Privacy Policy

Mammologix, LLC, a Florida limited liability company doing business as I/O Trak, Incorporated (“Mammologix,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit our websites, interact with us online, request information, or otherwise use digital services that link to this Privacy Policy (collectively, the “Website”).

This Privacy Policy applies to information collected through the Website and related communications. It does not replace any separate notice that may apply to customer platform data, protected health information subject to HIPAA, employment-related information, or information processed on behalf of Mammologix customers under a contract.

1. Categories of personal information we collect

Depending on how you interact with the Website, we may collect the following categories of personal information:

A. Identifiers and contact information

• Name
• Business name
• Job title
• Email address
• Telephone number
• Mailing address
• Online identifiers such as IP address, cookie identifiers, device identifiers, or similar identifiers

B. Internet or other electronic network activity information

• Browser type and version
• Operating system
• Device type
• Referring pages and URLs
• Pages viewed
• Date and time of visits
• Clickstream and interaction data
• General location derived from IP address
• Security and diagnostic logs

C. Commercial or professional information

• Organization name
• Role or specialty
• Information about your interest in Mammologix products or services
• Communications regarding demos, support, partnerships, or other business inquiries

D. Audio, electronic, or visual information

• Information you choose to provide in emails, web forms, support submissions, or recorded calls or meetings, where permitted by law

E. Sensitive information and health-related information

We do not ask Website visitors to provide highly sensitive personal information unless reasonably necessary for a lawful business purpose. If you choose to provide information that may be considered sensitive under applicable law, including limited health-related information in a contact form or support request, we will process that information only as reasonably necessary for the requested purpose, to protect rights and security, to comply with law, or as otherwise permitted or required by law.

2. Sources of personal information

We collect personal information from the following sources:

• Directly from you, such as when you complete a form, request a demo, contact us, subscribe to updates, or communicate with us
• Automatically from your browser or device when you use the Website
• From service providers that support website hosting, analytics, security, communications, and customer relationship management
• From publicly available sources or business partners, to the extent permitted by law

3. How we use personal information

We may use personal information for the following purposes:

• To operate, maintain, secure, and improve the Website
• To respond to inquiries, requests, and communications
• To provide information about our services, events, or updates
• To manage business relationships and prospective customer interactions
• To detect, investigate, and prevent fraud, unauthorized access, security incidents, and other misuse
• To debug, troubleshoot, and monitor performance
• To comply with legal obligations, enforce agreements, and protect our rights, users, personnel, and systems
• To create aggregated or de-identified information where permitted by law
• For other disclosed purposes compatible with the context in which the information was collected

We do not use personal information for purposes that are materially different, unrelated, or incompatible with the purposes described above without providing any required additional notice.

4. Cookies and similar technologies

The Website may use cookies, pixels, tags, SDKs, session replay tools, local storage, log files, and similar technologies for the following purposes:

• Website functionality and security
• Performance and analytics
• Remembering preferences
• Measuring the effectiveness of our communications and website content

Where required by law, we will obtain consent before using non-essential cookies or similar technologies. You may also be able to control cookies through your browser settings and, where available, our cookie preferences tool at cookieyes.com.

If Mammologix uses analytics or similar tools, Mammologix will configure those tools in a manner appropriate to the legal obligations that apply to the Website and the context in which the data is collected.

5. How we disclose personal information

We may disclose personal information to the following categories of recipients:

• Hosting providers, cloud infrastructure providers, and IT support vendors
• Security, monitoring, and fraud-prevention providers
• Website analytics and communications providers
• CRM, email, and customer support vendors
• Professional advisors, including auditors, insurers, and legal counsel
• Government authorities, regulators, law enforcement, or other parties when required by law or necessary to protect rights, safety, or property
• Parties involved in an actual or proposed merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction

Mammologix does not sell personal information for monetary consideration.

Mammologix does not share personal information for cross-context behavioral advertising through the Website.

We may disclose personal information to service providers and contractors that process information on our behalf under appropriate contractual restrictions.

6. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to satisfy legal, operational, contractual, security, and recordkeeping requirements.

Retention periods may vary by category of information and context. In general:

• Contact and inquiry records: up to 24 months after the last substantive interaction, unless a longer period is needed for legal or business records
• Website logs, diagnostics, and security records: typically 12 to 24 months, unless longer retention is needed for security, investigation, backup, or legal purposes
• Marketing preferences and subscription records: until you opt out or the information is no longer needed, subject to reasonable suppression retention to honor your preferences
• Contract or customer-related records: for the duration of the relationship and thereafter as reasonably necessary for compliance, dispute resolution, auditing, or archival purposes

We may retain information for longer where required or permitted by law, or where information has been de-identified or aggregated.

