Privacy Policy

1. Introduction

ElectroKare, Inc. ("the Company," "we," "us," or "our") operates the website goelectrokare.com (the "Service"). ElectroKare, Inc. is an AI cardiac monitoring company headquartered at 205 North Michigan Avenue, Suite 1400, Chicago, IL 60601. Our platform reads ECG patch data recorded by patients at home, applies AI analysis to detect arrhythmia patterns across seven rhythm categories, and routes priority alerts to the subscribing cardiology practice before the next scheduled visit.

This Privacy Policy explains what information we collect through the Service, how we use it, and the choices you have. Because ElectroKare handles data relating to cardiac health monitoring, we take the sensitivity of that information seriously and describe our data practices in concrete terms below.

Reach us any time at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly through the Service, including:

• Contact and professional details (name, email address, phone number, title, and practice name) when you fill out a demo request form, a contact inquiry, or a trial registration;
• Clinic information you choose to share (practice type, estimated patient monitoring volume, EHR environment);
• The content of any messages or questions you send us through the Service.

2.2 ECG Patch Data and Health-Related Information

The ElectroKare platform processes ECG patch recordings uploaded by credentialed cardiology practices on behalf of their patients. This data constitutes health information. We process it only to perform the contracted services: arrhythmia classification, alert priority scoring, and routing results to the subscribing cardiologist. We do not use ECG patch recordings or resulting health data to train machine-learning models without explicit written agreement from the uploading practice. Practices retain ownership of patient data they submit; we act as a data processor on their behalf. Patient-identifiable ECG data is handled with the care appropriate to protected health information.

This website (goelectrokare.com) is a marketing and onboarding service. ECG patch processing occurs within the ElectroKare clinic portal, which is governed by the data-processing agreement entered into when a practice subscribes. The information handling described in this Privacy Policy covers the marketing website and inquiry-handling activities.

2.3 Information Collected Automatically

When you visit goelectrokare.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

goelectrokare.com is directed at healthcare professionals and is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to demo requests, clinical inquiries, and trial sign-ups from cardiology practices evaluating the platform;
• Operate, maintain, and improve the Service and the cardiac monitoring platform;
• Send service updates and (with your consent where required) communications about new features or clinical evidence;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations applicable to our business, including obligations relevant to handling health-related data.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see the state-specific section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (for example, cloud hosting, email delivery, and anonymized analytics) under contractual confidentiality and data-handling terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain contact and inquiry information for as long as needed to manage our relationship with your practice, then for up to 24 months after last contact before purging marketing-list records. ECG patch data processed through the clinic portal is retained according to the subscription tier in effect (90 days for Practice, 180 days for Clinic, 12 months for Network) and then deleted unless the practice requests archival export before cancellation. Server access logs are retained 90 days, then aggregated. We retain records longer when required to comply with a legal obligation.

7. Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of health-adjacent data. These include TLS 1.3 encryption in transit for all data transfers to and from the platform, encryption at rest for stored patient ECG data, de-identified patient identifiers used in transit, restricted-access databases with least-privilege access controls, and access audit trails. No system is perfectly secure; we cannot guarantee absolute security, and we encourage practices to follow their own data-security policies when configuring alert routing and EHR exports.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Illinois Residents

Illinois does not currently have a comprehensive consumer privacy statute. As a matter of policy, we extend the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (such as HIPAA, GLBA, or FERPA), those laws may give you additional rights with respect to data covered by them. In particular, patient health data processed within the ElectroKare clinic portal is subject to the data-processing terms agreed by the subscribing practice, which address obligations under applicable federal health privacy frameworks.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: