviews.

This Privacy Policy does not place any restriction on our use of anonymized, de-identified or aggregated information we may create based on information that you submit.

We use, process, and archive personal data including usage data in the United States and in other countries that may not have data protection laws as protective as those in your location.

4. HOW WE SHARE YOUR INFORMATION

We may share information in the following circumstances:

4.1 Business Associates and Subcontractors

We may share information with our business associates and subcontractors who need access to perform functions on our behalf, subject to appropriate contractual restrictions and security requirements.

4.2 Healthcare Providers and Facilities

We share information with healthcare providers and facilities as necessary to facilitate Patient Access Services and coordinate patient care.

4.3 Insurance Companies and Payors

We share information with insurance companies and other payors as necessary to process authorization requests, claims, and benefit verifications.

4.4 Device Manufacturers and Representatives

We may share information with medical device manufacturers and their representatives when necessary to support Patient Access Services for specific devices, consistent with our contractual obligations and with appropriate safeguards.

4.5 Legal Requirements

We may disclose information when required by law, including:

  • In response to a court order, subpoena, or similar legal process
  • To comply with state, federal, or local laws
  • To enforce our Terms of Service
  • To protect our rights, privacy, safety, or property

4.6 Within our Family of Companies

We and our subsidiary and affiliated companies may share your personal data among and between each other for the purposes described in this Privacy Policy.

5. DATA SECURITY

We implement reasonable technical, administrative, and physical safeguards designed to protect the information we maintain. However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Do Not Track Requests

We do not respond to “Do Not Track” signals at this time.

7. YOUR RIGHTS AND CHOICES

7.1 Account Information

You may update your account information at any time by logging into your account settings.

7.2 Communications

You may opt out of receiving non-essential communications from us by following the unsubscribe instructions included in each communication.

7.3 PHI Access Rights

We are not a covered entity under HIPAA. Patients who wish to exercise their rights regarding their PHI should contact their healthcare provider directly.

7.4 Security Practices

You are responsible for maintaining the security of your account credentials and should notify us immediately of any unauthorized use of your account.

8. DATA RETENTION

We retain your information for as long as:

  • Your account remains active
  • Needed to provide you services
  • Required to comply with legal obligations
  • Necessary for legitimate business purposes
  • Required by our contracts with healthcare providers

Different types of data may be retained for different periods. For example, PHI related to authorizations may be retained for the period required by applicable healthcare regulations, while account login information may be retained while your account is active plus an additional period for security and auditing purposes.

9. BUSINESS TRANSFERS

If Elev8 Health is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Portal of any change in ownership or uses of your information.

10. CHANGES TO THIS POLICY

We may update this Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Portal prior to the change becoming effective. Your continued use of the Portal after such notice constitutes your acceptance of the revised Policy.

11. CHILDREN’S PRIVACY

You must be 13 years of age or older to use the Portal. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately so we can take appropriate action. To request the removal of your child’s information, please contact our site (see below, CONTACT US), and be sure to include in your message the same login information that your child submitted.

12. INTERNATIONAL TRANSFERS

Our services are intended for use in the United States. If you access the Portal from outside the United States, be aware that information may be transferred to, stored, and processed in the United States where our servers are located. By using the Portal, you consent to any transfer of information outside your country.

13. CONTACT US

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: compliance@elev8-health.com