Privacy Policy | Health AI Central

This Privacy Policy for HealthAICentral.com ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services (the "Services"), including when you visit our website at https://healthaicentral.com or any website of ours that links to this Privacy Policy, or engage with us in other related ways, including any marketing or events.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@healthaicentral.com.

1. What Information Do We Collect?

1.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:

Names, email addresses, usernames, and passwords
Contact preferences and authentication data
Subscribers: Subscription tier preferences, reading history, and saved articles.

Sensitive Information. We do not process sensitive personal information (such as racial or ethnic origins, sexual orientation, or religious beliefs).

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. We do not store full card numbers on our servers.

1.2 Information Collected Automatically

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information. The information we collect automatically includes:

Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, including your IP address, browser type and settings, device information, and information about your activity.
Device Data. Information about your computer, phone, tablet, or other device, including your IP address, device and application identification numbers, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data. We collect approximate location information derived from your IP address (such as city and country). We do not collect precise GPS location data.

1.3 Advertising Measurement

When we run an approved paid campaign on LinkedIn, we may use the LinkedIn Insight Tag to measure aggregate visits to our website and completed campaign actions, such as a newsletter signup or subscription step. The tag may receive technical information from your browser, such as IP address, device and browser information, page URL, referrer, and the occurrence of a configured conversion event. We do not intentionally include email addresses, account credentials, health information, payment information, newsletter content, or other sensitive information in the browser event we send to LinkedIn.

LinkedIn processes information collected through its services under LinkedIn's privacy policy. We use this measurement to evaluate paid-campaign performance and improve our marketing. We do not use it to make editorial decisions, and the tag is not used for the Services' core editorial analytics.

1.4 Business Information From Public Sources

Our company directory describes health AI companies. To build it, we collect business information that companies and their leaders make public, from company websites, public professional profiles, public research, clinical-trial and FDA records, and business-data providers. This can include the names, job titles, photos and public profile links of company leaders, and business contact details a company publishes, such as a general email address on its website.

We use business contact details to send a small number of emails about that company's page on Health AI Central, such as an invitation to claim it. Each of these emails says who we are and includes our postal address and an unsubscribe link. We stop sending them when you unsubscribe, reply that you are not interested, or claim the page.

If you are named on a company page and want your information corrected or removed, email support@healthaicentral.com.

Apart from the public business information described in this section, we do not collect personal information about you from third parties.

1.5 Email Opens

Newsletters and emails about company pages may contain a small image that tells us whether the email was opened (see section 6 of our Cookie Policy). Listmonk, which we host ourselves, records this, and we do not share it with advertising networks. Account emails, such as password resets, do not contain it.

1.6 Chief Health AI Officer Registry

We list people in senior health AI leadership roles, using public sources such as organization announcements and public professional profiles, which we cite. A listing shows the person’s name, title and organization and links to its sources.

Anyone may nominate a leader through our nomination form. We use the nominator’s name and email only to confirm the nomination and to tell them our decision.

When we list someone, we email them once at a verified work address to tell them what we show and how to correct it or ask us to remove it. We contact listed people about anything else only with their permission.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts.
To deliver and facilitate delivery of services to you, including news articles and specialized reports.
To respond to your inquiries and solve any potential issues you might have with the requested service.
To send administrative information to you, including details about our products and services, changes to our terms and policies, and other similar information.
To fulfill and manage your orders, payments, subscriptions, and exchanges made through the Services.
To send you marketing and promotional communications, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
To tell companies listed in our directory about their company page, using business contact details they publish (see section 1.4).
To protect our Services, including fraud monitoring and prevention.
To evaluate and improve our Services, products, marketing, and your experience.
To comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

3. When and With Whom Do We Share Your Personal Information?

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers (Sub-processors): Third-party vendors who help us operate the Service. This includes Stripe (payment processing); Resend (transactional email); Listmonk (newsletters and emails about company pages); Plausible (first-party analytics); LinkedIn (paid-campaign measurement when an approved campaign is active); FreeScout (customer support); and Hostinger (infrastructure hosting). We maintain Data Processing Agreements (DPAs) with applicable sub-processors.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal Requirements: When required by law, regulation, or legal process, or to protect the rights, property, or safety of our users or others.

4. What Is Our Stance on Third-Party Websites?

The Services may link to third-party websites, online services, or applications and/or contain advertisements from third parties that are not affiliated with us. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link toward a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third-party websites. Any data collected by third parties is not covered by this Privacy Policy.

5. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your personal information for longer than 7 years (84 months) past the termination of the user's account.

Account & Profile Data: Retained as long as your account is active.
Billing Records: Retained for 7 years (84 months) to comply with tax and financial regulations.
UTM Attribution: Retained for the duration of the account.
Chief Health AI Officer registry: A listing is kept while the role is current; after the role ends we keep it as a dated historical record unless the person asks us to remove it. Nominations we do not accept are deleted within 90 days of our decision, except the nominee’s name and work email, which we keep so that we do not review the same nomination again. A nominator’s name and email are deleted within 90 days of our decision. Survey or contact permissions are kept until withdrawn; after a withdrawal we delete the email address within 30 days.
Business Contact Details From Public Sources: Kept while the company is listed in our directory. If you unsubscribe, we keep only your email address, on a do-not-email list, so we can honor your request.

6. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process, including encryption in transit and at rest, access controls, and regular security assessments. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. What Are Your Privacy Rights?

Depending on your location, the applicable privacy law may mean you have certain rights regarding your personal information. These may include the right to access, correct, delete, or export your data, and to opt out of certain processing activities.

If you are listed in our Chief Health AI Officer registry, you can ask us to correct or remove your entry at any time by writing to privacy@healthaicentral.com.

Opting Out of Marketing Communications

You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send or changing your notification settings on your account management page. For emails about your company's page, click the unsubscribe link in the email or reply “unsubscribe”.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.

8. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

Global Privacy Control (GPC): We recognize and honor Global Privacy Control (GPC) signals. If you use a browser or extension that supports GPC, we will treat this as a valid request to opt out of the sale or sharing of your personal information for targeted advertising purposes under applicable state privacy laws.

When the LinkedIn Insight Tag is enabled for an approved paid campaign, we will not load it in a browser that presents a Global Privacy Control signal. This does not prevent us from processing information needed to operate the Services, provide a requested newsletter or subscription, or meet legal obligations.

9. Do We Make Updates to This Policy?

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

10. How Can You Contact Us About This Policy?

If you have questions or comments about this notice, you may email us at support@healthaicentral.com or write to us at:

Health AI Central
816 North Delsea Drive #306
Glassboro, NJ 08028-1438