Leitara ("we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Leitara's website, applications, and services (collectively, the "Service").

Leitara is designed to support clinical work. We intentionally limit data collection to what is necessary to provide the Service and operate it responsibly.

1. Information we collect

We collect information in the following categories:

2. How we use information

We use information only for purposes consistent with providing and maintaining the Service, including to:

• Operate, maintain, and improve Leitara
• Authenticate users and secure accounts
• Provide customer support
• Communicate about the Service (e.g., updates, service notices)
• Comply with legal and regulatory obligations

We do not use your data for advertising, profiling, or resale.

3. HIPAA and protected health information

Leitara is designed to support HIPAA-aligned workflows.

Where applicable:

• We act as a service provider to clinicians and practices
• Client data is processed only on behalf of the clinician or practice
• Access controls, encryption, and compartmentalization are used to protect sensitive data

A Business Associate Agreement (BAA) is available for covered entities, where required.

4. Data sharing and disclosure

We do not sell or rent personal data.

We may share information only in limited circumstances:

• With service providers who help us operate the Service (e.g., infrastructure, security), under strict confidentiality obligations
• To comply with applicable laws, regulations, or legal processes
• To protect the rights, safety, or security of Leitara, our users, or others

Any service providers we use are required to handle data in a manner consistent with this Privacy Policy.

5. Data security

We take security seriously and use reasonable administrative, technical, and organizational safeguards, including:

• Encryption in transit and at rest
• Access controls and least-privilege principles
• Segmentation of systems and data
• Monitoring and auditing for misuse or unauthorized access

No system can guarantee absolute security, but we design Leitara to minimize risk and exposure.

6. Data retention

We retain information only for as long as necessary to:

• Provide the Service
• Meet legal, regulatory, or contractual obligations

Clinicians control their clinical data and may manage or remove it in accordance with the Service's functionality and applicable agreements.

7. Your rights and choices

Depending on your location and role, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion of certain data
• Object to or limit certain processing

Requests can be made by contacting us using the information below.

8. Cookies and tracking

Leitara uses limited cookies and similar technologies that are necessary for:

• Site functionality
• Security
• Basic performance monitoring

We do not use third-party advertising cookies or cross-site tracking technologies.

9. Children's privacy

Leitara is not directed to children under 13, and we do not knowingly collect personal information directly from children. Any client data involving minors is managed solely by clinicians in their professional capacity.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide appropriate notice through the Service or by other means.

The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact us

If you have questions about this Privacy Policy or our privacy practices, you can contact us at: