Privacy Policy

Introduction

CodePause Inc. ("CodePause," "we," "our," or "us") is committed to protecting the privacy and security of your information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website codepause.com (the "Site") or use our OutsideINsights platform and related services (collectively, the "Services").

This policy applies to information we collect through our Site and Services, as well as through email, text, and other electronic communications. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you were invited to our beta testing program, sign up here.

Information We Collect

1. Information You Provide to Us

• Account Information: Name, email address, phone number, professional credentials, and organization details when you register for an account or request a demo.
• Payment Information: Billing address and payment details processed through our secure third-party payment processors.
• Communications: Information you provide when contacting us, including support requests, feedback, and inquiries.
• Clinical Data: For healthcare providers using OutsideINsights, we collect patient health information only as authorized and necessary to provide our Services, in compliance with HIPAA.

2. Information Collected Automatically

• Usage Data: Information about how you access and use our Services, including device information, IP address, browser type, pages visited, and time spent on pages.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities. You can control cookies through your browser settings.
• Analytics: We use analytics tools to understand user behavior and improve our Services.

3. Information from Third Parties

• Third-Party Observers: Reports submitted by authorized family members, caregivers, or other designated observers through our platform.
• Business Partners: Information from healthcare organizations, clearinghouses, and other partners who integrate with our Services.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information, including confirmations and invoices
• Send administrative information, updates, security alerts, and support messages
• Respond to your inquiries, comments, and requests
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Comply with legal obligations, including HIPAA, FERPA, and other applicable regulations
• Facilitate billing and reimbursement processes with insurance payers
• Conduct research and development to improve mental health outcomes

Information Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information in the following circumstances:

With Your Consent

We share information when you explicitly authorize us to do so, such as when healthcare providers share information with authorized third-party observers.

Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Payment processors and billing clearinghouses
• Analytics and monitoring services
• Customer support platforms

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to:

• Comply with legal obligations
• Protect the rights, property, or safety of CodePause, our users, or the public
• Respond to emergencies or imminent threats to health or safety
• Enforce our Terms of Service or other agreements

Business Transfers

If CodePause is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Monitoring: Continuous security monitoring and intrusion detection
• Auditing: Comprehensive audit logging of all data access and modifications
• Infrastructure: HIPAA-compliant enterprise hosting with redundant backups
• Training: Regular security training for all personnel

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you promptly of any security incidents as required by law.

Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Clinical Data: Retained in accordance with HIPAA requirements (typically 6 years from creation or last use)
• Billing Records: Retained for 7 years to comply with IRS and healthcare billing regulations
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for research purposes

Your Rights and Choices

Depending on your jurisdiction and applicable laws, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information, subject to legal retention requirements
• Portability: Request a copy of your information in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-Out: Opt out of marketing communications at any time

To exercise these rights, contact us at privacy@codepause.com. We will respond to your request within 30 days.

Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without parental consent. For school-based services, we comply with FERPA and Children's Online Privacy Protection Act (COPPA) requirements. If you believe we have collected information from a child without proper consent, please contact us immediately.

International Users

CodePause is based in the United States, and our Services are hosted in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to this transfer and processing. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy.

Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new "Last Updated" date. For material changes, we will provide additional notice (such as email notification or a prominent notice on our Site). Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.