Privacy Policy

1. Introduction

ClearMarker (“we,” “us,” or “our”) operates ClearMarker, an operational decision-support tool for healthcare clinics. This Privacy Policy explains how we collect, use, store, and protect information when you use our Service or visit our website at clearmarker.io.

2. Information We Collect

Information You Provide

Contact information (name, email, clinic name) submitted through waitlist or contact forms. Clinic operational data (scheduling records, visit data, patient case records, and insurance information) that you export from your EHR or practice management system and provide to us for processing.

Information Collected Automatically

Basic website analytics (page views, referral source) via privacy-respecting analytics. Browser type, device type, and IP address for security purposes.

3. How We Use Your Information

We use the information we collect to: deliver the ClearMarker service — processing your exported clinic data to generate operational views, alerts, and summaries; communicate with you about your onboarding or account; improve and develop the Service; and ensure security and prevent unauthorized access.

We do not sell, rent, or share your personal information or clinic data with third parties for marketing purposes.

4. Protected Health Information (PHI)

ClearMarker processes data that qualifies as Protected Health Information (PHI) under HIPAA, including patient names, appointment details, insurance information, and visit records. This data is stored and processed on ClearMarker’s access-controlled server infrastructure in order to provide the Service to your clinic.

We protect PHI with per-clinic data isolation (each clinic can access only its own data), role-based access controls enforced at the database level, audit logging of changes, encrypted transmission, and encrypted backups. Access to the application requires authentication, and each clinic approves the users permitted to access its workspace. We will enter into a Business Associate Agreement (BAA) with each clinic that uses the Service with PHI.

5. Data Storage and Security

ClearMarker stores your clinic data on access-controlled server infrastructure. Our security controls include: per-clinic data isolation so each clinic can access only its own data; role-based access controls enforced at the database level (row-level security); audit logging of changes; encrypted transmission; encrypted backups; and access limited to authorized, authenticated users.

We restrict internal access to the minimum necessary to operate and support the Service. No security program can guarantee absolute security, but we work to protect your data using the safeguards described above.

6. Data Retention

We retain your clinic data for as long as necessary to provide the Service, consistent with the terms of your active service agreement.

You may request deletion of your data at any time by contacting us at privacy@clearmarker.io, and we will process such requests within 30 days.

7. Third-Party Services

Our marketing website (clearmarker.io) is hosted on Vercel, which does not receive clinic or patient data. The ClearMarker application and your clinic data are hosted on our own access-controlled server infrastructure.

We may use a limited number of trusted service providers (subprocessors) to operate the Service — for example, cloud infrastructure and encrypted backup storage. Any subprocessor that handles PHI is bound by a Business Associate Agreement and receives only the minimum data necessary to perform its function. We do not sell, rent, or share your clinic data with third parties for marketing purposes.

8. Your Rights

You have the right to: request access to the data we hold about your clinic; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); and discontinue the Service at any time.

To exercise any of these rights, contact us at privacy@clearmarker.io.

9. Cookies

Our marketing website uses minimal cookies necessary for site functionality. We do not use advertising cookies or cross-site tracking. Access to the ClearMarker application requires authentication, and session cookies are used to maintain your authenticated session.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active customers of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at: