Privacy Policy

1. Scope

This Privacy Policy describes how SaveHealth LLC (“SaveHealth”, “we”) handles information when you use the CopernicusRx Analytics Platform (the “Service”). The Service is currently provided to a single authorized customer organization (the “Customer”) on a limited basis, and this policy is scoped to that deployment.

2. Information we collect

We only collect what we need to operate the Service:

• Account information — the email address you sign in with, a display name if your identity provider returns one, and the role assigned to you by your administrator.
• Session information — a short-lived sign-in token and basic device metadata used to keep you signed in.
• Activity content — the content you submit through the Service and the responses returned to you, retained so you and your administrators can revisit your history.
• Audit logs — records of access events and administrative actions (who signed in, who viewed or modified what, when), retained for security and compliance.

3. What we don't collect

The Service does not embed third-party analytics, advertising, or session-replay tools. We do not track you across other websites. We do not sell personal information.

4. How we use information

We use the information we collect to:

• provide and maintain the Service;
• enforce access controls and authenticate users;
• investigate misuse, security incidents, and bugs (limited to authorized personnel);
• improve the Service — aggregated, non-identifying usage patterns may inform product decisions.

5. Where data is stored

Service data is stored on cloud infrastructure located in the United States. The Customer’s source data remains under the Customer’s control and is accessed read-only, on demand, only as needed to respond to your activity in the Service.

6. Sharing

We do not share Customer information with third parties for their own purposes. We rely on a small set of infrastructure subprocessors to operate the Service. Information may be disclosed if required by law, or to the Customer’s administrators in the course of their oversight of the workspace.

7. Retention

Conversations and queries are retained until you or your administrator deletes them, or until your access is revoked and the Customer requests deletion. Audit logs are retained for the period required by the Customer’s compliance program.

8. Security

Data is encrypted in transit and at rest. Access to administrative tools is restricted to a small number of authorized personnel and is logged. Activity that touches the Customer’s data operates with read-only access and enforced safety limits.

9. Your choices

Because the Service is operated under a Customer relationship, the Customer’s administrators control who can sign in and what data is exposed. To request a copy of your data, to correct it, or to have it deleted, please contact your administrator. You can also reach us at support@copernicusrx.com and we will coordinate with the Customer.

10. Changes

We will update this policy as the Service evolves. Material changes will be communicated through the Service or via the Customer’s administrator.

11. Contact

Questions about this Privacy Policy can be sent to support@copernicusrx.com.