PRIVACY POLICY FOR EMOCA.AI

Effective and Last Updated: July 16, 2026

Introduction

Emoca LLC ("Emoca," "we," "our," or "us"), a Massachusetts limited liability company, respects the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share, and safeguard your personal information when you access our website located at emoca.ai (the "Site"), register for an account, or use any of our online clinical decision support tools and services (collectively, the "Services").

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage with a new "last updated" date. If we make material changes, we will provide you with additional notice, such as adding a statement on the homepage of our Site or sending you an email notification. Please review this Privacy Policy periodically.

1. Personal Data We Collect

As a clinical decision support platform, our Services are strictly intended for use by licensed healthcare professionals. We collect information in the following categories:

• Account Registration Data: To access our clinical tools, you must register for an account. During registration, we collect personal data including your name, professional email address, medical specialty, institutional/practice affiliation, and account credentials.
• User-Generated Inputs (Clinical Scenarios): We collect the text, clinical parameters, and data points you input into our tools (such as the AI Discharge Summary Generator) to generate the requested outputs.
• Strict De-Identification Requirement (No Patient PII/PHI): You are strictly prohibited from inputting any Personally Identifiable Information (PII) or Protected Health Information (PHI) belonging to patients. All inputs must be thoroughly and completely de-identified. Emoca does not intentionally collect, and actively discourages the submission of, patient PII or PHI.
• Usage and Device Data: When you visit the Site, we automatically collect certain technical information, including your IP address, browser type, operating system, pages viewed, and the dates/times of your visits.

2. How We Use Your Personal Data

We use the personal data we collect from you to:

• Provide, maintain, and secure your Emoca account and our Services.
• Process your inputs to generate clinical scores, drafts, and summaries.
• Respond to your customer service requests, feedback, or technical inquiries.
• Detect, prevent, and address technical issues, security vulnerabilities, or violations of our Terms of Service.
• Comply with applicable legal, regulatory, or administrative obligations.

3. How We Share Your Personal Data and AI Subprocessing

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Third-Party AI and Infrastructure Service Providers: We utilize highly secure, third-party cloud hosting infrastructure and artificial intelligence API subprocessors (e.g., large language model providers) to process your clinical inputs and generate draft summaries. These providers are bound by strict contractual agreements to keep your data confidential and are configured under enterprise settings that strictly prohibit data retention and model retraining on your inputs.
• No HIPAA Business Associate Agreements (BAAs): Because our platform is strictly designed to handle only de-identified data, Emoca LLC does not enter into Business Associate Agreements (BAAs) at this time. We do not share data with HIPAA-covered entities or execute downstream BAAs.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or subpoena, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Emoca, our users, or the public.

4. Cookies and Other Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to analyze trends, administer the Site, track users’ movements around the Site, and gather demographic information about our user base as a whole. You can control the use of cookies at the individual browser level, but choosing to disable cookies may limit your use of certain features or functions on our Site.

5. Do Not Track Signals

Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Because there is not yet an accepted standard for how to respond to browser DNT signals, our Site does not currently respond to or process DNT signals.

6. Security

The security of your account and the data you process is of paramount importance to us. We employ industry-standard administrative, physical, and technical safeguards designed to protect your account registration data and inputs from unauthorized access, loss, misuse, or alteration.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

7. Third-Party Links

Our Site may contain links to third-party websites, plug-ins, or tools (including external clinical calculators or institutional databases). We do not control these third-party websites and are not responsible for their privacy statements, policies, or practices. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

8. Children's Privacy

Our Services are strictly designed for licensed, adult medical professionals and are not directed to, or intended for use by, children under the age of 18. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected personal data from a child under the age of 18, we will take prompt steps to delete that information from our records.

9. State-Specific Disclosures (Notice to California Residents)

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who use our Services may request once a year, free of charge, information about the personal data (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. Emoca LLC does not disclose personal data to third parties for direct marketing purposes.

10. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us at:

Emoca LLC
Email: info@emoca.ai