Privacy Policy

1. Introduction

Insight360 Analytics LLC ("Insight360," "we," "us," or "our") respects the privacy and security of the individuals and organizations that use our websites, portal, healthcare analytics platform, and related services.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information in connection with Insight360 services, including the Insight360 portal available at portal.insight360analytics.org.

2. Information We Collect

Depending on how you interact with Insight360, we may collect information such as:

• Name, business email address, organization, role, and other account information.
• Authentication and account-related information used to provide secure access to the Insight360 portal.
• Organization configuration and administrative information.
• Files, datasets, and other information submitted by authorized customers and users.
• Technical information such as browser type, device information, IP address, timestamps, security logs, and system activity.
• Support requests and communications sent to Insight360.

3. Customer Data

Healthcare organizations and other customers may submit data to Insight360 for analytics, reporting, operational, and related authorized purposes.

Customers retain responsibility for and control over the data they submit to the service, subject to their agreements with Insight360 and applicable law.

Insight360 processes customer data to provide, maintain, secure, support, and improve the contracted services and as otherwise permitted by the applicable customer agreement or law.

4. Protected Health Information

Certain Insight360 customers may be healthcare organizations subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and related requirements.

Where Insight360 receives or maintains Protected Health Information ("PHI") on behalf of a customer and Insight360 is acting as a business associate under HIPAA, the handling of that PHI is also governed by the applicable Business Associate Agreement ("BAA") and customer agreement.

This Privacy Policy does not replace a BAA or alter the obligations established by an applicable BAA.

5. How We Use Information

We may use information to:

• Provide and operate Insight360 services.
• Authenticate users and administer organization accounts.
• Process authorized customer data and generate analytics and reporting.
• Maintain the security and integrity of our systems.
• Detect, investigate, and prevent unauthorized activity, fraud, abuse, or security incidents.
• Provide technical and customer support.
• Maintain operational and audit records.
• Comply with contractual and legal obligations.
• Improve the reliability and functionality of our services.

6. Authentication and Third-Party Services

Insight360 may use third-party technology and infrastructure providers to operate portions of the service, including authentication, cloud hosting, database, storage, analytics, reporting, security, and infrastructure services.

When users authenticate through an external identity provider, information necessary to authenticate and provision the user may be exchanged with that provider.

Third-party providers may process information on our behalf subject to contractual requirements and applicable law.

7. How We Disclose Information

Insight360 does not sell customer healthcare data.

We may disclose information:

• To service providers that help us operate and secure the platform.
• At the direction of an authorized customer.
• When required by applicable law, regulation, legal process, or governmental request.
• When reasonably necessary to protect the security, rights, property, or safety of Insight360, our customers, users, or others.
• In connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable legal and contractual requirements.

8. Data Security

Insight360 uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction.

No information system can be guaranteed to be completely secure. Customers and users are also responsible for protecting their credentials, maintaining appropriate access controls, and promptly reporting suspected unauthorized access.

9. Data Retention

We retain information for as long as reasonably necessary to provide the services, fulfill contractual obligations, maintain security and audit records, comply with applicable law, resolve disputes, and enforce agreements.

Customer data retention and deletion may also be governed by the applicable customer agreement or BAA.

10. Account and Access Controls

Access to protected areas of Insight360 is limited to authorized users. Organizations are responsible for ensuring that access granted to their personnel remains appropriate.

Insight360 may maintain administrative, security, authentication, and audit information associated with portal access.

11. Cookies and Similar Technologies

Insight360 may use cookies or similar technologies that are necessary for authentication, security, session management, preferences, and operation of the website and portal.

12. Children's Privacy

Insight360 is a business and healthcare analytics service and is not directed to children for their independent personal use.

13. Privacy Rights and Requests

Depending on applicable law and the nature of your relationship with Insight360, you may have rights concerning certain personal information.

If your information was submitted to Insight360 by your employer, healthcare organization, or another Insight360 customer, requests concerning that customer-controlled information may need to be directed to the applicable organization.

Privacy inquiries may be submitted to support@insight360analytics.org.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, practices, legal requirements, or security practices.

When we update the policy, we may revise the effective date displayed at the top of this page.

15. Contact Us

Questions about this Privacy Policy or Insight360 privacy practices may be directed to: