VSS Medical Technologies Inc, and its subsidiaries including Sigmund Software, LLC (“VSS Medical,” “us,” or “we”), respect your privacy, and we are committed to protecting it through our compliance with this policy. We want you to be familiar with how we collect, use, and disclose information from and about you because, like you, we are concerned about your privacy.

By using our services or registering for an account with us, you accept the terms of this Privacy Policy and consent to our collection, use, disclosure, retention, and protection of your personal information as described in this Privacy Policy.

Privacy Policy – VSS Medical Technologies Inc, and its subsidiaries

1. Websites Covered Under this Policy

This statement applies to information:

• We may either  collect from you or that you may provide to us when you visit websites that link to this privacy statement (the “Privacy Policy”) including www.sigmundsoftware.com, blog.sigmundsoftware.com, support.sigmundsoftware.com (referred to as our “Website(s)”); and
• Our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy may change from time to time, however, your continued use of the Websites after we make changes shall be deemed an acceptance of those changes. It is your responsibility to check the policy periodically for updates.

2. Scope of the Privacy Policy

This policy applies to information we collect:

• on this Website;
• via e-mail, text, or other electronic message systems; or
• when you interact with our applications or advertising from third-party websites and      services, provided that those applications or advertising include links to this policy.

 The policy does not apply to information collected by us that is:

• protected health information under the Health Insurance Portability and Accountability Act (HIPAA), the collection of which will be governed by a business associate agreement or applicable law;
• offline or  through any means other than the Websites; or
• via a third  party, including through an application or content (including advertising) that may link to or be accessible from or on the website.

3. Children under 13 years of age

The Websites are neither intended for nor directed at anyone under 13 years of age. No one under 13 years of age may access or provide any information to us. We do not knowingly solicit or collect information from anyone under the age of 13 or allow people under the age of 13 to register for the Websites. If you are under 13, you may not:

• use or  provide any information on the Websites or on or through any of its  features;
• make any purchases through the Website;
• use any of  the interactive or public comment features of this Website or provide any  information about yourself to us, especially your name, address, telephone  number, e-mail address, or any screen name or user name you may use.

If we learn that we have collected personal information from a child under age 13 without parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us immediately. (See Section 12, “Contact Information,” below).

4. Information We Collect About You and How We Collect It

To facilitate the use of our services, we collect information that you share with us as you use the Website as well as information about your use of the Websites over time. In order to do this, we may use one or more technologies to collect information including, but not limited to general log information, internet cookies, web beacons, and referral information from third-party websites. (Please read more about internet cookies and web beacons in Section 6, “Information We Collect through Automated Technologies.,” below).

We may also collect information concerning you, including, but not limited to, the kind of services you are seeking from us, as well as IP addresses (the Internet address of a computer) to track your session in order to provide you with the best possible user experience. We typically do not link IP addresses to personally identifiable information. After we’ve collected it, data is analyzed for certain trends such as which parts of our site users are visiting most often and how long they spend there. Some of the information we collect may include information we receive from third parties, such as our business partners.

5. Information Provided to VSS Medical Technologies, Inc. and it’s subsidiaries

During your visit or use of the Websites, we may collect:

• information  you provide to us by filling in forms on the Websites, including information  you provide as you post material or request further services or when you report a problem with the Websites;
• records or copies of your correspondence, if you contact us, including e-mail addresses;
• your responses to surveys that we might ask you to complete for research or  other business purposes.

6. Information We Collect through Automated Technologies

As you navigate through and interact with the Websites, we may use various automated technologies to collect certain statistical data information, not including personal information, such as information about:

• the equipment you use to access our Websites including system information about your computer and internet connection, including your IP address, operating system, and browser type;
• your browsing actions and patterns to understand how you access information during your visits to the Websites, including traffic data, location data, logs and other communication data; and
• the resources you access and use on the Websites  

Some of our automated technologies include:

