Privacy Policy

1. Introduction

ImageAssist, Inc. ("the Company," "we," "us," or "our") operates imagesasist.com and the ImageAssist clinical decision-support platform (together, the "Service"). ImageAssist is an AI-powered radiology worklist triage tool designed to surface urgent chest CT findings - intracranial hemorrhage, pulmonary embolism, pulmonary nodules, and large pleural effusion - to the top of the radiologist's worklist so the most time-sensitive studies are read first. This Privacy Policy explains what information we collect through the Service, how we use it, and the choices you have.

The Company is based at 101 Merrimac Street, Suite 700, Boston, MA 02114 and can be reached at [email protected].

ImageAssist operates as a decision-support tool. Radiologists review and confirm all findings. The platform processes clinical imaging metadata submitted by radiology departments that are our customers; personal health information belonging to their patients is handled under the terms of our customer agreements and the applicable legal frameworks governing healthcare data. This Policy covers information we collect directly from visitors to imagesasist.com and from individuals who contact us or request a demo.

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email, phone) when you fill out a form, request a demo, or subscribe to updates;
• Professional context you choose to share (job title, institution type, employer, project context);
• The content of any messages you send us.

When a radiology department or health system engages the Company as a clinical software provider, authorized users (typically radiologists and radiology operations staff) may submit account credentials and workflow configuration data through the platform. That data is governed by the applicable customer agreement.

2.2 Information Collected Automatically

When you visit imagesasist.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.3 Clinical Imaging Metadata

The ImageAssist platform receives DICOM study metadata (study identifiers, modality, acquisition timestamps, scanner source) from customer PACS and RIS systems as part of the triage workflow. This metadata is processed to generate urgency scores and reorder the customer's worklist. No raw imaging pixel data is transmitted externally by the platform. Clinical imaging metadata submitted by customer institutions is processed solely to deliver the triage service and is not used for any other purpose, including model training, without explicit written agreement with the customer institution.

2.4 We Do Not Knowingly Collect Children's Data

imagesasist.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries, schedule demos, and provide requested information about ImageAssist;
• Operate, maintain, and improve the Service and the triage platform;
• Deliver the worklist prioritization function to radiology departments that are our customers;
• Send service updates and (with your consent where required) clinical communications and product news;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations applicable to healthcare software providers operating in the United States.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (for example, hosting, email delivery, analytics) under contractual confidentiality terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. Clinical imaging metadata submitted by customer institutions is shared only as necessary to deliver the triage service to that institution and is not shared with other institutions or third parties for any other purpose.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Inactive marketing-list contacts are purged after 24 months. Server access logs are retained 90 days, then aggregated. Clinical imaging metadata processed through the triage platform is retained in accordance with the applicable customer agreement; default retention is the duration of the active customer engagement plus 90 days.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access systems, and least-privilege access controls. The ImageAssist platform is designed with healthcare data handling in mind; access to customer worklist and imaging metadata is limited to authorized platform functions. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Massachusetts Residents

Massachusetts does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, HIPAA or GLBA), those laws may give you additional rights with respect to data covered by them. Patients whose protected health information is processed through the ImageAssist platform by a covered entity should direct data rights requests to that covered entity, which is the applicable data controller for clinical records purposes.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to: