Privacy Policy for Pivotal Health Technologies, Inc.
Last Updated: August 5, 2026
Pivotal Health Technologies, Inc., doing business as "Pivotal Health" ("Pivotal Health," "Company," "we,""us," or "our"), respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our website located at pivotalhealth.ai (the"Site"), our related online properties, and our interactionswith visitors, prospective clients, current clients, and their authorized users (collectively, "you"). This Privacy Policy does not apply toinformation that we may process on behalf of our healthcare provider clients as their business associate under the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA"). That processing is governed by the applicable business associate agreement between Pivotal Health and the client, not by this Privacy Policy, as explained furtherin Section 3.
By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Site.
Pivotal Health Technologies, Inc. is a healthcare technology and services company that helps physician groups, hospitals, health systems, and other healthcare providers pursue fair, out-of-network reimbursement through the Independent Dispute Resolution (“IDR”) process established under the No Surprises Act, payer negotiations, and related revenue-cycle analytics and services. Our principal place of business is 1335 4th St., Fl 3, Santa Monica, CA 90401.
The Site is a business-to-business platform. It is designed for, marketed to, and used byphysician groups, hospitals, health systems, and other healthcare provider organizations, and by the individuals who work for those organizations in a professional capacity. The Site is not directed to, marketed to, or intended for use by individual consumers for personal, family, or household purposes,and we do not knowingly collect personal information from individuals for personal, family, or household purposes. Each category of personal information described in this Section is collected from you in your capacity as a business contact, prospective client representative, client representative, or job applicant, and not as an individual consumer.
We collect the categories of personal information described below. Not every category applies to every visitor; the information we collect about you depends on how you interact with the Site.
(a) Identifiers. Your name, business email address, phone number, employer or organization name, job title, and similar contact details, such as when you request a demo, subscribe tocommunications, or otherwise contact us.
(b) Account and Login Information. If your organization is a Pivotal Health client, the credentials and related account information necessary for you, as an authorized representative of your employer, to access our client platform.
(c) Commercial Information. Information about the services you or your organization have inquired about or purchased, and your preferences in connection with those services.
(d) Internet or Other Electronic Network Activity Information. Information about your interaction with the Site, including pages viewed, links clicked, referring and exit pages, browser type, device identifiers, and approximate location derived from your IP address, collected through cookies and similar technologies described in Section 5.
(e) Professional or Employment-Related Information. If you apply for a position with us throughthe Careers page of the Site, your application is submitted directly to and processed by our applicant tracking system provider, Ashby, Inc. (“Ashby”). We do not separately collect or store your application in our own systems. Ashby's handling of your information is governed by Ashby's own privacy policy,not by this Privacy Policy.
(f) Inferences. We maygenerate inferences about your likely interests or organizational role based onthe information described above, for the purposes described in Section 4.
We do not knowingly collect Social Security numbers, government-issued identification numbers, financial account numbers, or health information about you as an individual through the Site. If you believe you have provided us with sensitive personal information in error, please contact us using the information in Section 15.
When we provide IDR management, payer negotiation, or related revenue-cycle services to a healthcare provider client, we may, in the course of providing those services, create, receive, maintain, or transmit protected health information (“PHI”) on behalf of that client within the meaning of HIPAA. In that context, we act as a “business associate” of the client, and our use and disclosure of that PHI is governed by the business associate agreement between Pivotal Health and the applicable client and by HIPAA, not by this Privacy Policy.
This Privacy Policy applies only to personal information that we collect about you, personally and individually, through the Site, such as when you visit the Site, request a demo, or use the client platform as an authorized representative of your employer. If you are a patient of one of our healthcare provider clientsand have questions about how your health information is used or disclosed, please contact your provider directly. Your provider, not Pivotal Health, is responsible for its own notice of privacy practices.
We use personal information for the following purposes:
(a) To respond to your inquiries, provide requested demonstrations, and communicate with you about our services.
(b) To provide, maintain, and improve the Site and the client platform, including authenticating and supporting authorized users of client accounts.
(c) To market and advertise ourservices, including through the advertising and analytics technologies described in Section 5, and to measure the effectiveness of our marketing.
(d) To maintain the security of the Site and client platform, detect and prevent fraud, and enforce our Terms and Conditions.
(e) To comply with applicable law, respond to legal process, and protect the rights, property, and safety of Pivotal Health, our clients, and others.
(f) For any other purpose disclosedto you at the time we collect your information, or with your consent.
We and our service providers use cookies, pixels, web beacons, and similar tracking technologies (“Cookies”) on the Site. We use the following categories of Cookies:
(a) Strictly Necessary Cookies. Required for the Site to function, such as maintaining your session andsecurity settings. These cannot be disabled through our systems.
(b) Analytics Cookies. Help us understand how visitors use the Site, such as through Google Analytics, so that we can improve its content and performance.
(c) Advertising and Marketing Cookies. Used by us and third-party advertising partners, which may include Google Ads, the LinkedIn Insight Tag, and the Meta (Facebook) Pixel, to deliver and measure the performance of advertising, including on other websites, and to support retargeting campaigns.
You can control Cookies through your browser settings, which allow you to block ordelete Cookies. Because Cookies allow the Site to function properly, blocking certain Cookies may affect the availability or functionality of parts of the Site.
Where required by applicable law, we honor the Global Privacy Control (“GPC”) and similar opt-out preference signals as a valid request to opt out of the sale or sharing of personal information for the browser and device transmitting the signal. We currently do not respond to “Do Not Track” browser signals other than through GPC, because no common industry standard for Do Not Track has been adopted.
By proceeding past our Cookie disclosure and continuing to use the Site, you acknowledge this Section and consent to the collection, transmission, and use of information through Cookies as described above. Any service provider or advertising partner that receives information through Cookies described in this Section does so with your consent and as a party to, or an authorized recipient of, the applicable communication, and not as an unauthorized third party.
We do not sell personal information for money. However, some of our advertising practices, such as the use of advertising Cookies described in Section 5, may constitute a “sale” or “sharing” of personal information under certain state privacy laws, including the CCPA, because they involve making personal information available to advertising partners for cross-context behavioral advertising. Section 7 explains your right to opt out of this activity.
We may share personal information with the following categories of recipients:
(a) Service Providers. Companies that perform services on our behalf, such as website hosting, customer relationship management, email delivery, analytics, applicant tracking (Ashby), and information technology support, under contracts that limit their use of personal information to providing services to us.
(b) Advertising Partners. Third parties that assist us with advertising and analytics, as described in Section 5.
(c) Client Organizations. If you access the client platform as an authorized user, your organization's designated administrators may have access to your account information as part of their own account management.
(d) Professional Advisors. Attorneys, accountants, and other professional advisors in connection with services they provide to us.
(e) Legal and Safety Purposes. Government authorities or other third parties, when required by law or legal process, or to protect the rights, property, or safety of Pivotal Health, our clients, or others.
(f) Corporate Transactions. A successor or acquirer in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets.
We do not have actual knowledge that we sell or share the personal information of individuals under the age of sixteen.
Depending onw here you live, you may have the following rights with respect to your personal information under applicable state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), and comprehensive privacy laws in effect instates including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, and other states:
(a) Right to Know or Access. The right to request that we disclose the categories, and in some cases the specific pieces, of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we have shared it.
(b) Right to Delete. The right to request deletion of personal information we have collected from you, subject to certain exceptions.
(c) Right to Correct. The right to request correction of inaccurate personal information.
(d) Right to Opt Out of Sale or Sharing. The right to opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising, as described in Sections 5 and 6.
(e) Right to Limit Use of Sensitive Personal Information. To the extent we process sensitive personal information for purposes other than those necessary to provide the Site, you have the right to limit that use. Based on our current practices, we do not process sensitive personal information beyond, potentially, approximate geolocation derived from your IP address.
(f) Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.
(g) Right to Appeal. If we decline to act on your request, certain state laws give you the right to appeal our decision, as described in Section 8.
These rights are not absolute and are subject to exceptions under applicable law. Residents of states without a comprehensive privacy law may also submit requests, and we will consider them on a good-faith basis consistent with our obligations too ther similarly situated individuals.
You may submit a request to exercise the rights described in Section 7 by emailing privacy@pivotalhealth.ai. We will need to verify your identity before responding to certain requests, which may require you to provide additional information sufficient to match you to the personal information we maintain. You may designate an authorized agent to submit a request on your behalf, provided the agent presents proof of authorization; we may still require you to verify your own identity directly with us.
We will respond to your request within the time required by applicable law, generally forty-five days, which we may extend once by an additional forty-five days where reasonably necessary, with notice to you. If we decline to act on your request, you may appeal by emailing privacy@pivotalhealth.ai with the subject line “Privacy Rights Appeal.” We will respond to your appeal within thetime required by applicable law, generally forty-five to sixty days dependingon your state of residence.
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Site, maintain our business relationship with your organization, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected.
We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, ordestruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Site is intended for business and professional use and is not directed to, and we donot knowingly collect personal information from, individuals under the age of sixteen. If we learn that we have collected personal information from a child under sixteen without appropriate consent, we will take steps to delete thatinformation.
The Site is intended for use by healthcare providers and organizations located in the United States, and personal information we collect is stored and processed in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, and processed in, the United States, which may have data protection laws different from those of your jurisdiction.
The Site may contain links to third-party websites, including our client platform and job postings hosted by Ashby. This Privacy Policy does not apply to those third-party websites, and we encourage you to review their privacy policies before providing personal information.
We may update this Privacy Policy from time to time. We will post the revised Privacy Policy on the Site and update the “Last Updated” date above. Material changes will be effective upon posting unless otherwise required by applicable law.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Pivotal Health Technologies, Inc.
Attn: Privacy Team
1335 4th St., Fl 3
Santa Monica, CA 90401
privacy@pivotalhealth.ai