CareVanta

CareVanta Privacy Policy

Effective Date: [01/01/2026]

This Privacy Policy explains how CareVanta, Inc. (“CareVanta,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website and Services.

1. Scope

This Policy applies to:

  • Visitors to our website; and
  • Customers and authorized users of our Services.

If you are using the Services on behalf of an organization, your organization may have its own policies governing your use of the Services.

2. Information We Collect

A) Information you provide

  • Contact info: name, email, phone number, company, role/title.
  • Account info: login credentials (stored securely), user settings, and administrative details.
  • Customer content: information you upload or submit in the Services (which may include claims-related or dispute-related information).

B) Information collected automatically

  • Usage data: pages viewed, features used, clicks, referring URLs, timestamps, device/browser type.
  • Log data: IP address, events, error logs, diagnostics.
  • Cookies and similar technologies: used for session management, security, and improving the Services.

3. PHI and HIPAA (Important)

CareVanta may process Protected Health Information (“PHI”) on behalf of certain customers.

If CareVanta is acting as a Business Associate under HIPAA, CareVanta will handle PHI in accordance with the applicable Business Associate Agreement (BAA) and HIPAA requirements.

If a BAA is required for your use case and is not in place, you should not submit PHI through the Services.

4. How We Use Information

We use information to:

  • Provide, operate, maintain, and secure the Services;
  • Authenticate users and manage accounts;
  • Respond to inquiries, provide support, and communicate about the Services;
  • Improve performance, user experience, and product features;
  • Monitor for fraud, misuse, and security incidents;
  • Comply with legal obligations.

5. How We Share Information

We may share information:

  • With service providers who help run our business (hosting, monitoring, analytics, customer support tools). They are permitted to process information only to provide services to us and are subject to confidentiality/security obligations.
  • With your organization’s administrators if you use the Services as an authorized user.
  • For legal reasons if required by law, subpoena, or to protect rights, safety, and security.
  • In a business transfer (merger, acquisition, financing, asset sale) where information may be transferred as part of the transaction, subject to appropriate protections.

We do not sell personal information.

6. Data Retention

We retain information as long as necessary to:

  • Provide the Services and fulfill contracts;
  • Meet legal, accounting, and compliance obligations;
  • Resolve disputes and enforce agreements.

Retention for PHI (if applicable) may be governed by a BAA and customer instructions.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, alteration, disclosure, or destruction. No system is 100% secure; you are responsible for safeguarding access credentials.

8. Your Choices and Rights

Depending on your jurisdiction, you may have rights to:

  • Access, correct, or delete certain personal information;
  • Object to or restrict certain processing;
  • Opt out of marketing communications.

To request access, correction, or deletion, contact us at support@carevanta.com. If you are an authorized user, we may direct requests to your organization’s administrator.

9. Cookies

We use cookies to:

  • Keep you logged in and secure sessions;
  • Remember preferences;
  • Understand usage and improve the Services.

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

10. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children.

11. International Users

If you access the Services from outside the United States, your information may be processed and stored in the United States or other locations where we or our service providers operate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. Material changes may be communicated via the website or email.

13. Contact Us

Email: support@carevanta.com