Privacy Policy

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts
• To deliver and facilitate delivery of services to the user
• To respond to user inquiries/offer support to users
• To send administrative information to you
• To enable user-to-user communications
• To request feedback
• To identify usage trends
• To determine the effectiveness of our marketing and promotional campaigns
• To comply with our legal obligations

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• Third-party Service Providers. We may share your information with trusted third-party service providers who perform services on our behalf, such as:

• Cloud infrastructure and hosting services
• Customer support and communication platforms
• Analytics and performance monitoring tools
• Payment processing services
• AI and machine learning technologies for product functionality

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences).

In Short: We use artificial intelligence to help our care advocates provide better, more efficient care by quickly analyzing patient information and generating insights.

How We Use AI: Our service uses artificial intelligence to help care advocates:

• Quickly analyze patient health information to identify patterns and trends
• Generate insights that help care advocates understand patient needs faster
• Improve efficiency by automating routine analysis tasks
• Provide care advocates with relevant information to support better decision-making

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We keep your personal information only for as long as we need it. Our policy is to delete or anonymize your account data within 12 months after you close your account.

• Legal Requirements: The only exception is if we are required by law (for example, for tax or accounting purposes) to keep your information for a longer period.
• Backups: Data may remain in our secure backup archives for a longer period until it is automatically overwritten or deleted as part of our normal backup cycle. During this time, it will be isolated and protected from any further use.

In Short: We are committed to protecting your personal information using industry-standard security technologies and procedures.

We are committed to protecting your personal information. We use a variety of industry-standard security technologies and procedures to help protect your data from unauthorized access, use, or disclosure.

The Measures We Take Include:

• Encryption: We encrypt your personal information both when it is stored on our servers (at rest) and when it is transmitted over the internet (in transit).
• Access Controls: Access to your personal information is strictly limited to authorized personnel who need it to perform their jobs. We implement security measures such as multi-factor authentication (MFA) where appropriate to protect sensitive data.
• Vendor Security: We carefully vet our third-party vendors (like our cloud hosting provider) to ensure they meet strict security and HIPAA compliance standards.
• Regular Monitoring: We continuously monitor our systems for potential vulnerabilities and threats to proactively protect your data.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.

If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@miramace.com.

In Short: You have control over your personal information and how we communicate with you. This section outlines your rights and choices.

In Short: We explain how we handle Do-Not-Track signals and Global Privacy Control features.

• Do-Not-Track: Most web browsers include a Do-Not-Track ("DNT") feature. Because there is no uniform industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
• Global Privacy Control: Some browsers and extensions support the Global Privacy Control ("GPC") signal, which is designed to communicate your privacy preferences. As we do not sell or share your personal information, we honor the GPC signal as a request to opt out of any future sharing or selling of your data and will process it in accordance with applicable law.

In Short: This section provides supplemental privacy information for residents of certain U.S. states.

In Short: We are committed to protecting health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA).

• Safeguards: We implement administrative, technical, and physical safeguards to protect your Protected Health Information (PHI). These include measures like encryption, strict access controls, and regular audit logging.
• Use and Disclosure: We only use and disclose PHI as permitted by law and our agreements.
• Your Rights: You can request to access or correct your PHI by contacting us at support@miramace.com. We will respond within 30 days, consistent with HIPAA requirements.
• Breach Notification: In the event of a data breach involving unsecured PHI, we will notify affected individuals within 60 days of discovery, in compliance with HIPAA and the FTC's Health Breach Notification Rule.

In Short: We use the Blue Button 2.0 API to help you access your Medicare claims data, with strict privacy protections and your full control over the data.

This product uses the Blue Button 2.0 API but is not endorsed or certified by the Centers for Medicare & Medicaid Services or the U.S. Department of Health and Human Services.

• Data Use: With your explicit consent, we retrieve your Medicare claims data to display to you and your care advocate. We never sell this data or use it for advertising. Sharing is limited to your advocate and our HIPAA-compliant service providers.
• Data Deletion: If you disconnect your Medicare account, we stop new data imports and will delete prior claims upon request. We also automatically delete data from accounts that have been inactive for more than 12 months after sending you two reminders.
• Security: We protect your Medicare data with HIPAA-grade safeguards and will notify you within 60 days of any data breach affecting this information.
• Policy Changes & Mergers: We will notify you 30 days in advance of any material changes to this policy, which require prior approval from CMS. In the event of a merger or sale, you will receive 30 days' notice before your data is transferred, during which you may choose to delete your data.

In Short: We may update this Privacy Notice from time to time to reflect changes in our practices or to comply with new laws.

We may update this Privacy Notice from time to time to reflect changes in our practices or to comply with new laws.

• How to Check for Updates: The latest version will always be available on our website, and the "Last updated" date at the top will indicate when it was last revised. We encourage you to review the policy periodically.
• Notification of Major Changes: If we make a material change to how we handle your personal information, we will provide you with prominent notice, for instance, by posting a notice on our website or sending a notification to your email address on file.

If you have questions or comments about this notice, you may email us at support@miramace.com or contact us by post at:

MiraMace Inc.
131 Continental Dr
Suite 305
Newark, DE 19713
United States