• Internet Cookies. Internet  Cookies (also known as Cookies) are small files that may be placed on your hard disk for record-keeping purposes. Cookies are used (a) to remind us of who you are in order to deliver you better service; (b) to help us      estimate our audience size by determining repeat usage of the Websites in order to help target advertisements based on user interests and behavior; and (c) to measure certain traffic patterns for use as a research tool to understand how our users’ habits are similar or different from one another.
• Web Beacons. Web Beacons (also referred to as pixel tags) are links to small, often transparent, graphic images, usually no larger than 1×1 pixel that are placed on a web page or in an email. These Web Beacons are used to monitor behaviors of those who visit the web page or send the email. When a user visits the web page or opens the email, the link goes to the specified location to retrieve the Web Beacon. The server then may count how many users have visited the pages or opened the e-mail, determine how long a user is      on a web page, understand what browser or email client opened the image,      and find other related website statistics.
• Remarketing Tools. Remarketing tools allow us to reach potential users who may be similar to users that have previously visited the Websites (also known as “similar audience” remarketing). We use Google Ads, a remarketing and behavioral targeting service provided by Google. It connects the activity of the Websites with Google  Ads’ advertising network. Google Ads displays advertisements across the internet by analyzing user activity to identify and reach out to potential      customers of our products and services based on their similarity to you and the other individuals who have visited the Websites. By using the Websites, you consent to allow Google Ads to place its cookies on your hard drive.
• Google Analytics collects visitation information and associates it with Google information from accounts of signed-in users who have consented – this is an opt-out function.
  Visitors can opt-out of the Google Analytics Advertising Features you use, including through Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI’s consumer opt-out). (https://myactivity.google.com/myactivity)  
  
  The Google Analytics Advertising Features we have implemented are Google Ads Google Analytics Google Tag Manager You can opt out of Google Analytics’ tracking by installing this opt-out extension. (https://tools.google.com/dlpage/gaoptout/ )
•  
• Permission-Based Marketing Tools. Automated, permission-based marketing tools allow users the opportunity to opt-in by      signing up for mailing lists and other marketing (See Section 9, “Your Choices about How We Use and Disclose Your Information,” below, for  information about opting-in or -out). We do not use the information you  provide through or in connection with the Websites to send unsolicited  bulk email, which we define as email sent to more than 10 individuals with  whom we do not have a prior business relationship.

7. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• to present, operate, maintain, improve, and promote the Websites and their content to you;
• to share additional relevant content that your engagement with the Websites may indicate or that you may request from us;
• to process and complete transactions with you, such as responding to your comments, questions, and requests; providing you with customer service and support; and sending you technical notes, updates, security alerts, or administrative messages;
• to notify you about changes about your account, the Websites, or any products or  services we offer or provide though it, including, promotional communications (including features, newsletters, offers, promotions, contests, events, and other updates);
• to allow you to participate in interactive features on the Websites;
• to monitor usage trends, usage, and activities in connection with the Websites and for marketing/advertising purposes;
• to personalize the Website’s content, features, and advertisements; or
• in any other  way we may describe when you provide the information or for any other purpose with your consent.

8. Disclosure of Your Information

We may disclose aggregated information that does not identify you, without restriction. We may disclose personal information that we collect, or you provide as described in this Privacy Policy:

• with your consent;
• to fulfill the purpose for which you provide the information or the purpose we  disclose when you provide the information;
• to our  subsidiaries, affiliates, contractors, service providers, and other third  parties whose services or products we use to support our business and who are bound by contractual obligations to keep your personal information  confidential and use it only for the purposes for which we disclose it to them; and
• to a (potential) buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or  transfer of some or all of our assets (whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding) in which personal information held by us about the Websites’ users is among the assets transferred.

We may also disclose your personal information:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• to enforce  or apply any agreements we have with you, your employer, or your organization, including for billing and collection purposes; or
• if we  believe disclosure is necessary or appropriate to protect the rights,  property, or safety of our users, customers, us, or others, including  exchanging information with other companies or organizations for the  purposes of fraud protection and credit risk reduction

9. Your Choices about How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. Therefore, you may use the following mechanisms to provide you with control over your information:

• Your web  browser offers an option to notify you when you receive a cookie, if you  would like chance to decide whether or not to accept it. However, because of the way the Websites are built, by not accepting cookies, some Website  pages may not display properly, and access to certain information may be  blocked.
• Remarketing  Tools. You  can opt out of the Google Ads cookie tracking here. Alternatively, you can opt out  of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s opt out page. We do not control these third parties’ cookies or tracking technologies or how they may be used.  Therefore, if you have any questions about an advertisement or other  targeted content, you should contact the responsible provider.
• Permission-Based Marketing Tools. We  create and manage an “opt-in” subscriber list. By building and using such a list, we ensure that we send content only to recipients that have given us permission to do so. Additionally, the marketing service automatically  appends an unsubscribe or opt-out option at the bottom of every email we send through it.

10. Data Security

We have implemented measures designed to secure your personal information from accidental loss and unauthorized access, use, alteration, and disclosure. Information you provide to us is stored either on our secure servers behind firewalls or similar secured servers managed by our affiliates or service providers. However, the safety and security of your information also depends on you.

Where you use a password for access to certain parts of the Websites, you are responsible for keeping the password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information.

Unfortunately, the transmission of information via the internet is not completely secure. Though we do our best to protect your personal information, we cannot guarantee the security of personal information transmitted to the Websites. By using the Websites, you accept the transmission of your personal information at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Websites.

11. Changes to Our Privacy Policy

It is our policy to post changes we make to our Privacy Policy on this page. The date the Privacy Policy most recently revised is identified at the top of the page. You are responsible for periodically visiting the Websites and this Privacy Policy to check for any changes.

12. Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, fill out our form here.

Sigmund Software Telehealth Application Privacy Policy for Patients and Providers

Sigmund Software Telehealth Application Privacy Policy for Patients‍

Overview

Sigmund Software takes very seriously its obligation to protect the confidentiality of your personal information. Sigmund Software Telehealth applications for patients, including MyChart for iOS and Android, are intended to connect to servers and systems operated and maintained by Sigmund’s community members in order to provide you secure, remote access to those systems and to your health information.

This Privacy Policy

This Privacy Policy describes how Sigmund Software’s (“Aura”) telehealth applications for patients (our “Applications”) use, store, and transmit information and data. Sigmund Software may modify this Privacy Policy at any time effective upon its posting. Your use of our Applications constitutes your acceptance of this Privacy Policy and any updates. Your use of our Applications is subject to the applicable Applications’ End User License Agreement.

Purpose

This Privacy Policy lets you know what limited information you provide to us when you use our Applications and how that information is used.

Your Personal Information

Our Applications and the Limited Ways in which Sigmund Software Uses Your Information

Sigmund Software does not sell or license any information that you may provide to us as you use our Applications.

Except for those things stated below, our Applications do not send your personal information directly to Sigmund Software and do not store any of your personal information on your device or in the cloud-based storage solution associated with your device (i.e., Cloud or its equivalent).

Sigmund Software attempts to minimize the amount of your personal or health information stored or retained on your device. Nevertheless, our Applications may:

• Temporarily store your personal information in memory or on the device while you use our Applications.
• In addition, in order to provide you certain features, our Applications may request information from servers and systems owned or operated by Sigmund Software and those servers and systems may record technical information about that request such as an IP address and information related to the type of device, platform, and operating system you use with our Applications.

Your Healthcare Providers

To use our Applications, you must have an account with a healthcare provider who uses Sigmund Software’s software. Because of this, your use of our Applications is also subject to your healthcare provider’s privacy policy. You understand that while connected or attempting to connect to a healthcare institution’s system, the healthcare institution may collect, store, process, maintain, upload, sync, transmit, share, disclose, and use certain data and related information, including information or data regarding the characteristics or usage of your device, system and application software, and peripherals as well as your personal information, location data, and other content.

Please contact your healthcare institution if you have any questions about their policies or terms.

Our Applications do not share your information with Google, Daily.co, WebEx, Zoom or any other third parties.

How We Protect Your Personal Information

The security of your information and data while using our Applications is very important to us. Our Applications employ a variety of technical safeguards to protect the confidentiality, integrity, and availability of your personal information including supporting Transport Layer Security (TLS)/Secure Sockets Layer (SSL) certificate technology and encryption.

In addition, healthcare providers with whom you connect may use a variety of physical, administrative, and technical measures to protect your personal information.

Contact Sigmund Software

If you have any questions about this Privacy Policy, you may contact Sigmund Software at 1.800.448.6975 or in writing at 83 Wooster Heights ,Suite 210, Danbury, CT, 06810

Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents or contact your healthcare provider.

Sigmund Software’s Telehealth Application Privacy Policy for Providers

Last Updated: December, 2020

In General

Sigmund Software takes very seriously its obligation to protect the confidentiality of your personal information.

