This is some text inside of a div block.

Privacy Policy

Effective Date: November 4, 2026

UrgentIQ Inc. (“UrgentIQ,” “we,” “us,” or “our”) provides this Privacy Policy to our website visitors and customers to help you understand how we collect, use, process, and share your personal information, and to help you understand and exercise your privacy rights. This Privacy Policy applies to information we collect from visitors to our website https://www.urgentiq.com and any related webpages or websites (the “Site”), and users of our mobile applications and any other platforms, technologies, products, web or mobile applications, and on- and off-line services we offer (collectively with the Site, the “Services”). This Privacy Policy incorporates our Terms of Service (available at https://www.urgentiq.com/terms), which governs your use of our Services.

UrgentIQ provides software and related services to healthcare practices and providers. When we provide our Services to those business customers, we may process personal information, including protected health information (“PHI”), on our customers’ behalf and at their direction. This Privacy Policy does not apply to any personal information, including PHI, that we process on behalf of our customers through their use of our Services (“Customer Data”). Our processing of Customer Data is governed by the contracts we have in place with our customers, including business associate agreements, and by our customers’ own privacy notices and legal obligations, not by this Privacy Policy. Any questions or requests relating to Customer Data should be directed to the applicable healthcare provider as described in Section 8.

This Privacy Policy does not apply to third-party websites, applications, products, services, or other properties, even if our Services link to them or vice versa. We recommend that you review the privacy practices of those third parties before sharing personal data with them.

Please note that we are providing the following disclosures and rights in this Privacy Policy in the interest of transparency and in furtherance of our privacy commitment to you. Such disclosures and rights are not intended to waive any applicable exemptions under state and federal law.

‍

1. Sources of Personal Data — We collect personal data when you interact with us through our Services and by other means.

2. Personal Data We Collect — We collect various types of personal data, in accordance with applicable law.

3. Use of Personal Data — We use personal data for different purposes in connection with your use of our Services.

4. Disclosure of Personal Data — We may disclose personal data to certain third parties, including our service providers.

5. Cookies — We collect information about your use of our Services through cookies and similar technologies.

6. Children’s Privacy — Our Services are intended for use by adults acting on behalf of healthcare practices.

7. Data Security, Retention, and Transfers — We use reasonable measures to protect personal data and retain it as long as necessary.

8. Protected Health Information and HIPAA — We describe how we handle protected health information as a healthcare vendor.

9. Your Privacy Rights and Choices — You may have certain choices and rights regarding your personal data.

10. Supplemental U.S. State Notices — We provide additional information for residents of certain states.

11. Updates to this Privacy Policy — Updates become effective on the date they are posted.

12. Contact Us — You may contact us for comments or questions in various ways.

‍

1. Sources of Personal Data

As used in this Privacy Policy, “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual and includes “personal information” and “personally identifiable information” as those terms are defined in privacy laws. Personal data does not include publicly available information; lawfully obtained, truthful information that is a matter of public concern; information that has been de-identified or anonymized; or aggregate information.

Please note that we may create aggregated, de-identified, or anonymized information from data by removing certain data components that make the data identifiable, or through aggregation, obfuscation, or other means. Subject to applicable law, our use and disclosure of aggregated, de-identified, or anonymized information is not personal data and is not subject to this Privacy Policy.

We may collect personal data about you from the following sources:

Directly from you. We may collect personal data you provide to us directly, such as when you register for our Services, use our Services, contact us, request customer or technical support, or otherwise interact with us.
Data collected automatically and through tracking technologies. Our Services may use cookies and similar technologies such as web beacons, embedded scripts, and tags (collectively, “Cookies”).
From our customers and healthcare providers. We may collect personal data from our customers, including healthcare practices and providers, in accordance with applicable law and the context in which the data was provided.
Service providers. We collect personal data from our service providers, including those providing hosting, payment, analytics, customer and technical support, email services, and other services.
Third-Party Business Partners. We may collect information from other third-party business partners, which may include business and marketing partners. In this Privacy Policy, we refer to these third parties as “Third-Party Business Partners.”
Through AI features we offer. We may also collect personal data through your use of artificial intelligence and machine-learning features we offer (“AI Features”). For example, we may collect personal data you include in your prompts and other inputs, and personal data that is automatically generated from your use of AI Features, including AI-generated responses and outputs and any annotations, feedback, or edits you make to those outputs. To the extent AI Features are used to process protected health information on behalf of our customers, that information is Customer Data and is handled in accordance with Section 8.

We may combine the personal data we receive from third parties with personal data we otherwise collect about you through your use of our Services.

‍

2. Personal Data We Collect

The categories of personal data we collect depend on how you interact with us and the requirements of applicable law. The following is a good-faith summary of the categories of personal data that may be processed in connection with our Services. This list does not represent the data that we process for every individual or use case. Much of the clinical and health-related information described below is PHI that we process on behalf of our customers as Customer Data, as described in Section 8.

We may collect the following types of personal data:

Identifiers, such as your first and last name, mailing address, phone number, email address, government identification numbers (such as Social Security number, driver’s license, or passport for identity verification), emergency contact information, and account or patient portal login credentials.
Demographic information, such as age (including date of birth), sex/gender, race, ethnicity, and preferred language.
Professional or employment-related information, such as, for clinicians: medical specialty, practice group, hospital affiliation or privileges, professional license numbers, NPI, DEA number, board certifications, malpractice and insurance details, education and training history, employment history, and background check and credentialing verification records; and, for UrgentIQ personnel or job applicants: job description and status, resume, education, certifications, experience, background checks, payroll, salary or wages, direct deposit and tax withholding data, and I-9/work authorization documents.
Health, medical, and insurance information, such as patient-reported symptoms, medical history, appointment times, HIPAA consent forms, insurance billing and claims information, and other PHI that we process on behalf of our customers. This data is treated as Customer Data as described in Section 8.
Browser and device data, such as IP address; geolocation information; device identifier; device type; operating system and Internet browser type; screen resolution; device manufacturer and model; and the language version of our Services.
Usage data, such as time spent on our Services; pages visited; searches conducted; links clicked; check-in timestamps; patterns of use; the pages that led or referred you to our Services; and diagnostic data, including crash reports.
Audio, electronic, visual, or other sensory information, such as chat recordings.
Records about you, such as the content, timing, and method of communications you have with us, such as via email; and information you share with or upload to our Services.
Other information you choose to provide to us, such as information in response to surveys, forms, questionnaires, email, features on our Services, engaging with customer service, or while using the Services.
Inferences drawn from any of the information we collect to create a profile reflecting your preferences or behavior.

‍

3. Use of Personal Data

We may use the personal data we collect for the following purposes:

To provide, operate, maintain, improve, personalize, and expand our Services, including to healthcare practices and providers.
To communicate with you, including to provide customer service and provide you with updates about our Services.
To perform internal analytics, research, and development, including to analyze usage patterns, test new features, conduct research, and develop new products and services.
For internal business purposes, including general business administration.
For systems and data security, including to detect, investigate, and prevent fraudulent, unauthorized, improper, or illegal activities on our Services.
To protect the rights and safety of UrgentIQ, our users, and the public.
To comply with our legal obligations, including responding to subpoenas, court orders, or legal process; to enforce the legal or contractual terms that govern our Services; and to otherwise establish or exercise our legal rights or defenses against legal claims.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us is among the assets transferred.
For purposes disclosed at the time you provide your information, with your consent, as otherwise set forth in this Privacy Policy, or for any other legal purpose not inconsistent with this Privacy Policy.

We may use products, features, or tools that utilize artificial intelligence, machine learning, or similar technologies for any of the above purposes. If we use your personal data to train our AI models, we will only do so with your explicit consent.

‍

4. Disclosure of Personal Data

We may disclose personal data to the following categories of third parties:

Service providers. We may disclose personal data to our service providers that provide services on our behalf, such as hosting, payment processing, analytics, customer and technical support, and other services. For example, we may use a third-party payment processor to process credit card payments.
Third-Party Business Partners. We may disclose personal data to Third-Party Business Partners, including as part of our business development and administrative initiatives.
Business transferees. If we or our affiliates are involved in a merger, acquisition, asset sale, or other corporate combination, your personal data may be transferred to the acquiring or surviving entity.
Professional advisors. We may disclose personal data to our professional advisors, including attorneys, auditors, bankers, and insurers, where necessary in the course of the professional services they render to us.
Authorities for compliance and harm prevention. Under certain circumstances, we may be required to disclose your personal data if required to do so by law, in response to valid requests by public authorities, and/or in response to a threat of harm involving an individual’s health and/or safety.
Other parties with your consent. We may disclose personal data to other parties with your consent.

Our disclosure of PHI is limited to disclosures permitted by our customer agreements, including business associate agreements, and by HIPAA and other applicable law, as described in Section 8.

‍

5. Cookies

We use Cookies that collect information to improve and analyze our Services. Some Cookies are offered by third parties who collect your personal data so they can provide services to us and information about your online activity. You can modify your browser settings to decline or accept certain Cookies. However, if you decline certain Cookies, some of our Services’ features may not function as designed. Cookies on the Services generally fall into the following categories:

Strictly Necessary. Cookies that we consider strictly necessary to allow you to use and access our Services, including Cookies required to prevent fraudulent activity and improve security.
Functionality. Cookies that are required to offer you enhanced functionality when accessing our Services, including to identify you when using our Services or to keep track of your specified preferences.
Performance/Analytics. Cookies to assess the performance of our Services, including as part of our analytics practices. For example, we may use Google Analytics or other service providers for analytics services. Information generated by these services (e.g., your browser, device, and usage data) may be transmitted to and stored by these service providers on servers in the U.S. or elsewhere. You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or by downloading the Google Analytics Opt-out Browser Add-on.

Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party websites or online services (e.g., browser “Do Not Track” signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms, unless otherwise required by applicable law.

‍

6. Children’s Privacy

Our Services are not directed to or intended for children, and we do not knowingly collect any personal data from anyone acting alone under the age of 18. To the extent information about a minor is processed through our Services in connection with the provision of healthcare (for example, where a minor presents as a patient, accompanied by an adult), that information is generally PHI processed on behalf of our customers as Customer Data and is handled in accordance with Section 8 and applicable law. If you believe that a child has provided information to us other than in that context, please email support@urgentiq.com and we will do our best to promptly delete such information.

‍

7. Data Security, Retention, and Transfers

The security of your personal data is important to us, but no method of transmission over the Internet, or method of electronic storage, is 100% secure. We maintain appropriate technical, administrative, and physical safeguards designed to protect the security of your personal data against unauthorized access, destruction, loss, alteration, disclosure, or misuse, but we cannot guarantee its absolute security. Where we process PHI, we maintain safeguards designed to comply with the HIPAA Security Rule and our customer agreements.

We will retain personal data for as long as necessary for the purposes outlined in this Privacy Policy, including complying with any legal obligations or policies, resolving disputes, enforcing legal agreements, and for internal analytics purposes. Our determination of precise retention periods will be based on: (a) the length of time we have an ongoing relationship with you; (b) whether there is a legal obligation to which we are subject; and (c) whether retention is advisable in light of our legal position, including with regard to applicable statutes of limitations, litigation, or regulatory investigations. Our retention and disposal of Customer Data, including protected health information, is governed by our customer agreements.

We store personal data in the cloud, in data center regions located in the United States. Certain personnel and service providers who support our Services, or who provide services such as billing processing at the request of our customers, may access personal data from locations outside the United States. Where personal data is transferred to or accessed from a jurisdiction with data protection laws that differ from those of your jurisdiction, we take measures designed to ensure that your personal data receives an adequate level of protection.

‍

8. Protected Health Information and HIPAA

When providing Services to healthcare-practice or provider customers, UrgentIQ typically acts as a “business associate” as defined under HIPAA for customers that are “covered entities” or their other business associates. In those instances, UrgentIQ’s use and disclosure of Customer Data that contains PHI is governed solely by its business associate agreements with customers, the customers’ own notices of privacy practices and HIPAA obligations, and applicable law—not by this Privacy Policy. Individuals who wish to exercise rights over their PHI or have questions about how their PHI is used or disclosed should contact the applicable healthcare provider or other customer.

Personal data that UrgentIQ collects and processes for its own purposes — including information about website visitors, prospective customers, account administrators, and UrgentIQ’s own business and marketing operations—is not PHI and is governed by this Privacy Policy.

‍

9. Your Privacy Rights and Choices

You may have certain choices and rights regarding our collection, use, and disclosure of your personal data, based on your location or place of residency.

A. Opting Out of Promotional Communications

We may use your personal data to send you email updates regarding our Services, other announcements, and inquiries. If you no longer wish to receive promotional email messages from us, you may opt out via the unsubscribe link included in such emails or by emailing us at support@urgentiq.com. We will comply with your request as soon as reasonably practicable. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required to provide you with the Services or for other reasons disclosed in this Privacy Policy.

In addition, with your consent, we may send you SMS messages for promotional purposes, internal business purposes, internal user research, and to provide customer service, including troubleshooting. To cancel an SMS service at any time, text “STOP” to any text message you receive. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have unsubscribed. After this, you should no longer receive SMS messages from us. If you experience issues with our text messaging program, you can text “HELP” for more assistance or email us at support@urgentiq.com.

B. Updating Your Information

If you have an online account with us, you may review, update, or correct your account information by logging in and adjusting your account settings. If you need assistance updating your information, you may also contact us at support@urgentiq.com.

‍

10. Supplemental U.S. State Notices

This Privacy Policy is directed to individuals in the United States. The following supplemental notices provide more information for residents of certain U.S. states.

A. Notice for California Residents

California Shine the Light. The California “Shine the Light” law permits users who are California residents to request and obtain from us, once a year and free of charge, a list of the third parties to whom we have disclosed their personal data (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties.

Rights for minors. Where required by law, California residents under the age of 18 may request to have their posted content or information removed from the publicly viewable portions of the Services by contacting us as set forth in “Contact Us” below.

B. Notice for Nevada Residents

If you are a resident of Nevada, you technically have the right to opt out of the sale of your personal information to third parties who intend to license or sell that personal information. However, please note that we do not currently sell your personal information as “sale” is defined in Nevada Revised Statutes Chapter 603A.

‍

11. Updates to this Privacy Policy

We may change this Privacy Policy from time to time to reflect changes in our data practices or applicable law. We provide notice of any changes consistent with applicable law, including by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this Privacy Policy. We recommend periodically reviewing this page for changes. Updates to this Privacy Policy are effective when they are posted on this page.

‍

12. Contact Us

UrgentIQ Inc. is the controller of the personal data we process for our own purposes under this Privacy Policy. If you have questions or concerns regarding this Privacy Policy, or wish to exercise your rights as detailed in this Privacy Policy, please contact us at support@urgentiq.com. Questions or requests relating to PHI or other Customer Data should be directed to the applicable healthcare provider or other customer, as described in Section 8.