Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email address, phone number, and company name when you fill out forms, request demos, or contact us. We also collect usage data through cookies and analytics tools to improve our services. If you are a Beacon customer, we may collect other data as required to deliver the contracted services.

2. How We Use Your Information

We use your information to provide and improve our services, communicate with you about our products, process transactions, and comply with legal obligations. We may also use your information to send you marketing communications, which you can opt out of at any time.

3. Data Security

We implement industry-standard security measures to protect your personal information. ConnectSx follows and actively monitors our alignment with the HIPAA Privacy Rule. All Beacon Platform data is encrypted at rest and in transit.

4. Data Sharing

We do not sell your personal information. We may share your information with trusted service providers who assist us in operating our platform, conducting our business, or servicing you, as long as those parties agree to keep this information confidential.

5. Data Retention and Deletion

We retain personal information only for as long as necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal, contractual, accounting, and regulatory obligations (including HIPAA where applicable), resolve disputes, and enforce our agreements.

Retention periods

• Account and profile data (such as name, email address, phone number, and company information): retained for the lifetime of your account or your organization's active contract with ConnectSx. After account closure or contract termination, this data is deleted or anonymized within 90 days, except where longer retention is required by law or an executed Business Associate Agreement.
• Protected health information (PHI) and customer operational data processed through the ConnectSx platform and mobile applications on behalf of our customers: retained and disposed of in accordance with HIPAA requirements, where applicable, and the terms of any executed Business Associate Agreement with the customer (covered entity or business associate). ConnectSx does not independently determine clinical retention schedules for customer-controlled PHI.
• Marketing and sales contact data: retained until you opt out of marketing communications or request deletion. After opt-out or deletion request, we delete or anonymize this data within 30 days, except for limited records needed to honor the opt-out.
• Website analytics and cookie data: retained for up to 26 months, consistent with the analytics tools described in the Cookies and Analytics section.
• Mobile application data: device identifiers, push notification tokens, authentication preferences, and locally cached operational data used to deliver app features are retained while your account is active. Local device data can be cleared by uninstalling the app or clearing app storage. Server-side tokens and related account records are removed within 90 days after account closure, or sooner upon a verified deletion request.
• Location, camera, microphone, and biometric data: used only to provide requested in-app features (for example, location for address lookup, camera for barcode scanning, microphone for speech input, and biometric unlock on the device). We do not use biometric data to identify you across devices. We do not sell biometric data. Biometric credentials remain on your device and are not stored on ConnectSx servers. Camera, microphone, and location data are processed for the feature in use and are not retained by ConnectSx beyond what is needed to complete that feature or what a customer stores as part of their business records. Speech may be processed by the device OS or third-party transcription provider, as dictated by the user's device.
• Backups: residual copies in encrypted backups are removed or overwritten within 90 days after deletion from live systems.

Deletion requests

You may request deletion of your personal information at any time by contacting us at privacy@connectsx.com. We will confirm and complete verified deletion requests within 30 days, unless we are legally required to retain certain records or the data is controlled by a customer under an executed Business Associate Agreement (in which case we will direct the request to the appropriate customer or covered entity where required).

If you use ConnectSx through an organization (for example, your employer or a healthcare provider), that organization may control your account and related records. In those cases, please also contact your organization to request deletion of account access or customer-controlled data.

6. Your Rights

You have the right to access, correct, or delete your personal information. You may also opt out of marketing communications at any time. To exercise these rights, contact us at privacy@connectsx.com.

7. Cookies and Analytics

We use cookies and similar technologies in two categories:

• Essential: Required for core site functionality such as page navigation and security. These cannot be disabled.
• Analytics & Marketing: Help us understand how visitors interact with our site and measure the effectiveness of our campaigns. This category includes Google Analytics (GA4), Google Tag Manager, LinkedIn Insight Tag, and Microsoft Clarity.

When you first visit our site, a consent banner will ask you to accept or decline analytics and marketing cookies. You can change your preference at any time by clearing your browser's local storage for this site, which will cause the consent banner to reappear on your next visit.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@connectsx.com or call (708) 406-9865.