Legal
Privacy Policy
How Orisan Clinical Systems collects, uses, and protects your information.
Effective date: April 8, 2026
Introduction
This Privacy Policy describes how Orisan Clinical Systems ("we," "us," or "our") collects, uses, and shares information when you visit orisanconnect.com or use the Orisan Connect platform.
Important Notice Regarding Protected Health Information
Protected Health Information (PHI) processed through the Orisan Connect platform is governed by our Business Associate Agreements (BAAs) with customers, not this Privacy Policy. This policy covers the personal information we collect from website visitors, prospective customers, and platform account holders in the course of providing our service.
Information We Collect
Information you provide through forms
When you request a demo or contact us, we collect the information you submit:
- First name and last name
- Email address
- Phone number
- Company name
- Current EHR system
- Message or description of your needs
Account information
When you create an Orisan Connect account, we collect:
- Email address
- Password (hashed with Argon2 — we never store plaintext passwords)
- Organization name
Usage data
We collect information about how you interact with the platform, including page views, feature usage patterns, and error logs. This helps us improve reliability and user experience.
Technical data
We automatically collect technical information when you visit our site, including your IP address, browser type and version, and device information.
How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate the service — authenticate your account, manage your integrations, and deliver the data synchronization platform
- Respond to inquiries — follow up on demo requests, contact form submissions, and support questions
- Improve the platform — analyze usage patterns and error logs to fix issues and build better features
- Send transactional emails — account confirmations, password resets, sync status notifications, and other service-related communications delivered via Resend
- Sales follow-up — sync demo request and contact form submissions to our CRM to coordinate outreach
How We Share Your Information
We share information only with the following categories of service providers:
Amazon Web Services (AWS)
Our infrastructure hosting provider. All platform data is hosted on AWS under a HIPAA Business Associate Agreement. Data is stored in the United States.
Resend
Transactional email delivery for account-related communications such as confirmations, password resets, and sync notifications.
We do not sell your personal data
We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We never have and never will.
We may disclose your information if required to do so by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Data Retention
- Form submissions — retained for legitimate business purposes such as responding to your inquiry and maintaining a record of our communications
- Account data — retained for as long as your account remains active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law
- Audit logs — retained according to your plan tier, ranging from 30 days to 7 years, to meet HIPAA compliance and operational requirements
Cookies
We use session cookies solely to maintain your authenticated session when you are logged into the Orisan Connect platform. These cookies are essential for the service to function and are deleted when you log out or your session expires.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
Your Rights
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request that we delete your personal information, subject to any legal retention requirements
To exercise any of these rights, email us at privacy@orisanconnect.com. We will respond to your request within 30 days.
Children's Privacy
Orisan Connect is a business-to-business platform designed for healthcare organizations. Our service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify registered users by email and update the effective date at the top of this page.
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Have questions about our data practices?
Our team is happy to discuss how we handle and protect your information.
CONTACT US