Privacy Policy

About This Policy

Previant Health, Inc. (“Previant,” “we,” “us,” or “our”) operates the website located at previanthealth.com (the “Site”) and provides care coordination software to healthcare providers.

This Privacy Policy describes how we collect, use, and share information about visitors to our Site and about the business contacts of our prospective and current customers, vendors, and partners. It also describes the rights and choices available to those individuals with respect to their information.

This Privacy Policy does not apply to protected health information (“PHI”) that Previant creates, receives, maintains, or transmits on behalf of healthcare provider customers as a HIPAA Business Associate. That activity is governed by the Health Insurance Portability and Accountability Act (HIPAA), applicable state medical privacy laws, and our Business Associate Agreements with each healthcare provider customer.

Previant’s Role Under HIPAA

Previant is a HIPAA Business Associate, not a Covered Entity. Previant does not provide healthcare services directly to patients, operate a health plan, or act as a healthcare clearinghouse. In providing its care coordination software to healthcare provider customers, Previant handles PHI only on behalf of those providers (who are HIPAA Covered Entities) and only as permitted by our Business Associate Agreements and applicable law.

Information collected through the Site (such as marketing inquiries or demonstration requests) is website and business-contact information, not PHI. Website and business-contact information is governed by this Privacy Policy; PHI that Previant processes for healthcare provider customers is governed by HIPAA and the applicable Business Associate Agreement. If information that appears to be PHI is submitted through the Site or a general email channel, we will handle and route it as described in the “How We Share Information” section below.

Patients should review their healthcare provider’s Notice of Privacy Practices for information about uses and disclosures of PHI and their HIPAA rights. If you are a patient and contact Previant with a PHI-related rights request, we will direct you to contact your healthcare provider. Where feasible and required by the applicable Business Associate Agreement, we may also forward your request to the applicable provider.

Previant’s core clinical safety features use deterministic, rule-based logic; the deterministic engine, not any language model, determines clinical safety outcomes. Language-model tools are used to assist with generating materials such as outreach scripts and draft care plans, which are reviewed by the patient’s healthcare provider before use. We do not use PHI to train, fine-tune, or improve language or machine-learning models. Where language-model tools process PHI, they do so under executed Business Associate Agreements and appropriate safeguards.

Information We Collect

Information You Provide Directly

We collect information you provide when you contact us through the Site, request a demonstration or additional information, communicate with us by email or other channels, subscribe to communications, or enter into a customer or vendor relationship with Previant. This may include your name, email address, company name, phone number, professional title, and the content of your communications.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain information about your device and usage, including IP address and general geographic location derived from it; browser type and version, operating system, and device information; pages viewed, links clicked, time spent on pages, and referring website; and the date and time of visits.

We may use analytics tools, such as Google Analytics or similar services, to understand Site usage and improve the Site. We configure analytics tools, where available, to support Site analytics rather than cross-context behavioral advertising.

Categories of Personal Information We Collect

The following table summarizes the categories of personal information we may collect through the Site and our business operations:

We do not intentionally collect sensitive personal information through the Site, such as precise geolocation, government identifiers, financial account credentials, health information, or information about race, ethnicity, religion, sex life, sexual orientation, or union membership. Please do not submit sensitive personal information through the Site.

Cookies and Similar Technologies

The Site uses cookies and similar technologies to operate, understand usage patterns, and improve visitor experience, including strictly necessary cookies required for the Site to function and analytics cookies to help us understand how visitors interact with the Site. You can control cookies through your browser settings; disabling cookies may affect Site functionality. The Site does not currently respond to browser “Do Not Track” signals.

How We Use Information

We use the information we collect to respond to inquiries, requests for information, and demonstration requests; provide, maintain, and improve the Site and our services; communicate with prospective and current customers about our services; understand and analyze how visitors use the Site; comply with legal obligations and enforce our agreements; and protect the rights, property, and safety of Previant, our customers, and others.

We do not sell personal information, and we do not use personal information for cross-context behavioral advertising.

How We Share Information

Service providers. We use service providers to support our business operations, such as website hosting, email delivery, analytics, and customer relationship management. We contract with service providers subject to terms that restrict their use of personal information to providing services to Previant or as otherwise permitted by applicable law.

Legal and compliance. We may disclose information when required by law, in response to legal process, to protect legal rights, or in connection with an investigation of suspected illegal activity.

Business transactions. If Previant is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to notice as required by applicable law.

With consent. We may share information for other purposes with your consent.

PHI is handled separately. Previant does not use the Site as an approved channel for receiving, transmitting, or exchanging PHI. PHI processed for healthcare provider customers is handled through approved channels governed by applicable Business Associate Agreements and our internal HIPAA policies. If information that appears to be PHI is received through the Site or a general email channel, we will handle and route it in accordance with applicable law, our internal HIPAA policies, and any applicable Business Associate Agreement.

De-Identified and Aggregated Information

We may use and disclose de-identified or aggregated information that does not reasonably identify an individual. If such information is derived from PHI, we create, use, and disclose it only as permitted by HIPAA, applicable Business Associate Agreements, and other applicable law.

Data Retention

We retain personal information for as long as reasonably necessary to maintain our business relationship with you, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. When we no longer have a business or legal need for personal information, we take reasonable steps to delete or de-identify it.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect the information we collect against unauthorized access, destruction, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Access, correction, deletion. You may request access to, correction of, or deletion of personal information we hold about you.

Opt out of marketing communications. You may opt out of Previant marketing emails by following the unsubscribe instructions in those emails or by contacting us directly.

State-specific rights. Depending on your jurisdiction of residence, applicable law may provide you with additional rights regarding your personal information, including the right to access, correct, or delete your data, or to opt out of certain data uses. Previant does not sell personal information and does not share personal information for cross-context behavioral advertising.

To exercise any of these rights, contact us at privacy@previanthealth.com. We will respond within the time period required by applicable law. Where required by applicable law, you may designate an authorized agent to submit a privacy request on your behalf, and we may take steps to verify the agent’s authority and your identity. If we deny a request and applicable law gives you a right to appeal, you may appeal by replying to our response or emailing privacy@previanthealth.com with “Privacy Appeal” in the subject line.

Note regarding PHI. Rights with respect to PHI (including HIPAA rights of access, amendment, accounting of disclosures, and restriction requests) are directed to the healthcare provider that furnished the PHI, not to Previant, as described in the “Previant’s Role Under HIPAA” section above.

Children’s Privacy

The Site is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children under 16 through the Site. If we learn we have collected such information, we will delete it.

International Visitors

If you access the Site from outside the United States, you understand that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. The Site and Previant’s services are directed to business users in the United States and are not intended for individuals located in the European Economic Area, United Kingdom, or other jurisdictions where additional privacy disclosures may be required.

Links to Other Sites

The Site may contain links to third-party websites. Previant is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be effective when posted unless a later effective date is stated. Where required by law or appropriate under the circumstances, we will provide additional notice of material changes. We will update the “Last Updated” date above when we make changes.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or Previant’s privacy practices, please contact: