Privacy Policy

1. Who we are

Predixa Health is the patient-engagement platform operated by Cody Health LLC, a California limited liability company doing business as Predixa Health.

In this policy, "Predixa Health", "we", "us" and "our" mean Cody Health LLC.

• Cody Health LLC, d/b/a Predixa Health
• 15333 Culver Dr. Ste 340 #2057, Irvine, CA 92604, USA
• privacy@predixahealth.com

2. What this policy covers, and what it does not

This policy describes how we handle information collected through this website, predixahealth.com, including any message you send us through it.

This policy does not cover protected health information that we process on behalf of healthcare providers, health plans and other covered entities who use our platform. When we handle that information we act as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), and our handling of it is governed by our Business Associate Agreement and services agreement with the covered entity, not by this policy. If you are a patient asking how your health information is used, the notice of privacy practices issued by your own provider or health plan is the document that applies to you, and your provider is the right party to contact.

3. Information we collect

Information you choose to send us

If you contact us through this website or by email, we receive what you send. Where the site offers a contact form, that form asks for your first and last name, your work email address, and optionally your organization, the approximate size of your patient panel, and a description of what you are trying to solve.

Along with a form submission we also record the IP address it came from and the time it was sent. We use these two items to detect and discard automated spam, and they are included in the notification email we receive. If you would rather not have an IP address recorded alongside your message, email us directly instead of using the form.

Information collected automatically

Our web servers and content delivery network keep access logs. A log entry may contain the IP address of the request, the date and time, the file requested, the HTTP status returned, the size of the response, and the user agent and referring page reported by your browser. We use these logs to operate the site, investigate errors, and identify abusive traffic such as denial-of-service attempts.

What we do not collect

We want to be specific about this rather than vague, because it is unusual:

• No cookies. This website sets no cookies, of any kind, first-party or third-party. There is no cookie banner because there is nothing to consent to.
• No analytics. We run no analytics product. There is no Google Analytics, no tag manager, and no equivalent tool measuring your visit.
• No advertising or tracking technology. There are no advertising pixels, no conversion tags, no session recording, no heatmapping, and no fingerprinting.
• No cross-site tracking. We do not follow you across other websites or apps, and we do not build advertising or behavioural profiles about you.
• No account required. This website has no login, so we hold no username or password for it.

4. Third parties involved in running this site

We keep this list short deliberately. These are the only third parties that receive information as a consequence of your visit:

• Amazon Web Services. The site is hosted on AWS in the United States, and messages sent through the contact form are delivered by Amazon Simple Email Service. AWS processes the data described above as our service provider.
• Google Fonts. Our pages load typefaces from fonts.googleapis.com and fonts.gstatic.com. Your browser makes those requests directly, which necessarily discloses your IP address and user agent to Google. We receive nothing from it, and Google's handling of that request is governed by Google's own privacy policy.
• Google Workspace. Our email is hosted on Google Workspace, so a message you send us is stored in a Google-hosted mailbox.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not disclose it to anyone else except where we are legally required to, or where it is necessary to protect our rights or the safety of others.

5. How we use information

We use what we collect only to reply to you and continue a conversation you started, to operate and secure the site, to keep records of business enquiries, and to comply with our legal obligations. We do not use it to make automated decisions about you.

6. How long we keep it

Business correspondence, including contact-form submissions, is kept for as long as we have a reasonable business reason to keep it, and then deleted. Server access logs are retained on a short rolling schedule and then expire automatically. You can ask us to delete correspondence sooner, and we will unless we are required to keep it.

7. Security

This site is served over HTTPS only. Form submissions travel over TLS, storage is encrypted at rest, and administrative access to the systems behind the site is restricted and logged. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@predixahealth.com and we will respond within the time the applicable law allows. We may need to verify who you are before acting, and we will not treat you differently for making a request.

California residents. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know what personal information we collect and how we use and disclose it, to request its correction or deletion, to limit the use of sensitive personal information, and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You may use an authorised agent to make a request on your behalf.

If you are in a jurisdiction with comparable rights, including other US states and the EEA or UK, contact us at the same address and we will honour the rights that apply to you.

9. Children

This website is aimed at healthcare organizations, not consumers, and it is not directed to children. We do not knowingly collect personal information from children through it. If you believe a child has sent us information, contact us and we will delete it.

10. Where your information is processed

We operate in the United States and the information described in this policy is processed there. If you visit from outside the United States, you are sending your information to a country whose data-protection laws may differ from those of your own.

11. Changes to this policy

If we change this policy we will update the revision date at the top of this page. Material changes will be described here rather than made silently. Your use of the site after a change means you accept the updated policy.

12. Contact us

Questions about this policy, or about privacy generally, should go to privacy@predixahealth.com, or by post to Cody Health LLC, 15333 Culver Dr. Ste 340 #2057, Irvine, CA 92604, USA.

Your use of this site is also subject to our Terms of Service, including the limitations on liability and the dispute-resolution provisions it contains.