Privacy Policy

cliexa, Inc. ("cliexa", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share Personally Identifiable Information (PII), including Protected Health Information (PHI), in accordance with applicable federal and state privacy laws, including HIPAA and 42 CFR Part 2.

1. Information We Collect

We may collect PII from users, including but not limited to:

• Full name, contact information (email, phone)
• Health-related information submitted through our applications
• Usage metadata, device identifiers, or login credentials for platform access

This information may be collected directly from users, from healthcare providers, or through integration with authorized third-party systems (e.g., EMR or CRM platforms).

2. How We Use Your Information

cliexa uses PII and PHI only as necessary to:

• Deliver our licensed digital health platform services
• Support healthcare operations such as documentation, quality audits, and analytics
• Provide technical support, system improvements, and compliance tracking
• Fulfill legal obligations, including HIPAA and contractual requirements under Business Associate Agreements

We do not use PII for marketing or commercial resale purposes without user consent.

3. Data Storage and Security

All user data, including PII and PHI, is securely stored using HIPAA-compliant infrastructure (e.g., Microsoft Azure), with safeguards including:

• End-to-end encryption
• Access control based on role and minimum necessary use
• Audit logs and breach detection systems

De-identified and aggregated data may be used internally for system performance or research, in compliance with HIPAA standards.

4. Information Sharing and Disclosure

cliexa does not sell or rent personal data. We may share user data under the following limited conditions:

• With authorized healthcare providers or payers for treatment or operations
• With subcontractors or agents who are bound by HIPAA-compliant obligations
• As required by law, regulation, or legal process (e.g., court orders or audits)
• For data aggregation services or system administration, as permitted under our Business Associate Agreements

We ensure that any third party receiving PII complies with all relevant confidentiality and security obligations.

5. User Rights

Users have the right to:

• Request access to their PII or PHI
• Request amendments or corrections
• Receive an accounting of disclosures
• Revoke consent for certain uses, subject to legal and operational constraints

To exercise these rights, contact us at info@cliexa.com.

6. Retention and Destruction

PII is retained only for as long as needed to fulfill the intended service or legal obligations. When no longer required, data is securely deleted or de-identified following HIPAA-compliant procedures.

7. Contact Information

If you have questions about this Privacy Policy or your personal data, please contact: