Your privacy matters.

This Privacy Policy describes how US MedResources ("we," "us," or "our") collects, uses, discloses, and protects information collected through the VitalScan ANS+ Portal website and related services (collectively, the "Service"). The Service is a marketing and lead-generation platform for FDA-cleared VitalScan autonomic, cardiovascular, and vascular diagnostic technology.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described below.

Information you provide directly:

• Contact details: Name, email address, phone number, practice name, medical specialty, and any message you submit via our contact forms, ROI calculator, quote request forms, or practice fit quiz.
• Referral information: If you submit a referral, we collect your name and email plus the referred contact's name, email, practice name, and specialty.
• ROI report details: Practice information and test-volume assumptions you enter into the ROI calculator, which we use to generate a personalized revenue projection.
• Resource download requests: Your name and email when you request access to a clinical white paper, guide, or report.
• Testimonial submissions: Your name, credentials, specialty, practice name, location, and testimonial quote if you submit a physician testimonial.
• Demo booking details: Information you provide when scheduling a demonstration through our scheduling provider.
• Chat widget conversations: Any messages you send through our in-site chat assistant are processed by an AI language model to respond to your inquiries.

Information collected automatically:

• IP address and location data: We collect visitor IP addresses and use them to approximate your city, region, country, and organization. IP addresses are stored as a cryptographic hash (SHA-256) for rate-limiting and security purposes. We do not store raw IP addresses in our database.
• Usage analytics: We track page visits, session activity, and events such as form submissions to understand how the Service is used and to improve it.
• Email engagement data: If you are a healthcare provider who receives outreach emails from us, we track whether you open those emails via a tracking pixel and whether you click links within them.
• Device and browser information: Standard information such as browser type, device type, and referring pages.

• To respond to your inquiries, provide ROI reports, and schedule demonstrations.
• To identify your medical practice and assess whether our diagnostic technology is a fit for your specialty.
• To send you clinical resources, follow-up emails, and nurture sequences relevant to your practice type.
• To protect the Service from abuse, fraud, and excessive submissions through IP-based rate limiting.
• To identify and profile website visitors from medical organizations for provider prospecting and outreach purposes.
• To analyze traffic patterns, measure marketing effectiveness, and improve website content.
• To comply with legal obligations and enforce our terms of service.

We process personal information based on your consent when you submit forms or interact with the Service, our legitimate business interests in marketing diagnostic technology to qualified medical practices and operating the Service securely, and our legal obligations as a medical device company. You may withdraw consent at any time by contacting us using the details in Section 10.

We do not sell your personal information. We share data with the following categories of recipients:

• CRM and outreach platforms: Lead and contact data may be synced to HubSpot CRM and Gojiberry outreach tools so our sales team can follow up appropriately.
• Email delivery providers: We use a third-party email service to send transactional, follow-up, and outreach emails on our behalf.
• Scheduling providers: Demo bookings are processed through a third-party scheduling service.
• AI and content services: Chat conversations and form inputs may be processed by AI language models to generate responses, ROI reports, and clinical content.
• Data enrichment services: We use third-party APIs to validate email addresses and enrich visitor IP data with geographic and organizational information.
• Service providers: Hosting, analytics, and infrastructure providers who help us operate the Service under appropriate data protection agreements.
• Legal compliance: We may disclose information when required by law, court order, or to protect our rights, safety, or property.

The Service uses cookies and similar technologies to maintain authentication sessions, remember your preferences, and collect analytics. Authentication tokens are stored to keep you logged in during your session. Analytics tools may set cookies to measure usage. You can control cookies through your browser settings, but disabling them may affect functionality such as session persistence.

We retain personal information for as long as necessary to fulfill the purposes described in this policy or as required by applicable law. Lead and contact records are retained for the active life of the business relationship and for a reasonable period thereafter for record-keeping. Visitor tracking data is retained to support analytics and prospecting. You may request deletion of your personal data as described in Section 8.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal retention obligations.
• Opt out of marketing communications at any time.
• Restrict or object to certain processing of your information.
• Withdraw consent for processing based on your consent.

To exercise any of these rights, contact us at the email or address listed in Section 10. We will respond to your request within 30 days.

Do Not Sell or Share My Personal Information

Under certain state laws, you have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising. We do not sell your personal information. To opt out of any sharing practices described in this policy, contact us using the details in Section 10.

If you receive outreach emails from us and wish to stop receiving them, you may click the unsubscribe link included in every email or visit our unsubscribe page. We process unsubscribe requests immediately and remove you from future outreach sequences. You may still receive transactional emails (such as responses to your inquiries) that are necessary to fulfill your requests.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us by email at admin@usmedresources.com or by mail at US MedResources, serving medical practices nationwide.

The Service is directed to healthcare professionals and medical practice decision-makers. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised effective date. We encourage you to review this page periodically. Material changes will be communicated through a prominent notice on the Service.

The Service is a marketing and lead-generation platform and is not intended for the collection of Protected Health Information (PHI) as defined under HIPAA. We do not ask you to submit patient health information through our forms, chat, or other features. If you are a healthcare provider using the Service, please do not include any patient-identifiable health information in your communications with us.