Privacy Policy

1. Scope and Who We Are

This Privacy Policy explains how MediSum LLC ("MediSum," "we," "us," or "our") collects, uses, discloses, and retains personal information through its websites, emails, applications, and related services (together, the "Service"). MediSum LLC is a Delaware limited liability company with its principal office in North Carolina, United States. Where applicable data-protection law uses the term "controller," MediSum is the controller of the personal information described in this Policy.

2. Information We Collect

Information you provide

• Account and contact information: such as your name, email address, and sign-in information.
• Professional profile: such as your professional role, specialty, subspecialty, credentials, and institution.
• Research preferences: such as topics, journals, procedures, domains, and other interests you select.
• Communications: information included in support requests, feedback, or other messages to MediSum.

Information generated through the Service

• Service activity: research selections, article interactions, saves, and sharing actions.
• Email activity: delivery, open, and click signals. Some email systems may automatically generate or obscure these signals.
• Technical information: such as IP address, browser or device type, timestamps, authentication events, cookie or campaign identifiers, and security logs.
• Recommendation records: information about how MediSum matched or presented content to your account.

We collect information directly from you, automatically when you use the Service, and from an identity provider when you choose a third-party sign-in option.

3. How We Use Information

We may use personal information to:

• create and manage accounts;
• deliver and personalize literature updates;
• remember preferences and saved research;
• operate, secure, troubleshoot, and support the Service;
• measure email delivery and understand which features are useful;
• improve content selection, summaries, and user experience;
• send service announcements and communications you request;
• measure acquisition campaigns and advertising performance;
• comply with law and protect rights, safety, and Service integrity; and
• evaluate or complete a merger, financing, reorganization, or sale.

4. Legal Bases for Processing

Where applicable law requires a legal basis, the basis depends on the information, purpose, and location involved. MediSum may rely on:

• Contract or steps you request to create an account, provide selected features, and deliver requested updates.
• Legitimate interests to secure, maintain, understand, and improve the Service; communicate about it; and operate MediSum, when those interests are not overridden by your rights.
• Consent where MediSum requests it for an optional communication, technology, or use. You may withdraw consent for future processing where the law provides that right.
• Legal obligations and legal claims to comply with law, respond to lawful process, and establish, exercise, or defend rights.

Contact us if you would like information about the legal basis applicable to a particular activity.

5. Cookies, Email Measurement, and Advertising

MediSum may use cookies, local storage, email pixels, tagged links, and server-side event tools for authentication, preferences, security, service delivery, analytics, campaign attribution, and advertising measurement.

Depending on configuration, advertising and measurement providers—including Meta—may receive page-view or registration event information, page or referral URLs, IP address, browser or device information, cookie or campaign identifiers, and hashed account identifiers. MediSum's configured registration and lead events are not intended to include profile fields, research preferences, support-message content, or patient information.

Browser, device, and email-client settings may limit some of these technologies. Disabling them may not prevent all server-side measurement. The Service does not currently respond automatically to browser "Do Not Track" or Global Privacy Control signals.

6. When Information Is Disclosed

We may disclose personal information:

• To service providers that support hosting, authentication, email delivery, analytics, error monitoring, security, customer support, and related operations.
• To advertising and measurement providers for campaign attribution and performance measurement as described above.
• At your direction or with your permission.
• For legal and safety reasons when reasonably necessary to comply with law, respond to valid legal process, investigate misuse, or protect rights and safety.
• As part of a business transaction such as a merger, financing, reorganization, or sale, subject to appropriate protections.

Providers process information under their contracts, terms, and applicable law. Their own services may be governed by separate privacy policies.

7. Group-Level Insights and Sponsored Content

MediSum does not currently offer group-level insights as a commercial product. If introduced, the product would not provide customers with names, email lists, individual professional profiles, reading histories, or user-level activity records.

Before introducing a commercial group-level insights product, MediSum intends to require minimum group sizes, small-result suppression, controls against repeated or overlapping queries, customer use restrictions, and review of downloadable outputs. MediSum will update this Policy and provide additional choices when required before launch.

MediSum may in the future introduce clearly labeled sponsored content for relevant professional groups. Any sponsor access, reporting, and user choices will be described before that activity begins.

8. Patient Information

MediSum is not a patient-care or health-record service and is not designed to receive patient information or protected health information. Do not include patient-identifiable information in an account, support request, or other communication with MediSum.

9. Retention and Account Deletion

We retain personal information for as long as reasonably necessary to operate, secure, and improve the Service; maintain appropriate business and legal records; and fulfill the purposes described in this Policy. Retention depends on the type of information, why it was collected, account status, security needs, and legal or recordkeeping requirements.

If you request account deletion, MediSum deletes core account and preference records. We may retain limited analytics, audit, security, legal, fraud-prevention, recordkeeping, de-identified, and backup records where reasonably necessary or permitted by law. Some records may remain in restricted backups or logs for additional periods.

10. Your Rights and Choices

Depending on where you live and subject to legal exceptions, you may have rights to:

• know whether and why we process personal information about you;
• access personal information and receive a copy;
• correct inaccurate or incomplete personal information;
• request deletion of personal information;
• request a portable copy of certain information in a usable format;
• restrict or object to certain processing;
• withdraw consent for future processing where processing relies on consent;
• opt out of certain sales, sharing, targeted advertising, or profiling where applicable law provides that right;
• use an authorized agent where applicable law permits one; and
• complain to an appropriate privacy or data-protection authority.

You can also:

• update available profile and research preferences through your account;
• use links in our emails or account settings to manage email preferences; and
• contact us to request access, correction, deletion, or an available account export.

We may take reasonable steps to verify a request and will respond as required by applicable law. MediSum will not discriminate against you for exercising a privacy right protected by law.

11. United States State Privacy Disclosures

Some United States privacy laws define "sale," "sharing," and "targeted advertising" broadly. Although MediSum does not make individual profiles or activity available as a data product, disclosures to advertising or measurement providers may be treated as a sale, sharing, or targeted advertising under a particular law even when MediSum does not receive money for personal information.

If such a law applies, you may have the rights described above, including rights to know, access, correct, delete, obtain a copy, opt out of certain processing, limit certain uses of sensitive personal information, and appeal a denied request. Submit a request through the contact information below.

12. International Processing

MediSum is based in the United States. Personal information may be processed in the United States and other countries where our providers operate. Privacy laws in those locations may differ from the laws where you live. Depending on applicable law and the transfer involved, additional transfer requirements or safeguards may apply. You may contact us for information about safeguards relevant to a particular transfer.

13. Automated Processing

MediSum uses automated methods to organize research and personalize literature selections. MediSum does not use this processing to make solely automated decisions about you that produce legal or similarly significant effects, such as decisions about employment, insurance, credentialing, or access to health care.

14. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information and the Service. No system can guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.

15. Children

MediSum is a professional service and is not designed for children. We do not knowingly seek personal information from children.

16. Changes to This Policy

We may update this Policy as MediSum or applicable law changes. We will post the revised version and its effective date and provide additional notice when reasonably appropriate or legally required.

17. Contact