This Privacy Policy

This Privacy Policy describes how Sigmund Software’s Aura platform for providers use, store, and transmit information and data. Sigmund Software may modify this Privacy Policy at any time effective upon its posting. Your use of our Applications is subject to the of the applicable Applications’ End User License Agreement.

Your Personal Information

When you use our Applications, Sigmund Software does not receive any personal data directly from you or your device. As described below, our Applications connect with systems operated and maintained by a healthcare institution that uses Sigmund Software’s platform.

Connections to Healthcare Institutions

To use our Applications, you must have an account with a healthcare institution who uses Sigmund Software. Your use of our Application with that healthcare institution may be subject to that healthcare institution’s policies and terms. You understand that while connected or attempting to connect to a healthcare institution’s system, the healthcare institution may collect, store, process, maintain, upload, sync, transmit, share, disclose, and use certain data and related information, including but not limited to information or data regarding the characteristics or usage of your device, system and application software, and peripherals as well as your personal information, location data, and other content.

Please contact your healthcare institution if you have any questions about their policies or terms.

Using Third Party Tools and Features

If you use any third-party tools and features, such as third-party speech-to-text dictation or third-party video, your use of those features is subject to the terms and policies of those third parties. If you have any questions about those terms or policies, you should contact your healthcare institution or the provider of the third-party tool.

How We Protect Your Personal Information

The security of your information and data while using our Applications is very important to us. Our Applications employ a variety of technical safeguards to protect the confidentiality, integrity, and availability of your personal information including supporting Transport Layer Security (TLS)/Secure Sockets Layer (SSL) certificate technology and encryption.

In addition, healthcare providers with whom you connect may use a variety of physical, administrative, and technical measures to protect your personal information.

‍

Certifications

Sigmund Software is 2015 Edition Cures Update ONC certified for ambulatory and inpatient care EHR

Software Version 5.04

7/31/2023 Certification number: 15.04.04.2848.Aura.05.03.1.230731

Sigmund Software’s AURA is 2015 Edition Cures compliant and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services.  This certification does not represent an endorsement by the U.S. Department of Health and Human Services    

Criteria:

170.315 (a)(1-5, 9, 12, 14); (b)(1-3, 10); (d)(1-9, 12-13); (e)(1, 3); (f)(1-2, 5); (g)(2-6, 9)

Additional Software Used:

NLM API, NewCrop, Darena BlueButtonPro

The following modules, required to attain Meaningful Use, are not included in the base price of the EHR. 

Patient Portal

Allows patients to secure message their provider and view their health information online, download a summary of their health information and then transmit to the requested provider and is required to comply with 170.315(e)(1) View, Download, and Transmit to a Third Party certification criteria. 

• Additional fees required: Monthly subscription fee based on total number of Eligible Clinicians.

E-Prescribing

Requires Aura SureScripts or Dr First Rcopia licensing which allows providers to record allergies, electronically prescribe medications, perform drug-drug, drug-allergy interaction checks and drug formulary checks and is required to comply with 170.315(b)(3) Electronic Prescribing certification criteria. 

Requires Wolters-Kluwer MediSpan library licensing to which allows providers to perform drug-drug, drug-allergy interaction checks and is required to comply with 170.315(a)(4) Drug-Drug, Drug-Allergy Interaction Checks criteria. 

• Additional fees required: One time identity proofing fee per Eligible Clinician in addition to monthly subscription fee per Eligible Clinician.      

Document Imaging

Required to comply with 170.315(e)(3) Patient Health Information Capture and 170.315(a)(9) Clinical Decision Support certification criteria.

• Additional Fees: Monthly subscription fee per site.

E-Labs

Requires either Liaison/EMR Link or Change Healthcare/Clinician to comply with 170.314(b)(5)(A) Incorporate Laboratory Tests and Values/Results certification criteria.

• Additional Fees:  Monthly per provider subscription  

Secure E-Mail

Requires NewCrop Core secure email license to comply with 170.315(b)(1) Transitions of Care: Received, Display & Incorporate Summaries (C-CDA) certification criteria.

• Additional Fees: 4 license fees included with Patient Portal, additional licenses will incur one time cost in addition to monthly subscription fee.