Privacy Policy

1. Introduction

MedAuxilium LLC ("MedAuxilium," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website medauxilium.net and use our products and services, including ClaraCare OS, Facility Hackers, and GovStreamApp.com (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including but not limited to:

• Name, email address, phone number, and mailing address
• Company or organization name and job title
• Account credentials (username and password)
• Payment and billing information
• Communications you send to us (e.g., support requests, inquiries)

2.2 Protected Health Information (PHI)

In connection with ClaraCare OS, we may process Protected Health Information as defined under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). The collection, use, and disclosure of PHI is governed by our HIPAA Notice and applicable Business Associate Agreements (BAAs). PHI is handled in strict compliance with HIPAA regulations and is never used for marketing purposes.

2.3 Automatically Collected Information

When you access our Services, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• Usage data (pages visited, time spent, click patterns)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral URLs and search terms

2.4 Information from Third Parties

We may receive information about you from third-party sources, including business partners, marketing partners, social media platforms, data brokers, and publicly available sources. We may combine this information with other information we collect about you.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services
• To process transactions and send related information
• To communicate with you about products, services, and events
• To respond to your comments, questions, and support requests
• To monitor and analyze usage trends and preferences
• To detect, investigate, and prevent fraudulent or unauthorized activity
• To comply with legal obligations and enforce our agreements
• To personalize and improve your experience with our Services
• To develop new products, services, and features

4. Disclosure of Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party vendors, consultants, and service providers who perform services on our behalf, such as hosting, data analytics, payment processing, customer service, and marketing.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).

4.3 Business Transfers

If MedAuxilium is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. HIPAA Compliance

MedAuxilium LLC, through its ClaraCare OS platform, may act as a Business Associate under HIPAA. We maintain administrative, physical, and technical safeguards to protect Protected Health Information (PHI) in accordance with the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.

Our HIPAA compliance measures include:

• Encryption of PHI in transit and at rest (AES-256)
• Access controls and role-based permissions
• Regular security risk assessments and audits
• Employee training on HIPAA requirements
• Incident response and breach notification procedures
• Business Associate Agreements with all subcontractors handling PHI
• Minimum necessary standard for PHI access and disclosure

For more details, please refer to our HIPAA Notice.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: You may opt out of the sale or sharing of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: You may limit the use and disclosure of your sensitive personal information.

To exercise these rights, please contact us at [email protected]. We will respond to verifiable consumer requests within 45 days.

Do Not Sell or Share My Personal Information: MedAuxilium does not sell personal information. We do not share personal information for cross-context behavioral advertising purposes.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for system access
• Regular penetration testing and vulnerability assessments
• SOC 2 Type II aligned security practices
• Continuous monitoring and intrusion detection

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations. When personal information is no longer needed, we will securely delete or anonymize it.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of every site you visit.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Continued use of our Services after any modifications constitutes your acknowledgment of the modified Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: