Privacy Policy

Our Commitment to Privacy

At OFFIN Healthcare, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information when you use the X:Connect platform. By using our services, you trust us with sensitive health data, and we are committed to maintaining that trust.

Information We Collect

We collect only what is needed to license and support the platform:

• Account information — name, email address, professional credentials, role
• Patient data — MRNs, recordings and measurements are processed and stored on the on-premise gateway under your institution’s control — they are never transmitted to or stored in the cloud
• Usage data — control-plane access logs, licensing checks, fleet telemetry
• Device information — connected device vendor, model, and serial number
• Gateway telemetry — only if explicitly opted in; de-identified statistical data only

How We Use Information

• To provide and maintain the X:Connect gateways and the cloud Control Panel
• To license each gateway, enforce plan limits, and apply data-retention policies
• To distribute AI model updates to the fleet
• To improve platform reliability and performance
• To communicate about updates, support, and billing
• To comply with applicable law and regulatory requirements

Data Security

We implement enterprise-grade security at every layer:

Information Sharing

We do not sell your personal information. We may share data:

• With your explicit consent
• With HMIS/EMR systems you configure via HL7 or FHIR
• To comply with legal obligations or valid legal process
• With trusted service providers under confidentiality agreements

Your Rights

• Access your personal information and data we hold
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing

Contact Us

Questions about this Privacy Policy? Contact our Data Protection Officer: