Privacy Policy

Last updated: September 17, 2026

Davner, LLC ("Davner," "we," "us," or "our") provides this Privacy Policy to explain how we collect, use, disclose, and otherwise process personal information in connection with our public-facing marketing website and related marketing activities.

1. Scope: the public website and the customer application

This Privacy Policy applies to Davner's public-facing websites and related sales and marketing activities (collectively, the "Marketing Site"), excluding the Services defined below. It does not govern information we process on behalf of customers in providing the Services.

Our authenticated application, customer workspaces, APIs, integrations, and related contracted services (collectively, the "Services") are governed by the applicable customer agreement, data protection terms, and, where applicable, business associate agreement ("BAA"). These agreements govern our handling of information submitted to, maintained in, or otherwise processed through the Services on a customer's behalf ("Customer Data"), including protected health information ("PHI") covered by a BAA. Administrative and account information associated with the Services is subject to the applicable customer agreement and any relevant separate notice; a BAA applies to the information and activities within its scope.

The marketing, analytics, and advertising practices described in this Privacy Policy concern the Marketing Site. They do not grant us permission to use Customer Data or PHI for those purposes. This Privacy Policy does not replace or amend a customer agreement or BAA, expand the uses or disclosures permitted by those agreements, or limit obligations under applicable law. If this Privacy Policy conflicts with an applicable customer agreement or BAA regarding Customer Data, that agreement controls to the extent permitted by law.

The distinction depends on the activity and information involved, not solely on the domain name or whether you have an account. For example, a customer's representative who separately subscribes to marketing communications or visits our public blog interacts with the Marketing Site for those activities.

The Marketing Site is intended for business inquiries. Please do not submit patient information, medical records, PHI, account credentials, or other sensitive information through public contact forms, demo requests, marketing communications, or other public channels. Use the channels designated under your organization's customer agreement instead. Receiving sensitive information through a public channel does not, by itself, make that information marketing data or remove protections required by law or an applicable agreement.

2. Information we collect

Depending on how you interact with the Marketing Site, we may collect the following categories of information:

• Contact and professional information: your name, business email address, phone number, employer, job title, and other business contact details you provide.
• Inquiries and communications: the content of messages, demo requests, scheduling details, survey responses, feedback, and correspondence with our sales or marketing team.
• Device and usage information: IP address, browser and device characteristics, operating system, approximate location inferred from an IP address, referring pages, pages viewed, links clicked, visit times, and diagnostic or performance information.
• Marketing and engagement information: communication preferences, campaign and referral identifiers, and interactions with our marketing emails, content, and advertisements, including opens and clicks where those measurement technologies are used.
• Information from other sources: business contact information, referrals, and campaign or engagement information from public sources, business partners, event organizers, and marketing or advertising providers, where permitted by law.

We collect information directly from you, automatically through your interactions with the Marketing Site, and from the sources described above. We may combine information from these sources and infer business interests from your interactions to make our communications more relevant. The information collected depends on the features and technologies in use and your applicable choices.

3. How we use information

We may use Marketing Site information to:

• Operate, maintain, secure, troubleshoot, and improve the Marketing Site and its content.
• Respond to inquiries, arrange demonstrations, and communicate about prospective business relationships.
• Send product updates, newsletters, invitations, and other marketing communications, subject to applicable consent and opt-out requirements.
• Understand how visitors find and use the Marketing Site and measure content, campaign, and advertising performance.
• Personalize marketing content, identify business audiences, and deliver or measure advertising, including advertising on other websites and services where enabled and permitted.
• Detect and prevent spam, fraud, misuse, and security incidents.
• Comply with legal obligations, enforce applicable agreements, resolve disputes, and establish, exercise, or defend legal claims.

We may also process information for another purpose disclosed at collection or with your consent where required. We may create aggregated or de-identified information and use or disclose it where permitted by law. Where the law requires, we maintain de-identified information in that form and do not attempt to re-identify it except as legally permitted.

4. Cookies, analytics, and advertising

The Marketing Site may use cookies, local storage, pixels, tags, and similar technologies. These technologies can support site functionality and security, remember preferences, measure traffic and performance, and, where deployed, support marketing attribution and advertising. Some analytics operate without cookies. Disabling cookies therefore does not necessarily prevent all collection of technical or usage information.

We use website analytics and performance tools, including Vercel Analytics and Speed Insights. We may also use marketing and advertising providers to measure campaigns, reach business audiences, and show advertisements to people who have visited the Marketing Site. When those advertising technologies are enabled, providers may receive identifiers, device information, browsing activity, and campaign interactions, and may associate that information with activity across other websites, services, or devices according to their own notices and applicable law.

Disclosures for advertising may constitute a "sale," "sharing," or processing for "targeted advertising" under certain privacy laws, even when no money is exchanged. The availability of such practices does not authorize advertising use of Customer Data or PHI governed by a customer agreement or BAA.

You can use browser settings to block or delete cookies and device or advertising-provider settings to limit certain advertising activities. These choices may affect site features and may need to be set separately for each browser or device. They may not stop all advertising or all information collection. See Section 6 for how to submit privacy and advertising opt-out requests.

Where applicable law requires consent for a technology or purpose, that requirement applies independently of this Privacy Policy. Merely visiting the Marketing Site or reading this policy does not constitute consent where affirmative consent is required.

5. How we disclose information

We may disclose the categories of Marketing Site information described in Section 2 as appropriate for the following purposes:

• Service providers: hosting, infrastructure, security, website analytics, communications delivery, scheduling, customer relationship management, and other vendors that help us conduct the activities described in this policy, subject to applicable contractual and legal requirements.
• Advertising and marketing partners: identifiers, device and usage information, and marketing engagement information for the advertising and measurement purposes described in Section 4, subject to applicable choices and legal requirements.
• At your direction: when you request, authorize, or consent to a disclosure, including in connection with a jointly offered event or other activity disclosed to you.
• Professional advisers and legal recipients: lawyers, accountants, auditors, insurers, regulators, courts, law enforcement, or other parties where reasonably necessary to comply with law or legal process, protect rights or safety, investigate misconduct, or establish, exercise, or defend legal claims.
• Business transactions: parties and advisers involved in a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our business or assets, subject to applicable protections and legal requirements.

This section applies to Marketing Site information. It does not expand the recipients or purposes permitted for Customer Data under a customer agreement or BAA.

6. Your choices and U.S. privacy rights

Marketing communications. You may unsubscribe from marketing emails using the unsubscribe instructions in the message or contact us using the details in Section 11. Opting out of marketing does not prevent us from sending non-marketing communications relating to an inquiry, an existing relationship, or legal obligations.

Privacy requests. Depending on your U.S. state of residence, the laws that apply to us, and the information involved, you may have rights to request access to or a copy of personal information; information about its collection, use, and disclosure; correction; deletion; or a portable copy. You may also have a right to opt out of sale, sharing, targeted advertising, or certain profiling, to limit certain uses or disclosures of sensitive personal information, or to revoke consent where applicable. These rights depend on the requirements and exceptions of the applicable state law.

To make a request, contact us using Section 11 and describe your request. For an advertising opt-out, you may use the subject line "Do Not Sell or Share My Personal Information / Targeted Advertising Opt-Out." You do not need to create an account to contact us. Please do not include patient information or medical records in a request.

We may need information to verify your identity or authority for requests that require verification, and to locate the information concerned. An authorized agent may submit a request on your behalf as permitted by law; we may request evidence of authorization. We do not require identity verification for opt-out requests where the law prohibits it. Rights are subject to applicable exceptions, and we may retain or continue to process information where the law permits or requires. We will respond within the time required by applicable law and will not unlawfully discriminate against you for exercising your rights.

Where applicable law requires recognition of browser-based opt-out preference signals, such as Global Privacy Control, those signals must be honored for the processing they cover. The older "Do Not Track" browser setting does not have a uniform industry standard, and the Marketing Site does not currently respond to that setting. This does not limit rights associated with legally recognized opt-out signals.

If we decline a request, you may contact us to appeal the decision where an appeal right applies. You may also submit a complaint to your state attorney general or other appropriate U.S. regulator.

Customer Data requests. If your request concerns information processed through the Services on behalf of a healthcare provider or other customer, contact that organization directly. We handle such requests in accordance with the applicable customer agreement, BAA, and law, including assisting the customer where required. This Marketing Site policy is not a healthcare provider's notice of privacy practices.

7. Retention

We retain Marketing Site personal information for as long as reasonably necessary for the purposes described in this policy, taking into account the nature and sensitivity of the information, the duration of our relationship and your interactions with us, applicable legal requirements, and legitimate needs such as security, dispute resolution, and recordkeeping. Retention periods vary by information type and purpose.

We may retain a limited record of an opt-out or deletion request to honor your preferences and demonstrate compliance. Information may remain in backups until removed through ordinary backup cycles, subject to applicable law. Customer Data retention is governed separately by the applicable customer agreement, BAA, and law.

8. Security

We use safeguards designed to protect Marketing Site personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use appropriate customer-service channels for sensitive information rather than public marketing forms. Nothing in this section limits security obligations imposed by law or an applicable customer agreement or BAA.

9. Third-party services and children

The Marketing Site may link to or include third-party services, such as scheduling tools, social networks, or hosted media. Those third parties may collect information under their own privacy notices. A link does not mean that Davner controls or endorses their privacy practices. Our own processing of information received from those services remains subject to this policy where it falls within its scope.

The Marketing Site is intended for business professionals and is not directed to children under 16. We do not knowingly collect personal information from children under 16 through the Marketing Site or knowingly sell or share their personal information for advertising. If you believe a child has provided personal information through the Marketing Site, please contact us so we can take appropriate action. This section does not govern patient information processed on a customer's behalf through the Services.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in our Marketing Site practices or applicable requirements. We will post the revised policy on this page and update the "Last updated" date. Where required by law, we will provide additional notice or obtain consent before a change takes effect. An update to this policy does not amend a customer agreement or BAA or itself authorize a materially different use of previously collected information where additional consent is required.

11. Contact us

For questions about this Privacy Policy or to submit a privacy request:

Davner, LLC: Privacy Requests

moc.renvad@troppus

14825 N. Outer Forty Rd., Suite 340, Chesterfield, MO 63017, United States

Please identify your request as a Marketing Site privacy request. Do not include PHI, patient records, passwords, or other sensitive information.