Clarapact, LLC ("Clarapact," "we," "us") provides healthcare pricing data to businesses. This Privacy Policy explains what personal information we collect through our website at clarapact.com (the "Site") and our subscription product at app.clarapact.com (the "Service"), how we use and share it, and the choices you have. It does not cover information our customers collect independently.
1. Information we collect
1.1 Information you give us. When you request a demo, contact us or become a customer, we collect your name, work email, phone number (if provided), organization, role, the states you operate in, the payers and billing codes you are interested in, and anything you write in a message.
1.2 Account information. For customers, we collect organization, plan and Seat details and the access credentials we issue. When the Service offers individual user accounts, we will also collect Authorized Users' names, work emails, login credentials (which may be handled by an authentication provider) and account settings, including for users a Team Admin invites.
1.3 Usage and device information. When you use the Service, we may automatically record information such as sign-ins, IP address, browser and device type, pages viewed, searches, filters, copies, exports and timestamps. We use this information to operate and secure the Service, to enforce our Terms (including preventing bulk extraction and, where the Service supports it, marking copied and exported content with identifying details), and to improve the product. When you visit the Site, our hosting provider records standard server logs, such as IP address, browser type and pages requested.
1.4 Payment information. Invoices and payments are processed by our payment processor. We receive billing contact details and payment status; we do not receive or store full card or bank account numbers.
1.5 Information we do not want. Please do not send us patient information. The Site and Service are not designed to receive protected health information under HIPAA or other patient-identifying information, and our forms say so. If we receive it, we will delete it.
2. Information in our data product
The Service contains healthcare pricing data compiled from information reported by health plans and from public directories. It includes the names and identifiers of health plans, employers that sponsor plans, healthcare organizations, and individual healthcare practitioners. This information relates to practitioners in their professional capacity. The Service does not contain information about patients.
If you are a practitioner and believe information about you in the Service is inaccurate, write to privacy@clarapact.com.
3. Cookies and similar technologies
The Site does not use advertising or cross-site tracking cookies. The Service uses strictly necessary cookies to keep you signed in and secure your session. If we use analytics, we use a privacy-focused tool that does not use cookies to track you across sites or build advertising profiles. Because we do not track you across websites, we do not respond differently to browser "Do Not Track" signals; we honor Global Privacy Control signals as a request to opt out of any sale or sharing, although we do not sell or share personal information.
4. How we use information
- to respond to demo and contact requests, and to send related follow-up;
- to provide, maintain, secure and support the Service, including access control, abuse prevention and, where supported, watermarking;
- to bill and collect payment, and to keep business, tax and accounting records;
- to understand how the Site and Service are used and to improve them;
- to send service announcements and, if you have not opted out, occasional product news (every marketing email has an unsubscribe link);
- to comply with law, enforce our Terms, and protect the rights and safety of Clarapact, our customers and others.
5. How we share information
We do not sell personal information we collect from visitors and customers, and we do not share it for cross-context behavioral advertising. We share it only:
- with service providers that process it for us under contract, such as website hosting, email and productivity, cloud hosting and databases, authentication, and payments;
- with your organization's Team Admin or account administrator, who can see your organization's Authorized Users and, where the Service supports it, their activity in that account;
- to comply with law, legal process or a valid government request, or to protect our rights, customers or others;
- in connection with a merger, financing, acquisition, reorganization or sale of all or part of our business, subject to this Policy;
- with your consent or at your direction.
6. Data retention
We keep personal information as long as needed for the purposes above. Demo-request information is kept for up to 24 months after our last contact unless you become a customer. Account and usage information is kept for the life of the subscription and up to 3 years after, and longer where needed for legal, tax, security or dispute purposes. We then delete or de-identify it in accordance with our internal data retention and destruction procedures.
7. Security
We use administrative, technical and physical safeguards appropriate to the information we hold, including encryption in transit, access controls and multi-factor authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you as required by law.
8. Your choices and rights
8.1 Marketing email. You may unsubscribe from marketing email at any time using the link in any marketing email. We will still send messages about your account and the Service.
8.2 Your requests. You may ask us to access, correct, delete or provide a copy of the personal information we hold about you by writing to privacy@clarapact.com. Depending on where you live, state privacy laws may give you additional rights, and we will honor requests those laws apply to. We will not discriminate against you for making a request.
8.3 How we handle requests. We will confirm receipt of your request and respond within 45 days. If we need more time, we may extend that period by up to 45 more days and will tell you why. We will verify your identity using information we already have on file. Where the law allows, you may use an authorized agent; we may ask for proof of the agent's authority and may confirm your identity directly with you.
8.4 Appeals. If we deny your request, you may appeal by replying to our decision within 30 days. We will respond to your appeal in writing within 45 days.
8.5 Employer accounts. If you use the Service through your employer's account, some requests may need to go through your employer's Team Admin or account administrator.
8.6 Practitioner information. Requests about information on healthcare practitioners in our data product are handled as described in Section 2.
9. Children
The Site and Service are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
10. Location of processing
We are based in the United States and process information in the United States. The Site and Service are intended for U.S. users.
11. Changes to this policy
We may update this Policy. We will post the new version with a new "Last updated" date and, for material changes, notify customers by email or through the Service before they take effect.
12. Contact us
Clarapact, LLCprivacy@clarapact.com