Legal

Privacy Policy

Last updated: May 25, 2026

1. Introduction

Vyquora ("we," "our," or "us") is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when health systems, providers, and authorized users ("you") use our AI-native care coordination platform.

Vyquora operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when handling Protected Health Information (PHI) on behalf of covered entities. All PHI is handled in accordance with our Business Associate Agreement and applicable federal and state law.

2. Information We Collect

We collect information necessary to provide our referral coordination and care management services:

• Account information — name, title, organization, email address, and credentials of authorized users
• Referral data — patient identifiers, referring and receiving provider information, referral status, and coordination records
• Usage data — how authorized users interact with the platform, feature usage, and system logs
• Technical data — IP addresses, browser type, device information, and access timestamps
• Communications — messages, support requests, and correspondence with our team

3. How We Use Information

We use collected information solely to:

• Provide, operate, and improve the Vyquora platform
• Track referral status and close care coordination loops
• Generate real-time alerts and care management dashboards
• Maintain audit logs required for HIPAA compliance
• Provide customer support and respond to inquiries
• Comply with legal obligations and contractual requirements

We do not sell, rent, or share PHI with third parties for marketing or commercial purposes under any circumstances.

4. HIPAA Compliance

Vyquora is designed and operated to support HIPAA compliance for covered entities. We implement administrative, physical, and technical safeguards including:

• Encryption of PHI at rest (AES-256) and in transit (TLS 1.3)
• Role-based access controls and least-privilege user permissions
• Comprehensive audit logging of all access to PHI
• Incident response and breach notification procedures
• Regular security assessments and vulnerability management

Covered entities must execute a Business Associate Agreement (BAA) with Vyquora prior to transmitting any PHI through the platform.

5. Data Sharing and Disclosure

We may share information in the following limited circumstances:

• Service providers — with vendors who support our infrastructure, each bound by confidentiality obligations and BAAs where required
• Legal requirements — when required by law, court order, or government authority
• Safety — to prevent imminent harm or protect the rights and safety of individuals
• Business transfers — in connection with a merger, acquisition, or sale of assets, with continuity of this Privacy Policy

6. Data Retention

We retain PHI and account data for the period specified in your BAA and applicable law. Audit logs are retained for a minimum of six years in accordance with HIPAA requirements. Upon contract termination, data is returned or destroyed per the terms of your agreement with us.

7. Security

We maintain a comprehensive information security program designed to protect the confidentiality, integrity, and availability of all data. Our infrastructure is hosted on HIPAA-eligible AWS services covered by an executed AWS Business Associate Agreement.

8. Your Rights

Authorized users and covered entities may request access to, correction of, or deletion of their account information by contacting us. Requests regarding PHI should be directed to the covered entity responsible for that data.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify covered entities of material changes through the platform or direct communication. Continued use of Vyquora after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, concerns, or to execute a Business Associate Agreement, please contact us at:

info@vyquora.com