1. Introduction & Scope

This Privacy Policy explains how InVision Medical Technology Corporation (“InVision,” “we,” “our,” or “us”) collects, uses, discloses, and protects information in connection with our public website at invisionmedtech.com and related online content (collectively, the “Site”). By accessing or using the Site, you acknowledge that you have read and understood this Policy and agree to the information practices it describes. If you do not agree, please do not use the Site.

This Policy covers the Site only. It does not apply to InVision’s clinical software products, which are made available to healthcare organizations under separate agreements. Any protected health information (PHI) processed through those products is handled on behalf of, and under the direction of, the healthcare providers who deploy them — including, where applicable, under HIPAA Business Associate Agreements — and is not collected through, or governed by, this Site or this Policy. We maintain an information-security program aligned with recognized frameworks (including SOC 2 and ISO 13485) for our clinical operations; those certifications concern our products and quality systems, not this website.

We aim to handle information in accordance with applicable data-protection laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (“CCPA”), in each case where and to the extent they apply to you.

2. Information We Collect

  • Information you provide. When you submit a form, request a demo, subscribe to updates, or book a meeting (for example, through our scheduling provider), you may provide personal information such as your name, business email, organization, telephone number, and the contents of your message.
  • Information collected automatically. When you visit the Site, our hosting provider and analytics tools may automatically record technical information, including your Internet Protocol (IP) address, approximate location derived from it, browser and device type, referring and exit pages, the pages you view, and the dates and times of your visits.
  • Cookies and similar technologies. We use a small number of cookies and similar technologies as described in Section 3.

We do not intentionally collect sensitive personal information or health information through the Site, and we ask that you not submit it through our forms.

3. Cookies & Analytics

Cookies are small text files placed on your device. We use two kinds:

  • Strictly necessary technologies that enable the Site to function and remember your privacy choices. These are always active.
  • Analytics cookies. We use Google Analytics 4 to understand how the Site is used so we can improve it. Google Analytics sets first-party cookies (for example, _ga) that persist on your device — typically for up to two years — and processes information such as your IP address, device and browser details, and pages viewed.

Google acts as our service provider and processes this information solely to provide analytics to us, under Google’s terms and our configuration. We do not use Google’s advertising features on the Site, we do not permit Google to use this information for its own advertising purposes, and we do not sell your personal information or share it for cross-context behavioral advertising. For more information about Google’s practices, see Google’s privacy policy.

Your choices. For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics cookies are set only after you consent through the banner presented on your first visit; until then, analytics run in a consent-limited mode that does not store cookies. Visitors elsewhere may opt out at any time. You can accept, decline, or change your choice using the Cookie preferences control (also available in the site footer), by using your browser’s cookie controls, or via Google’s opt-out tools. Declining analytics cookies does not affect your ability to use the Site.

4. How We Use Information

We use the information we collect to operate, maintain, secure, and improve the Site; to respond to your inquiries and provide the information or materials you request; to communicate with you about InVision, our products, and events that may interest you (you may opt out of marketing messages at any time); to understand usage trends and measure the effectiveness of our content; to protect the Site, our users, and InVision against fraud, abuse, security incidents, and other unlawful activity; and to comply with our legal obligations and enforce our agreements.

We may also create aggregated, anonymized, or de-identified information from data collected through the Site. Such information does not identify you and is not personal information; we may use and retain it for any lawful business purpose, including analytics and improving our products and services, and this Policy does not restrict that use.

5. How We Disclose Information

We do not sell your personal information. We disclose information only as described here:

  • Service providers. We share information with vendors that perform services for us, such as website hosting, meeting scheduling, communications, and analytics. These providers are authorized to use the information only to perform services for InVision and are bound by confidentiality and data-protection obligations.
  • Legal and safety. We may disclose information where we believe in good faith that doing so is necessary or appropriate to comply with applicable law, regulation, legal process, or governmental request; to enforce our terms and agreements; or to protect the rights, property, safety, or security of InVision, our users, or others. Where permitted, we may do so without prior notice to you.
  • Business transfers. If InVision is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the event of insolvency, information collected through the Site may be transferred or disclosed as part of that transaction, subject to reasonable confidentiality protections.
  • With your direction or consent. We may share information for other purposes with your consent or at your direction.

6. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, to operate our business, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information and the context in which it was collected. Aggregated, anonymized, and de-identified information may be retained indefinitely. When information is no longer needed, we take reasonable steps to delete or de-identify it.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information collected through the Site. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security; you provide information at your own risk. If we become aware of a security incident affecting your personal information, we will notify you and any regulator as and to the extent required by applicable law.

8. International Data Transfers

The Site is operated and hosted in the United States, and our service providers may process information in the United States and other countries. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. Where required by applicable law, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses, and you may contact us for more information.

9. Your Rights & Choices

Depending on where you live, you may have certain rights regarding your personal information. To exercise a right, contact us at privacycompliance@invisionmedtech.com. We may need to verify your identity before responding, and we may decline requests where permitted by law. We will not discriminate against you for exercising your rights.

Marketing choices

You may opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. We may still send you non-promotional messages about your requests or our relationship with you.

EEA, UK, and Switzerland (GDPR)

If you are in these regions, you may have the rights to access, correct, delete, restrict, or object to our processing of your personal information; to data portability; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are: your consent (for analytics cookies and marketing); our legitimate interests in operating, securing, and improving the Site and communicating with prospective customers; performance of a contract or steps taken at your request; and compliance with legal obligations.

California (CCPA/CPRA)

Subject to certain exceptions, California residents may request to know the categories and specific pieces of personal information we have collected, the sources, and the purposes; to correct or delete personal information; and to opt out of any “sale” or “sharing” of personal information. In the preceding 12 months we collected identifiers, internet activity, and geolocation inferred from IP address, as described in this Policy, for the business purposes described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA. You may still exercise the Cookie preferences control to decline analytics cookies. We do not respond to “Do Not Track” browser signals.

10. Children’s Privacy

The Site is intended for a professional audience and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA, where applicable). If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

The Site may link to, or embed features from, third-party services (for example, a scheduling provider or external articles and profiles). We are not responsible for the content or privacy practices of third parties, and their handling of your information is governed by their own policies. We encourage you to review them.

12. Changes to this Policy

We may revise this Policy from time to time. When we do, we will update the “last modified” date above, and your continued use of the Site after changes take effect constitutes your acceptance of the revised Policy. For material changes, we will take reasonable steps to provide additional notice. We generally handle personal information under the version of this Policy in effect when the information was collected.

This Privacy Policy is effective as of September 20, 2026.

This Privacy Policy was last modified on September 20, 2026.

13. Contact & Data Controller

The data controller for information collected through the Site is InVision Medical Technology Corporation. If you have questions or requests regarding this Policy or your personal information, contact us at privacycompliance@invisionmedtech.com.

TODO(fact): add InVision’s registered legal address, and — if InVision has no EU/UK establishment but offers the Site to EEA/UK visitors — the name and contact details of an EU and/or UK representative under GDPR Article 27.