Truro Inc. Privacy Policy

1. Introduction

Truro Inc., doing business as Truro Analytics ("Truro," "we," "us," or "our"), respects your privacy and is committed to protecting it. This Privacy Policy describes how we collect, use, and share information in connection with our analytics platform and services (the "Services").

Please read this Privacy Policy carefully to understand our practices regarding your information. By accessing or using our Services, you agree to this Privacy Policy.

2. Scope of this Policy

This Privacy Policy applies to Information we receive from the following sources:

• Business Partners ("Partners"): The business entities, dental/medical practices or groups, or software platforms that contract with us to use our analytics Services.

3. Information Collected from Partners

We collect following information from Partners to manage accounts and provide access to our Services:

• Identity and Contact Information of Partners: Our Partners provide personnel and business information including but not limited to name, job title, email address, phone number, business locations, business entity identifiers, and mailing address of the Partners' and their representatives.
• Patient Interaction Data: Partners provide patient interaction data pertaining to appointments and payments for analysis.
• Patient Identification Information: We prefer to not receive personally identifiable information about patients from our Partners. In case patients’ personally identifiable information is received, it is anonymized and/or deleted at source.
• Technical and Usage Information of Partners: We receive technical credentials including and not limited to login data, IP address, and browser type for provisioning our services to our Partners.

4. Information Processed on Behalf of Partners

We process the following information in provisioning our Services:

• Patient Interaction Data: Patient interaction data pertaining to appointments and payments provided by partners for analysis.
• Partner Business Operations Data: Business operations data including but not limited to business entity IDs, business locations, dates, credentials.

5. How We Use Information

We use information for performance of a contract, legitimate interests, and legal compliance.

A. Uses of Partner Information

• Account Administration: To identify authorized users and manage the business relationship.
• Billing: To process payments and manage financial transactions.
• Communication: To send service updates, security alerts, and administrative messages.
• Security: To monitor use of our systems, prevent fraud, and ensure network security.

B. Uses of Patient Data

• Service Provision: To provide the analytics, AI processing, and insights required by our contract with the Partner.
• Algorithm Improvement: To develop and improve our AI models and analytics services, ensuring they remain fit for purpose.
• Compliance: To comply with legal obligations, including HIPAA compliance where applicable.

6. Disclosure of Information

We do not sell business or patient data. We may disclose information as follows:

• Service Providers: We share information with third-party vendors who provide services such as cloud hosting (e.g., AWS), IT security, and payment processing. These providers are contractually obligated to protect shared data.
• Affiliates: We may share information with subsidiaries or affiliates within the Truro corporate family.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.
• Business Transfers: Information may be transferred as part of a merger, sale of assets, acquisition, or bankruptcy.
• Aggregated Data: We may use and share aggregated, anonymized data (which does not identify any individual) for benchmarking, marketing, or research purposes.

7. Data Security

We have implemented measures designed to secure business and patient data information from accidental loss and unauthorized access.

• Encryption: All service data is encrypted in transit.
• Access Control: We limit access to service information to those employees and contractors who have a business need to know.
• Storage: Data is stored in secure third-party data centers that meet industry security standards.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we use commercially acceptable means to protect all business and patient information, we cannot guarantee its absolute security.

8. Data Retention

We retain business and patient data as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Partner Data: Retained while the business relationship is active and for a reasonable period thereafter for audit and legal purposes.
• Patient Data: Retained in accordance with our agreements with Partners and applicable laws (such as HIPAA).

9. Changes and Updates to this Policy

This policy may be updated from time to time and will indicate the date of the latest revision. In the event that the modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change. For example, we may send a message to your email address, if we have one on file.

Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of this Policy.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Truro Inc.
4935 Yuma Ct N
Plymouth, MN 55446
United States

Email: connect@truroai.com
Phone: 6122809462