01Overview and Scope
Innobot Health (“Innobot,” “we,” “our,” or “us”) is a United States-based healthcare technology company that provides AI-powered revenue cycle management (RCM) automation to hospitals, health systems, provider groups, and RCM and billing companies. This Privacy Policy explains how we collect, use, share, and protect personal information when you:
- visit innobothealth.com and its subdomains (the “Site”);
- submit our contact form or demo request form;
- subscribe to our newsletter;
- read or download content from our resource library, including blogs, articles, case studies, and white papers; or
- interact with us offline at events, webinars, or sales conversations.
The Site is informational. We do not sell products through the Site and we never request or store payment card numbers, bank account details, or other financial account information on the Site.
This Policy applies to visitors worldwide. Region-specific rights for the European Economic Area, the United Kingdom, California, and other jurisdictions are described in Sections 10 and 11.
02An Important Note About Health Information (HIPAA)
Innobot processes Protected Health Information (“PHI”) only in its role as a Business Associate to its healthcare customers, under the Health Insurance Portability and Accountability Act (“HIPAA”) and a signed Business Associate Agreement (“BAA”). That processing happens inside our contracted service environments, not through this Site, and it is governed by the applicable BAA rather than this Policy.
Please do not submit PHI, patient records, or any other individually identifiable health information through the forms on this Site. The Site’s forms are intended for business contact details only. If you believe you have submitted PHI in error, contact us at info@innobothealth.com and we will delete it.
03Information We Collect
Information you provide directly
Contact form
First name, last name, company name, email address, phone number (optional), and the contents of your message.
Demo request form
First name, last name, work email, company name, phone number (optional), your role, your organization’s annual revenue range, your message, and whether you opted in to receive educational content.
Newsletter
Email address.
Content library
If a white paper, case study, or other resource is gated, the business contact details requested on that form. Reading ungated blogs and articles requires no personal information.
Other interactions
Information you share at events and webinars, in sales or support conversations, or in job applications.
Information collected automatically
- Device and usage data: IP address, browser type, operating system, device identifiers, referring pages, pages viewed, links clicked, content downloaded, and timestamps.
- Cookies and similar technologies: as described in Section 5.
- Approximate location: derived from your IP address (city or region level), used for analytics and to comply with regional privacy requirements.
Information from other sources
We may receive business contact information from marketing and sales platforms, event organizers, publicly available professional profiles, and referrals. We do not purchase consumer data broker lists for the Site.
04How We Use Information
We use personal information to:
- respond to your contact form messages and questions;
- schedule and deliver product demonstrations you request;
- deliver the newsletter and, where you have opted in or where otherwise permitted by law, send educational content such as case studies, white papers, and industry updates;
- personalize and improve the Site and our content library;
- measure the performance of our pages, campaigns, and content;
- secure the Site, prevent spam and abuse, and debug issues;
- comply with legal obligations and enforce our terms; and
- evaluate job applications where you submit one.
We do not use personal information collected through the Site for automated decisions that produce legal or similarly significant effects about you.
05Cookies, Analytics, and Tracking
The Site uses the following categories of technologies:
- Strictly necessary: required for the Site to function, including security and form submission.
- Analytics: services such as Google Analytics and Microsoft Clarity help us understand how visitors use the Site, which pages perform well, and where visitors encounter problems.
You can control cookies through your browser settings, and analytics providers offer their own opt-outs. Where required by your region, non-essential cookies are used only with your consent. We honor Global Privacy Control (GPC) signals where legally required and technically feasible.
06How We Share Information
We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act as amended by the CPRA. We share personal information only with:
- Service providers that operate under contract on our behalf, such as website hosting, CRM and marketing automation, analytics providers, and email delivery services;
- Professional advisers such as lawyers, auditors, and insurers where necessary;
- Authorities where required by law, subpoena, or to protect the rights, safety, and property of Innobot, our customers, or others; and
- A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.
07International Visitors and Data Transfers
Innobot is based in the United States and the Site is operated from the United States. If you visit from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.
Where we transfer personal data from regions that restrict international transfers, we rely on appropriate safeguards, including:
- the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) with supplementary technical measures such as encryption in transit and at rest; and
- adequacy decisions or other lawful transfer mechanisms where available.
By using the Site from outside the United States, you understand that your information will be processed as described in this Policy.
08Data Retention
We keep personal information only as long as needed for the purposes described in this Policy, and then delete or de-identify it. As a guide:
- Form submissions and CRM records: for the duration of our business relationship or active conversation, and up to 3 years after the last meaningful interaction;
- Newsletter subscriptions: until you unsubscribe, plus a suppression record so we respect your choice;
- Analytics data: per the retention windows configured with our analytics providers, typically 14 months or less; and
- Legal records: as long as required by applicable law.
09How We Protect Information
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle, including:
- encryption in transit (TLS) and at rest;
- least-privilege access controls and multi-factor authentication;
- network segmentation, monitoring, and logging; and
- periodic security assessments and HIPAA risk analyses for our service environments.
No method of transmission or storage is completely secure. If we learn of a breach affecting your personal information, we will notify you and regulators as required by applicable law.
10Your Rights: United States
Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, and other states with comprehensive privacy laws), you may have the right to:
- know what personal information we have collected about you and access a copy;
- correct inaccurate personal information;
- delete personal information, subject to legal exceptions;
- opt out of sale, sharing, and targeted advertising (we do not sell or share personal information, and we honor GPC signals where required); and
- not receive discriminatory treatment for exercising your rights.
To exercise these rights, email info@innobothealth.com with the subject line “Privacy Request.” We will verify your identity, respond within the timeframe your state law requires (generally 45 days), and keep a record of the request. You may use an authorized agent where your state law allows it.
11Your Rights: EEA, United Kingdom, and Other Regions
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Legitimate interests: operating and securing the Site, responding to business inquiries you initiate, and business-to-business marketing consistent with your reasonable expectations;
- Consent: newsletter subscriptions, optional marketing opt-ins, and non-essential cookies where required;
- Contract: steps you ask us to take before entering an agreement, such as arranging a demo; and
- Legal obligation: where processing is required by law.
You have the right to:
- access, rectify, or erase your personal data;
- restrict or object to processing, including direct marketing;
- data portability;
- withdraw consent at any time, without affecting prior processing; and
- lodge a complaint with your supervisory authority (in the UK, the Information Commissioner’s Office).
Visitors in other jurisdictions (including Canada under PIPEDA and Australia under the Privacy Act) may have similar rights, which we will honor as required by the law that applies to you. Contact us at info@innobothealth.com to exercise any of these rights.
12Email Marketing and Your Choices
Every marketing email we send includes an unsubscribe link that takes effect promptly. Unsubscribing from marketing does not stop transactional messages, such as a direct reply to your contact form message or demo scheduling emails you requested.
Where your jurisdiction requires opt in consent for marketing (for example the EEA, the UK, and Canada), we send marketing only to contacts who have opted in or where another lawful basis such as the business-to-business soft opt-in applies.
13Children's Privacy
The Site and our services are business-to-business and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
14Third Party Sites
The Site links to third party websites and services, including social platforms such as LinkedIn, Instagram, and YouTube. Their privacy practices are governed by their own policies, and we encourage you to review them. We are not responsible for the privacy practices of sites we do not operate.
15Changes to This Policy
We may update this Policy from time to time. The “Last updated” date at the top shows the current version. For material changes we will provide reasonable advance notice on the Site or by email where appropriate. Your continued use of the Site after the effective date of an update constitutes acceptance of the revised Policy.
16How to Contact Us
Questions, requests, and complaints about this Policy or our data practices:
- Email: info@innobothealth.com (subject line “Privacy Request”)
- Phone: (888) 341-1009
- Mail: Innobot Health, 1507 NW 34th Ave, Cape Coral, FL 33993, United States