Privacy Policy
Clinical Decision Support Disclaimer
KyVeCT Vantage provides analytical support and structured insights. It does not replace clinical judgment or make independent clinical decisions. All findings require review and interpretation by qualified clinical staff.
KyVeCT LLC ("KyVeCT," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (kyvect.com) or use our clinical intelligence platform, Vantage, and its integrated compliance advisory module, VANCE (kyvect.app).
1. Important Notice: HIPAA & PHI
KyVeCT operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when providing services to Home Health Agencies ("Covered Entities").
- Protected Health Information (PHI): Any patient data uploaded to the Vantage platform is governed by the Business Associate Agreement (BAA) signed between KyVeCT and the respective Home Health Agency.
- Data Minimization: Consistent with our security architecture, clinical reports and associated PHI are subject to a 12-hour operational lifecycle, after which they are permanently deleted via automated protocols.
This Privacy Policy governs our handling of general user and website information. Where PHI is involved, the applicable BAA and healthcare privacy laws control that relationship in addition to this Privacy Policy.
2. Information We Collect
We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Information").
A. Information You Provide to Us
- Account Information: Name, professional email address, job title, and Home Health Agency name when you register for Vantage.
- Communications: Information provided when you request a demo or contact support.
B. Information Collected Automatically
- Usage Data: IP addresses, browser type, device identifiers, and patterns of usage within the Vantage platform.
- Security and Audit Records: We maintain records related to system access, administrative actions, and sensitive operations for security, compliance, and abuse-prevention purposes. Certain records may be retained for up to 6 years (2,190 days) where required by policy, law, or contractual obligations.
3. How We Use Your Information
We use the collected information to:
- Provide and improve KyVeCT Vantage, our clinical intelligence platform, and VANCE, its integrated compliance advisory module.
- Facilitate secure authentication, account access controls, and organization-scoped use of the platform.
- Generate clinical and compliance-oriented analysis outputs for your organization.
- Protect against fraudulent activity and maintain the security and integrity of our platform.
4. Data Security & Storage
We implement industry-standard technical and administrative safeguards, including:
- Encryption: Sensitive data is protected through encryption at rest and in transit, with additional server-side safeguards applied to sensitive stored data as appropriate.
- Access Control: Role-based access controls and authenticated access protections.
- Infrastructure: Data is hosted in cloud infrastructure used to operate the service, including Google Cloud and Firebase components, with contractual and technical controls applied as appropriate to the service environment.
5. Data Retention
We retain account information for as long as your account is active or as otherwise needed for legitimate business, legal, security, and operational purposes.
For clinical data processed through Vantage, the platform is designed around a 12-hour operational lifecycle for active analysis artifacts, while relevant system and audit records may be retained longer where required for security, compliance, or legal recordkeeping.
6. Disclosure of Your Information
We do not sell your personal information. We may share information with:
- Service Providers: Third-party vendors that perform services for us under appropriate confidentiality, data-protection, and, where applicable, healthcare-related contractual terms.
- Legal Requirements: If required by law, subpoena, or to protect the safety and integrity of our platform.
7. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights:
- Right to Know: You can request a list of the categories of personal information we collect.
- Right to Delete: You can request that we delete your personal information (subject to certain legal exceptions, such as HIPAA record retention requirements).
- Right to Opt-Out: We do not sell personal data.
8. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
KyVeCT LLC
Attn: Privacy Officer
2108 N ST STE N
Sacramento, CA 95816
Email: carlo@kyvect.com
By using the KyVeCT Vantage platform, you consent to the terms of this Privacy Policy.
Important: KyVeCT Vantage provides analytical support and structured insights. It does not replace clinical judgment or make independent clinical decisions. All findings require review and interpretation by qualified clinical staff.