This policy applies only to personal information ReMyll collects and controls. It does not apply to information customers enter into the AITPRM Health service about their vendors. That information is processed solely on the customer’s instructions under the customer agreement.
ReMyll does not connect to clinical, billing, or electronic health record systems and does not collect or process protected health information (PHI).
1. Scope
This Privacy Policy covers:
- Personal information collected through aitprmhealth.com
- Personal information collected through the AITPRM Health console and vendor portal
- Personal information collected when you communicate with us or request a demonstration
This policy does not cover:
- Vendor-related information customers enter into the AITPRM Health service
- Customer data processed by ReMyll as a service provider/processor under the customer agreement
2. Information we collect
We collect the following categories of personal information:
Contact information you provide
- Name
- Work email
- Organization
- Role
- Content of your message or demo request
Account information for service users
- Name
- Work email
- Role
- Authentication records (for login and security)
Usage information
Collected through server logs and cookies described in our Cookie Policy:
- Pages visited
- Actions taken in the service
- Device and browser type
- IP address
- Approximate location
We do not collect sensitive personal information unless required by law or provided voluntarily.
3. How we use personal information
We use personal information for the following purposes:
Service and support
- To provide, operate, and maintain the AITPRM Health service
- To secure the service and prevent misuse
- To support users and respond to inquiries
Communication
- To respond to demo requests and schedule meetings
- To send service notices
- To send information about AITPRM Health with your consent (you may unsubscribe at any time)
Improvement
- To analyze usage and improve website and service performance
Legal and contractual obligations
- To meet legal requirements
- To enforce our agreements
- To protect the rights, property, and safety of ReMyll, our users, and others
We do not use personal information for automated decision-making that produces legal or similarly significant effects.
4. Sharing personal information
We share personal information only as necessary and under written agreements that restrict how service providers may use it. We may share personal information with:
- Service providers that host, secure, or support the website and service
- Professional advisers (legal, accounting, compliance)
- Authorities, when required by law or to protect rights and safety
We do not:
- Sell personal information
- Share personal information for cross-context behavioral advertising
- Allow service providers to use personal information for their own purposes
5. Retention
We retain personal information only as long as necessary for the purposes described in this policy, then delete or de-identify it. Retention periods for each category are set out in the table in section 6a.
Customer records stored in the AITPRM Health service are retained according to the customer agreement and are exported or deleted upon termination at the customer’s instruction.
6. Your privacy rights
Depending on your location, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information
- Receive a copy (portability)
- Opt out of certain types of processing
You can exercise these rights through Your Privacy Choices. We do not discriminate against anyone who exercises their rights.
Because we do not sell personal information or use it for targeted advertising, opt-out rights related to those activities do not apply.
6a. Notice to California residents
This section supplements the rest of this Privacy Policy and applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). It serves as our notice at collection.
Categories collected in the preceding 12 months. The table lists each statutory category, the examples we actually collect, the source, the business purpose and the retention period.
| CCPA category | What we collect | Source | Purpose | Retention |
|---|---|---|---|---|
| Identifiers | Name, work email, IP address | You; your browser | Respond to requests; secure the service | Contact and demo requests: 24 months after last contact. Server logs: 90 days |
| Professional or employment information | Organization, role, organization type | You | Route your request; tailor the demonstration | 24 months after last contact |
| Internet or network activity | Pages visited, actions taken in the console, device and browser type | Your browser; server logs | Operate, secure and improve the website and service | Server logs: 90 days. Console activity: term of the customer agreement plus 90 days |
| Geolocation (approximate, from IP) | City-level location derived from IP address | Your browser | Security and regional service delivery only | 90 days with server logs |
| Account credentials | Authentication records for console and portal users | You; your organization | Sign-in and security | Term of the customer agreement plus 90 days |
| Customer-entered content | Content of your message or demo request | You | Respond to you | 24 months after last contact |
Sensitive personal information. We do not collect sensitive personal information as defined by the CCPA. We do not knowingly collect information from anyone under 16.
Sale and sharing. We have not sold personal information, and have not shared it for cross-context behavioral advertising, in the preceding 12 months, and we do not do so now. Because of this, a "Do Not Sell or Share My Personal Information" link is not required; our Your Privacy Choices page describes the rights that do apply. We honor Global Privacy Control signals.
Disclosure for a business purpose. In the preceding 12 months we disclosed identifiers, professional information and internet activity to service providers for hosting, security, email delivery and scheduling under written contracts that restrict their use of the information.
Your California rights. You may request to know the categories and specific pieces of personal information we hold about you, to correct it, to delete it, and to limit the use of sensitive personal information (none is collected). We do not discriminate against you for exercising these rights.
How to submit a request (two methods). (1) Through the contact form, selecting "Other" and naming the right you are exercising; (2) by mail to ReMyll, Attn: Privacy, 625 Kenmoor Ave SE, Suite 350, Grand Rapids, MI 49546. We verify requests using the email address associated with the information and respond within 45 days, extendable once by a further 45 days with notice. An authorized agent may submit on your behalf with written permission.
Metrics. Because we process personal information of fewer than 10 million consumers, annual request metrics are not published.
7. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we collect, including:
- Encryption in transit and at rest
- Role-based access controls
- Logging and monitoring
- Secure development and testing practices
While no method of transmission or storage can be guaranteed to be completely secure, we review and update these safeguards regularly to protect personal information.
8. Changes to this policy and contact information
If we revise this Privacy Policy, we will post the updated version with a new effective date. If the change is material, we will notify service users directly.
Contact us
Requests and questions may be submitted through our contact form or by mail:
ReMyll
625 Kenmoor Ave SE, Suite 350
Grand Rapids, MI 49546
United States