7. Data security

Mammologix uses reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

8. U.S. state privacy rights

Residents of certain U.S. states may have rights under applicable privacy laws, subject to exemptions and verification requirements. Depending on your state of residence and the nature of our processing, these rights may include the right to:

• Confirm whether we process your personal information
• Access personal information
• Correct inaccurate personal information
• Delete personal information
• Obtain a portable copy of certain personal information
• Opt out of the sale of personal information, targeted advertising, or certain profiling in furtherance of decisions that produce legal or similarly significant effects
• Appeal a denial of a privacy rights request
• Limit certain uses of sensitive personal information, where applicable
• Receive equal service and non-discriminatory treatment for exercising privacy rights

To submit a privacy rights request, email privacy@mammologix.com or use our contact form.

To appeal a decision regarding a privacy request, email privacy@mammologix.com with the subject line “Privacy Rights Appeal” within 45 days of the decision, unless a different period is required by applicable law.

We will verify your request using information appropriate to the sensitivity of the request and may deny a request where permitted by law. Authorized agents may make requests where permitted by law, subject to verification.

Where required by law, Mammologix will honor legally recognized universal opt-out preference signals, including Global Privacy Control, for opt-out requests relating to sale or sharing.

9. California-specific disclosures

For California residents, Mammologix provides the disclosures in this section in addition to the rest of this Privacy Policy.

Categories of personal information collected in the preceding 12 months

Mammologix may have collected the following categories of personal information in the preceding 12 months, to the extent applicable to the Website:

• Identifiers
• California customer records information described in Cal. Civ. Code section 1798.80(e)
• Internet or other electronic network activity information
• Geolocation data derived from IP address or similar signals
• Professional or employment-related information
• Inferences drawn from the information above regarding interests in our products or services
• Sensitive personal information, only to the limited extent described in this Privacy Policy

Sources

We collect these categories of information from you directly, automatically from devices and browsers, from service providers, and from publicly available or business sources.

Purposes

We use these categories of information for the business and commercial purposes described in Section 3.

Categories of recipients

We disclose these categories of information to the recipient categories described in Section 5.

Sale or sharing

Mammologix does not sell personal information for monetary consideration. Mammologix does not share personal information for cross-context behavioral advertising through the Website.

Sensitive personal information

To the extent Mammologix processes sensitive personal information, Mammologix uses and discloses that information only for purposes permitted by law or reasonably necessary for the purposes described in this Privacy Policy, unless Mammologix provides any additional required notice and choices.

10. Consumer health data and HIPAA-related notice

This section applies only to the extent Mammologix collects health-related data directly from consumers through the Website outside HIPAA-regulated workflows.

Mammologix may provide separate notices for patient portals, healthcare provider interfaces, support environments, or other services that involve protected health information or regulated customer data. Where a separate HIPAA Notice of Privacy Practices or customer agreement applies, that separate notice or agreement governs.

Mammologix does not intend this Website Privacy Policy to authorize disclosures of protected health information that would require a separate legal basis, authorization, business associate agreement, or other compliance measure under applicable law.

11. International transfers

Mammologix is headquartered in the United States, and personal information may be processed and stored in the United States and other jurisdictions where Mammologix or its service providers operate.

If Mammologix receives personal information from the European Economic Area, the United Kingdom, or Switzerland, Mammologix will rely on an appropriate lawful transfer mechanism for the relevant transfer, such as the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, Standard Contractual Clauses, or another lawful mechanism, as applicable and to the extent available.

12. Children’s privacy

The Website is not directed to children under 13, and Mammologix does not knowingly collect personal information online from children under 13 through the Website. If you believe a child has provided personal information to Mammologix through the Website, please contact us at privacy@mammologix.com, and we will take appropriate steps to review and delete the information where required.

13. Third-party websites and services

The Website may contain links to third-party websites, applications, or services. Mammologix is not responsible for the privacy, security, or content practices of third parties, and you should review their privacy notices before providing information to them.

14. Changes to this Privacy Policy

Mammologix may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last Updated” date above. If required by law, we will provide additional notice or obtain consent for material changes.

15. Contact us

If you have questions, wish to exercise applicable privacy rights, or would like to appeal a privacy request decision, please contact: