VisitVizor Privacy Policy

Website: visitvizor.com
Last updated: Aug. 22, 2026

1. Overview

VisitVizor (the "Service") is operated through visitvizor.com (the "Site") by VisitVizor, Inc. ("we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

VisitVizor is a patient-controlled consumer health-record service. You create and control your VisitVizor record by entering or uploading information, and you decide when and with whom to share it.

VisitVizor is not a healthcare provider, health plan, or healthcare clearinghouse. We do not provide medical care, medical advice, diagnosis, or treatment.

2. Information We Collect

2.1 Information you provide

We collect information you provide directly, such as:

• Account information, such as your email address and username.
• Authentication information, such as your password. (We do not store passwords in plain text.)
• Health and related information you upload or enter, such as lab results, medications, and other health details you input.
• Files and documents you upload, including images and PDFs.
• Medical images you upload, including DICOM imaging.
• Derived information, such as text or structured fields extracted from documents when you use features like OCR or document processing.
• Support communications, such as messages you send to us.

2.2 Information collected automatically

We collect limited technical information needed to operate, secure, and improve the Service, such as:

• IP address
• browser type and device information
• approximate location derived from IP address (city/region)
• timestamps (for example, sign-in time and file-processing events)
• security and diagnostic logs (for example, error codes)

We do not sell your personal information or health information.

2.3 Analytics and tracking

We use Simple Analytics to measure basic usage and product performance (for example, page views and product-event counts).

We do not use third-party advertising trackers, cross-site behavioral tracking, or ad-network pixels.

We do not use analytics to build advertising profiles.

3. Cookies and Similar Technologies

We may use essential cookies, local storage, and similar technologies to:

• keep you signed in and maintain session state
• help prevent fraud and abuse
• remember preferences needed for core functionality

We do not use your health information for behavioral advertising. We do not use third-party advertising cookies or cross-site tracking cookies.

4. How We Use Information

We use information to:

• create and manage your account
• provide core functionality (store, organize, display, and let you manage your information)
• process documents and images you submit at your direction (for example, extracting text to help organize your records)
• secure the Service, prevent abuse, and enforce our Terms
• troubleshoot bugs, monitor performance, and improve reliability
• communicate with you about service-related matters (for example, verification emails, security notices, and support replies)

De-identified or aggregated data

We may create de-identified or aggregated data (data that is not reasonably linkable to you) for operational and product improvement purposes (for example, performance metrics).

5. How We Share Information

We do not share your personal information or health information except in these limited circumstances:

5.1 At your direction

You may direct us to share information by exporting or downloading it, or by authorizing specific recipients through the Service. Depending on the feature you choose, recipients may include doctors, care managers, imaging centers, health plans, family members, caregivers, and other people or organizations you select.

Where the Service offers these choices, you can select the information to share and whether access is temporary, time-limited, or continuing until you remove it. VisitVizor facilitates the access you direct. Patient-directed access alone does not mean that VisitVizor is providing the Service on behalf of the recipient.

You can revoke an invitation or remove a recipient's future access through the available Service controls. Revocation stops future access through VisitVizor, but it cannot retract information or copies that a recipient already lawfully received or saved.

When the applicable feature and your authorization permit it, an authorized organization may save an immutable copy of information you shared for its records. A healthcare provider or health plan that receives information may have its own legal, professional, confidentiality, and recordkeeping obligations, including obligations under HIPAA where applicable.

5.2 With service providers

We use vendors to host, process, and secure the Service. Service providers are authorized to access information only as needed to provide services to us, and they are required to protect it.

5.3 For legal and safety reasons

We may disclose information if we believe in good faith that disclosure is necessary to:

• comply with law or legal process
• respond to lawful requests
• protect our rights and the rights, safety, and security of users or the public
• detect, prevent, or address fraud, abuse, or security issues

5.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. Any transferred information will remain subject to this Privacy Policy unless you are notified otherwise.

5.5 No sale of data to third parties

We do not sell, rent, or broker your personal information or health information to third parties.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, such as encryption in transit and at rest, access controls, and logging/auditing.

6.1 HIPAA-aligned safeguards and organization services

Our privacy and security safeguards are informed by HIPAA principles and are designed to support HIPAA-aligned use where appropriate. These safeguards do not mean that all information in VisitVizor is protected health information under HIPAA, that every use of the Service is governed by HIPAA, or that VisitVizor has received any HIPAA certification.

For certain separately contracted organization services, VisitVizor may create, receive, maintain, or transmit protected health information on behalf of a healthcare provider, health plan, or other covered entity or business associate. In those specific relationships, VisitVizor may act as a HIPAA business associate under a separate organization agreement and Business Associate Agreement (BAA). If a BAA conflicts with this Privacy Policy concerning PHI covered by that BAA, the BAA controls for that PHI.

Whether or not HIPAA applies in a particular situation, consumer health information remains protected under this Privacy Policy and applicable consumer privacy and breach-notification laws.

No method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your credentials and using the Service on devices you trust.

7. Data Retention

We retain information for as long as necessary to:

• provide the Service
• maintain security and operational integrity
• comply with legal obligations
• resolve disputes and enforce agreements

8. Your Choices and Controls

8.1 Access and updates

You may update certain account information through the Service.

8.2 Deleting health data and files

You may delete health data and uploaded files through the Service features in your account.

8.3 Account deletion

You may request deletion of your account by contacting us at privacy@visitvizor.com.

When you request account deletion, we will take steps to delete or de-identify your information consistent with applicable law and our retention and backup practices.

Backups: If information you request to delete is stored only in archived or backup systems, deletion may be delayed for a limited period as those systems rotate and are restored as needed for continuity and security.

9. U.S. State Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information, and to appeal certain decisions.

To submit a request, contact privacy@visitvizor.com.

Washington consumer health data

If you are a Washington resident (or your consumer health data is collected in Washington), please also review our Consumer Health Data Privacy Policy (Washington).

10. Children’s Privacy

The Service is not intended for children under 13 (or under 16 where required by law). We do not knowingly collect personal information from children.

11. International Users

If you access the Service from outside the United States, your information may be processed and stored in the United States or other locations where our service providers operate.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and may provide additional notice for material changes.

13. Contact Us

VisitVizor Privacy

Email: privacy@visitvizor.com