Cyrus Health Privacy Policy

Effective Date: 09/22/2026 Last Updated: 09/22/2026

This Privacy Policy explains how Cyrus Health ("Cyrus Health," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website (cyrushealth.com) and our software platform, which helps healthcare provider teams stay connected and coordinate 24/7 patient care and support (collectively, the "Services").

This Policy applies to visitors of our website and to authorized users of our platform, including healthcare providers and staff at organizations that use Cyrus Health ("Customers"). If you are a patient interacting with a healthcare provider that uses Cyrus Health, please also refer to your provider's own privacy notices — Cyrus Health acts on behalf of our Customers, as described below.

‍

1. Information We Collect

We collect the following categories of information:

Account and Contact Information

Name, email address, job title, and employer/practice affiliation

Login credentials

Phone number, if provided for account or support purposes

Usage and Technical Information

Log data (IP address, browser type, device information, timestamps)

Pages visited and features used within the Services

Cookies and similar tracking technologies (see Section 6)

Communications

Information you provide when contacting us for support, sales inquiries, or feedback

We do not knowingly collect patient health information directly from patients through our website or marketing site. To the extent our platform enables provider teams to communicate about patient care, that patient-related content is controlled by our Customers, not by Cyrus Health directly — see Section 7 below.

‍

2. How We Use Information

We use the information we collect to:

Provide, operate, and maintain the Services

Create and manage user accounts

Enable communication and coordination features among provider teams

Respond to support requests and inquiries

Send administrative communications (service updates, security notices, billing)

Send marketing communications, where permitted, and in accordance with your preferences

Monitor, analyze, and improve the performance, security, and usability of the Services

Detect, investigate, and prevent fraud, abuse, or security incidents

Comply with legal obligations

‍

3. How We Share Information

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

We may share information with:

Service providers who perform functions on our behalf (e.g., cloud hosting, customer support tools, email delivery, analytics), under contractual obligations to protect that information and use it only as instructed

Your employer/Customer organization, since account and usage information is inherently visible to administrators of the provider organization you are affiliated with

Legal and safety purposes, where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Cyrus Health, our users, or others

Business transfers, such as a merger, acquisition, or sale of assets, subject to standard confidentiality protections

‍

4. Data Security

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, or destruction. These include encryption in transit, access controls, and monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

‍

5. Data Retention

We retain account and usage information for as long as your account is active or as needed to provide the Services, and afterward for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods for patient-related content within the platform are governed by our agreements with Customers.

‍

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate core functionality, remember preferences, and understand how visitors use our site. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

‍

7. Health Information and HIPAA

Cyrus Health provides software to healthcare provider organizations. Where our platform is used to facilitate communication or coordination involving patient health information, Cyrus Health may act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA), and our handling of that information is governed by a separate Business Associate Agreement (BAA) with the applicable Customer — not by this Policy. Patients should direct questions about how their health information is used to their healthcare provider.

(This section should be confirmed with legal counsel and updated to accurately reflect whether Cyrus Health is a Business Associate, a Covered Entity, or neither, based on the actual data flows through the platform.)

‍

8. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to:

Access, correct, or delete your personal information

Object to or restrict certain processing

Withdraw consent, where processing is based on consent

Opt out of marketing communications at any time via the unsubscribe link in our emails

To exercise these rights, contact us using the details in Section 11. We may need to verify your identity before fulfilling a request.

(If Cyrus Health has users in California, the EU/UK, or other jurisdictions with specific privacy laws — CCPA/CPRA, GDPR, etc. — this section should be expanded with jurisdiction-specific disclosures.)

‍

9. Children's Privacy

Our Services are intended for use by healthcare professionals and are not directed to children. We do not knowingly collect personal information from individuals under the age of 18 through our website.

‍

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last Updated" date. Material changes will be communicated through the Services or by email where appropriate.

‍

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: brenden@cyrushealth.com