Privacy Policy
Master Privacy Policy
Last updated February 2026
1. Scope
This policy applies to:
- KeaCloud web platforms
- Mobile applications
- Customer portals
- Support and onboarding services
2. Legal Compliance Framework
- Canada – PIPEDA: Organizations must obtain meaningful consent, limit collection, protect data, and allow access and correction rights.
- HIPAA (Healthcare): Business associates must safeguard protected health information and limit uses to permitted purposes.
- US State Privacy (CCPA-Style): Privacy policies must disclose categories of personal data collected and purposes of use at or before collection.
3. Information We Collect
Personal Information
- Names
- Contact information
- Employment credentials
- Device identifiers
Health Information
- Care schedules
- Service and clinical notes
- Insurance Information
- Transportation records
- Billing and service eligibility data
4. How We Use Information
- Provide SaaS services
- Authentication and authorization
- Security and fraud detection
- Regulatory compliance
- Service improvement
5. Legal Basis
- Customer contract
- Legal obligations
- Legitimate business interests
- Consent where required
6. Data Sharing
We may share data with:
- Hosting providers
- Security vendors
- Support vendors
- Government authorities when legally required
Never sell PHI.
7. Data Retention
Data retained only as long as required for:
- Service delivery
- Legal obligations
- Healthcare record retention laws
8. Security Safeguards
- Encryption (TLS, AES)
- Access logging
- Workforce training
- Incident response program
9. Individual Rights
Canada
Right to:
- Access personal data
- Correct inaccuracies
- Withdraw consent (where applicable)
US (State Privacy Laws)
May include rights to:
- Know data categories collected
- Request deletion
- Request access copies
10. HIPAA PHI Protections
If acting as Business Associate:
- Use PHI only for permitted functions
- Report breaches
- Support covered entity compliance
11. Children
Not intended for users under 16.
12. International Transfers
Data may be processed in:
- USA
- Canada
13. Contact
Privacy Officer
Nexveris LLC
privacy@nexveris.com