Privacy Policy

We use personal data for the following purposes:

• To respond to enquiries, demo requests, and support tickets
• To create and manage your account and deliver the Services you have signed up for
• To process payments and manage billing
• To send you product updates, feature announcements, and marketing communications (you can opt out at any time, see Section 7)
• To analyse website usage and improve the performance of our website and advertising campaigns
• To operate, secure, and improve our voice AI platform on behalf of our Customers
• To comply with legal obligations and respond to lawful requests from authorities
• To protect the rights, property, and safety of Confido Health, our users, and the public

We do not sell personal data

We may share your data with:

• Service providers (CRM, cloud hosting, telephony infrastructure, AI inference, analytics, email delivery) who process data on our behalf under data processing agreements and may only use data as directed by us
• Advertising platforms (e.g., Google Ads, LinkedIn) to measure campaign performance and deliver relevant ads, governed by the cookie disclosures in Section 1.3
• Business partners assisting in our operations
• Legal authorities where required by law, court order, or to protect the rights and safety of Confido Health, our users, or the public
• A successor entity in the event of a corporate sale, merger, acquisition, or reorganisation, we will notify you before data is transferred and becomes subject to a different privacy policy

All third-party service providers are required to maintain appropriate confidentiality and security measures. A list of key sub-processors is maintained at confido.health/legal/sub-processors and is updated when we add or change providers.

Our website and supporting systems are primarily hosted in the United States. In some cases, personal data may be processed in other jurisdictions where our service providers operate.

For transfers from the European Economic Area (EEA) or the United Kingdom to the United States or other third countries, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner’s Office to provide appropriate safeguards.

For data of residents of India, we process data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and will update our practices as implementing regulations are issued.

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or misuse. These include encryption of data in transit (TLS 1.2+) and at rest, role-based access controls, multi-factor authentication for internal systems, regular security assessments and penetration testing, and incident response procedures.

Confido Health maintains SOC 2 Type II certification. Contact founders@confido.health to request a copy of our report under NDA.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable law (72 hours for GDPR; without unreasonable delay under U.S. state breach notification laws).

We retain personal data only as long as necessary to:

• Respond to enquiries and requests (up to 24 months from last contact unless you become a Customer)
• Support website operations and analytics (up to 14 months for analytics data; up to 90 days for server logs)
• Manage your account and subscription (duration of relationship plus 7 years for legal and tax records)
• Comply with legal obligations, resolve disputes, and enforce agreements
• Billing and payment records: 7 years from the relevant transaction

We may use third-party advertising services to deliver relevant ads and measure campaign performance. Technologies we use include Google Analytics 4, Google Ads conversion tracking, and Google Tag Manager. We may also use LinkedIn Insight Tag and similar tools.

Because our advertising platforms (including Google Ads) have automated content-scanning systems that review the pages our ads point to, we ensure that our website content, including all product descriptions, customer testimonials, and case studies, accurately represents Confido Health’s software and communications services and contains no references to pharmaceutical products, dietary supplements, or other regulated health products.

You can opt out of targeted advertising via:

• https://optout.networkadvertising.org/
• https://optout.aboutads.info/
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

You can manage your cookie preferences at any time via the Cookie Settings link in our site footer.

Depending on your location, you may have the right to:

• Access your personal data and receive a copy in a portable format
• Correct or update inaccurate or incomplete data
• Request deletion of your personal data, subject to legal exceptions
• Restrict or object to certain processing, including direct marketing
• Opt out of marketing communications at any time (use the unsubscribe link in any email, or contact us below)
• Withdraw consent for processing based on consent, without affecting prior processing

To exercise any of these rights, contact us at:

We may need to verify your identity before fulfilling your request. We will respond within the timeframe required by applicable law (generally 30-45 days, with possible extension for complex requests).

Residents of certain U.S. states have additional rights under their state’s privacy laws. These currently include California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, among others. Healthcare data is classified as sensitive personal information in most of these states.

These additional rights may include:

• Right to know what personal data is collected and how it is used or shared
• Right to request deletion of your personal data
• Right to correct inaccurate personal data
• Right to opt out of the sale or sharing of personal data for cross-context behavioural advertising
• Right to opt out of automated profiling that produces legal or similarly significant effects
• Right to be free from discrimination for exercising these rights

Requests can be submitted by email to founders@confido.health. California residents may also contact the California Privacy Protection Agency or the California Attorney General’s office for assistance.

Our website and Services are intended for business users, specifically personnel of healthcare organisations, and are not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data through our website, please contact founders@confido.health and we will take steps to delete that data promptly.

Our website may contain links to third-party websites, integrations, or resources. This Privacy Policy applies only to www.confido.health and our Services. We are not responsible for the privacy practices or content of any third-party sites and encourage you to review their privacy policies before sharing personal data.

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the Services. Changes will be posted on this page with an updated date.

For material changes, particularly those that affect how we use data you have already provided, we will notify you by email (if we have your address) or by a prominent notice on our website at least 14 days before the change takes effect. Your continued use of our website after the effective date constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please reach out to us: