Privacy Policy

1. Introduction

Welcome to SangHealth ("SangHealth," "we," "us," or "our"), a product of SANG Innovations Inc. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website at www.sanghealth.com (the "Site"). SangHealth is an AI-powered Patient Blood Management (PBM) technology platform, and the Site provides information about our products, educational resources for healthcare professionals and organizations, and a means to request a demo or contact our team.

By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Site.

This Privacy Policy governs the Site only. Use of the SangHealth platform itself by a healthcare organization and its personnel — including any handling of protected health information (PHI) — is governed by a separate customer agreement and, where applicable, a Business Associate Agreement, not by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information when you voluntarily submit it to us — through our early access (waitlist) request form, through any contact or demo request form we make available, or by typing it into the AI chat assistant described in Section 2.5. Depending on which of these you use, the information we collect may include:

• First and last name
• Email address
• Phone number
• Job title or professional role
• Organization or company name
• Your message or inquiry, including details about your organization's interest in the SangHealth platform

We do not require you to create an account to access general content on the Site. Product information, educational resources, and other public content are freely available without registration.

2.2 Automatically Collected Information

When you visit the Site, certain technical information may be collected automatically by standard web technologies, including:

• Browser type and version
• Device type and operating system
• IP address (used for general geographic analytics, not individual identification)
• Pages visited and time spent on the Site
• Referring URL (how you arrived at the Site)
• Mouse movements, clicks, scrolls, and navigation patterns
• Session replays and heatmap data reflecting on-page interactions

This information is used to understand how visitors use our Site and to improve the user experience. It is not used to identify individual users.

2.3 Behavioral Analytics

We may use one or more behavioral analytics tools to better understand how visitors interact with our Site. These tools may capture data such as:

• Session recordings (anonymized replays of user navigation and interactions)
• Heatmaps showing aggregated click, scroll, and attention patterns
• Page engagement metrics including time on page and click sequences
• Device, browser, and operating system information

These tools use cookies and similar tracking technologies to collect this data. Session recordings are configured, where the tool allows, not to capture keystrokes entered into sensitive fields and to mask personally identifiable information.

Data collected through behavioral analytics tools is processed and stored by the applicable provider in accordance with that provider's own privacy statement. By using our Site, you acknowledge and consent to the use of behavioral analytics tools for these purposes.

If you wish to opt out of behavioral analytics tracking, you may do so by enabling the Do Not Track (DNT) setting in your browser or using a browser extension that blocks analytics scripts.

2.5 AI Chat Assistant

The Site offers an AI chat assistant that answers questions about patient blood management and SangHealth. When you send a message, the content of that message and the preceding messages in your conversation are transmitted to our third-party AI provider, OpenAI, which generates the reply. Your message content and the IP address of your request are also recorded in our server logs, which we use for troubleshooting, rate limiting, and abuse prevention. Conversations are not linked to an account and are not used to build a profile of you.

The chat assistant is a general informational tool and is not a clinical system. Please do not enter protected health information (PHI), patient identifiers, patient records, or your own health information into the chat. Any information you type into the chat is collected as described in this Section, and we ask that you limit it to the professional and organizational details relevant to your inquiry.

2.4 Cookies and Similar Technologies

Our Site uses cookies — small text files stored on your device — to support standard website functionality, behavioral analytics, and general usage measurement. You can control or disable cookies through your browser settings; however, doing so may limit certain Site features or prevent behavioral analytics tools from functioning. We do not use cookies to serve advertising or to track your activity across unrelated third-party websites.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiry, contact form submission, or demo request
• To communicate with you about topics you have raised, including scheduling and following up on product demonstrations
• To improve the functionality and content of the Site
• To analyze user behavior and interaction patterns to enhance the user experience
• To understand general usage patterns through aggregate analytics
• To comply with applicable legal obligations

We do not use your personal information for automated decision-making or profiling, and we do not sell, rent, or lease your personal information to any third party.

4. Third-Party Links

The Site may contain links to third-party websites. When you click such a link and visit a third-party website, you leave our Site. Those third-party websites have their own privacy policies and data practices, which we do not control and are not responsible for. We encourage you to review the privacy policy of any third-party site you visit.

5. How We Share Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the limited circumstances described below:

• Service Providers: We may share your information with trusted third-party service providers who assist in operating our Site (e.g., website hosting, email delivery, analytics platforms, and the AI provider that powers our chat assistant, OpenAI). These providers are contractually obligated to keep your information confidential and to use it only for the purposes we specify.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via the Site if such a change occurs.

Under no circumstances do we share your personal information with third parties for their own marketing purposes.

6. Data Retention

We retain personal information you submit through our request forms only for as long as necessary to fulfill the purpose for which it was collected — generally, to respond to your inquiry, pursue a business relationship, and any reasonable follow-up communication — and as required by applicable law. Chat messages sent to our AI provider are handled under that provider's data retention terms, and chat content appearing in our server logs is retained only for the limited operational period described in Section 2.5. Behavioral data collected through analytics tools is retained in accordance with the applicable provider's data retention policies. When your information is no longer needed, we will securely delete or anonymize it.

7. Data Security

We take reasonable technical and organizational measures to protect the personal information we collect from unauthorized access, disclosure, alteration, or destruction. These measures include use of secure HTTPS connections and access controls on systems that store your data.

However, no method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

This Site is not designed to collect, store, or process protected health information (PHI), and we ask that you not submit PHI through the Site's forms or chat assistant. Any PHI a visitor chooses to enter is handled as ordinary Site content under this Privacy Policy, not under a Business Associate Agreement. Security, privacy, and breach-notification obligations applicable to PHI processed through the SangHealth platform are addressed separately in the applicable customer agreement and Business Associate Agreement.

8. Children's Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete it.

9. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent where processing is based on consent
• Opt out of behavioral tracking (see Section 2.3)
• Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us using the information in Section 11 below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

10. California Residents — Additional Disclosures

If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with additional rights regarding your personal information. Specifically, you have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the sale of personal information. We do not sell personal information. Behavioral analytics data collected through third-party analytics tools is processed by those providers as service providers on our behalf and is not sold. To submit a request under the CCPA, please contact us using the details in Section 11.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:

You may also use the contact form available on our Site to reach us directly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Site's features, or applicable law. When we do, we will revise the Effective Date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.