CareOS Privacy Policy

1. Information We Collect

• Account information: name, email address, role, organization, branch access, and sign-in activity.
• Operational information: products, stock, batches, suppliers, sales, returns, payments, reports, and audit records entered by your organization.
• Patient or customer information: details your organization chooses to record, such as names, contact information, and purchase history.
• Device and technical information: device identifiers, synchronization records, diagnostic events, browser information, and security logs.

2. How We Use Information

We use information to provide and secure CareOS, synchronize connected devices, maintain accurate operational records, generate requested reports, troubleshoot issues, communicate about the service, and improve reliability. We use access controls so that users can only view or manage information allowed by their organization and role.

3. Your Organization’s Responsibility

Your organization controls the business and patient information entered into its CareOS workspace. The organization is responsible for choosing what to collect, assigning appropriate access, keeping account details accurate, and meeting its own legal and professional obligations. If you have a question about information in your workspace, contact your organization’s CareOS administrator first.

4. Sharing Information

We do not sell personal information. We may share information with service providers that help us host, secure, maintain, or support CareOS, and when required to comply with law, protect the service, or respond to a valid legal process. Service providers may only use information to perform services for CareOS.

5. Retention and Deletion

We retain information for as long as needed to provide the service, support your organization’s records, meet legal or operational requirements, resolve disputes, and enforce agreements. Retention and deletion requests for workspace information should be made through your organization’s administrator or service representative.

6. Security

CareOS uses technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, and loss. No online service can guarantee absolute security, so users should protect their credentials, use approved devices, and report suspected unauthorized access promptly.

7. Cookies and Similar Technologies

CareOS may use essential cookies and similar technologies to maintain sessions, remember security settings, and support core application functions. Disabling these technologies may prevent sign-in or other features from working correctly.

8. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. To exercise a right relating to a CareOS workspace, contact your organization or service representative. We may need to verify your identity and coordinate with the organization that controls the relevant information.

9. Changes to This Policy

We may update this Policy as CareOS changes or as legal requirements develop. We will post the updated version on this page and revise the effective date. Continued use of CareOS after an update means the updated Policy applies to future use of the service.

10. Contact Us

For privacy questions, requests, or concerns, contact your organization’s CareOS administrator or your CareOS service representative. They can route workspace-specific requests to the appropriate support contact.