Privacy Policy

This policy applies to visitors and business contacts who use the CareBridge public website, including its contact, demo-request, newsletter, and assistant features. It does not govern a clinic product deployment or information processed for a healthcare customer under a separate services agreement.

CareBridge HealthTech LLC is a Texas limited liability company. For people in Cameroon, this policy is intended to be read consistently with applicable mandatory privacy rights, including Law No. 2024/017 relating to the protection of personal data in Cameroon.

We collect information you choose to provide, such as your name, professional role, organization, country, city, phone number, email address, preferred language, organization type, consent selection, message, newsletter address, and assistant conversation.

Our hosting and application services may also process ordinary technical information needed to deliver and protect the site, such as an IP address, request time, browser or device information, requested page, and security or error events.

Do not submit protected health information or identifiable patient information through this public website, its forms, or its assistant.

The site is not connected to an approved clinical environment. If you accidentally send sensitive information, contact us promptly so we can assess appropriate deletion or other protective action.

We use submitted and technical information to respond to inquiries, arrange demonstrations, provide requested updates, operate the assistant, maintain site functionality, prevent abuse, troubleshoot problems, understand business interest, and comply with applicable law.

• We do not use public-site submissions to provide medical care or make clinical decisions.
• We do not sell personal information submitted through this website.

Depending on the applicable law and context, we process information with your consent, to take steps you request before a possible business relationship, for legitimate interests in operating and protecting the site, or to meet legal obligations. Where consent is the applicable basis, you may withdraw it for future processing by contacting us.

We use service providers only as needed to operate the public site. Vercel hosts and delivers the website. Convex may receive and store form submissions, newsletter registrations, and limited assistant operational or security metadata when the production backend is configured; it does not store assistant messages or replies. OpenAI may process assistant content only when the optional AI integration is enabled, with response storage disabled in the request. If you choose the WhatsApp link, WhatsApp processes your use under its own terms and privacy practices.

Providers may process information on our behalf or, for services you independently choose such as WhatsApp, under their own responsibilities. Features that are not configured do not receive your data from this site.

CareBridge is headquartered in the United States and serves business interests that may include Cameroon. Information submitted from Cameroon may therefore be processed in the United States or other places where our providers operate. Applicable law may require specific protections for a transfer; any protections required for a customer deployment are addressed in the applicable agreements and approved environment. We do not claim a particular data-residency location on this public site.

Business inquiry and demo-request submissions are scheduled for deletion 24 months after submission. Newsletter information is kept until verified removal following your deletion, consent-withdrawal, or unsubscribe request.

Assistant messages and replies are not stored by CareBridge. Limited AI operational metadata, such as model, locale, latency, token counts, response identifier, status, and a pseudonymous identifier, is scheduled for deletion after 90 days. Rate-limit records are scheduled for deletion after their request window expires. Future security or audit events may be scheduled for deletion after 12 months. Deletion timing may be affected by backups and lawful preservation requirements.

Subject to applicable law, you may ask whether we process your information and request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also complain to a competent authority. We may verify your identity and may retain information where law permits or requires it.

To exercise a right, email the privacy contact below and describe your request. We will respond within the period required by applicable law.

We use proportionate administrative and technical measures for this public site, including limited data collection, server-side input checks, request throttling, authenticated service-to-service requests where configured, transport protections supplied by the hosting service, and browser security headers. No internet service is completely secure, and this policy does not promise that unauthorized access can never occur.

This business website is not directed to children, and we do not knowingly seek personal information from children. A parent or guardian who believes a child submitted information should contact us.

We may update this policy as the website, providers, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law.

Contact CareBridge HealthTech LLC at the address or privacy email shown below with privacy questions or requests. Qualified counsel review is recommended before relying on this policy for regulated activities.