Skip to content
Vayra Platform
Menu

Privacy policy

Last updated

Scope of this policy

This privacy policy describes how Vayra Health & Wellness, Inc. ("Vayra," "we," "us," or "our") collects, uses, shares, and protects personal information through vayraplatform.com (the "Site").

The Site is a business website for organizations evaluating Vayra Platform and Vayra White Label. This policy covers business contact information collected through the Site only.

This policy does not cover:

  • information processed through the Vayra Platform, Vayra White Label, or Vayra Intelligence on behalf of our partners. That processing is governed by our agreements with those partners, including our data processing addendum and, where applicable, a business associate agreement;
  • clinical services provided by Vayra Medical, P.C., a separate professional corporation, which has its own notices; or
  • third-party websites linked from the Site.

This Site is not for patients

The Site is not intended for patients and does not collect protected health information. Our forms ask you not to include patient information. If protected health information or other patient information is submitted through the Site anyway, we do not use it for any purpose, and we delete it once we identify it.

Information we collect

Information you provide

When you request a demo or contact us through the Site, we collect business contact and company information, which may include:

  • your name;
  • your work email address;
  • your company name;
  • your role or job title;
  • your company type;
  • the service lines you are interested in;
  • an approximate monthly patient volume band for your organization (a range, not patient records);
  • the states in which your organization operates;
  • your current technology stack; and
  • any message you choose to include in a free-text field.

Information collected automatically

When you submit a form, we also record:

  • UTM parameters and the referring web page, which tell us how you reached the Site; and
  • a hashed form of your IP address, used for abuse and spam prevention. We store the hashed value rather than the raw IP address in the lead record.

We also use server-side telemetry (Microsoft Azure Application Insights) to operate, secure, and troubleshoot the Site. This telemetry records technical information such as request details, performance data, and errors.

Sources

We collect information directly from you when you submit a form or email us, and automatically from your browser or device when you use the Site.

How we use information

We use the information described above to:

  • respond to your demo request or inquiry and communicate with you about the Platform Services;
  • evaluate whether and how the Platform Services may fit your organization;
  • understand which channels bring visitors to the Site;
  • protect the Site against spam, fraud, and abuse;
  • operate, maintain, secure, and improve the Site;
  • comply with legal obligations and enforce our terms of use; and
  • establish, exercise, or defend legal claims.

Where a law requires a legal basis for processing, we rely on our legitimate interests in responding to business inquiries, marketing our services to businesses, and securing the Site; on steps taken at your request before entering into a contract; on compliance with legal obligations; and on consent where the law requires it.

Retention

We keep lead records for up to 24 months after our last contact with you. After that, a scheduled job deletes them. We may keep information longer only where required by law or needed to resolve a dispute.

We treat the free-text message field as sensitive and restrict access to it to personnel who need it to respond to your inquiry.

Server-side telemetry is kept for up to 90 days.

If you ask us to delete your information, we will do so as described below, subject to any legal obligation to keep it.

How we share information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We share personal information only as follows:

  • Service providers. We use service providers that process information on our behalf and under our instructions, such as Microsoft Corporation for cloud hosting, telemetry, identity, and email. They may use the information only to provide services to us.
  • Affiliates. We may share information with entities under common control with Vayra to respond to your inquiry and provide the Platform Services, subject to this policy.
  • Legal and safety. We may disclose information where we believe it is required by law, subpoena, or legal process, or to protect the rights, property, or safety of Vayra, our partners, or others.
  • Business transfers. If Vayra is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
  • With your direction. We may share information with others when you ask us to.

Cookies and similar technologies

We do not use advertising or marketing pixels or third-party analytics cookies on the Site. The Site uses only cookies or similar technologies that are strictly necessary for it to function and stay secure, if any. Because we do not use cookies for analytics or advertising, the Site does not display a cookie preference banner. If this changes, we will update this policy before doing so.

The Site does not respond to browser "Do Not Track" signals in a specific way because we do not engage in the cross-site tracking those signals address. We treat a Global Privacy Control signal as a request to opt out of sale or sharing where the law requires it; because we do not sell or share personal information, no further change in processing results.

Security

The Site is hosted on Microsoft Azure in the United States (South Central US region). We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and restricted access to sensitive fields. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. More information is on our security page.

Your rights and choices

Depending on where you live, you may have rights under applicable state privacy laws or other laws regarding your personal information. Subject to legal limits and exceptions, these may include the right to:

  • access the personal information we hold about you and receive information about how we process it;
  • delete personal information we hold about you;
  • correct inaccurate personal information;
  • obtain a copy of your personal information in a portable format; and
  • opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling, where applicable. We do not engage in these activities.

Some state privacy laws exempt or treat differently information collected in a business-to-business context. We honor deletion requests regardless of whether a specific law applies.

You can also opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us.

We will not discriminate against you for exercising any of these rights.

How to exercise your rights

To make a request, email privacy@vayraplatform.com. Please tell us which right you want to exercise and the email address you used with us. We will verify your request by confirming it through that email address or by other reasonable means. You may use an authorized agent where the law permits; we may ask for proof of the agent's authority and verify your identity directly.

We will respond within 45 days of receiving a verifiable request. Where the law allows, we may extend that once by a further 45 days, and we will tell you why. If we deny your request, we will explain why, and where the law provides a right to appeal, you may appeal by replying to our response or emailing privacy@vayraplatform.com with the subject line "Privacy appeal."

Children

The Site is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has submitted personal information through the Site, contact us and we will delete it.

International visitors

The Site is operated from the United States and is intended for businesses in the United States. Information collected through the Site is stored and processed in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "updated" date at the top of this page. If we make a material change, we will provide additional notice as appropriate, such as a notice on the Site.

Contact

For questions about this policy or our privacy practices, contact:

Vayra Health & Wellness, Inc. Email: privacy@vayraplatform.com Postal address for written notices: available on request from privacy@vayraplatform.com.

You can also reach us through our contact page.