Privacy Policy

1. Information We Collect

We may collect or process different types of information depending on how Opisoft is used, which features are enabled, and whether you are a patient, clinic staff member, administrator, or other authorized user.

Account Information

We may collect information used to create, manage, or authenticate an account, including:

• Name
• Email address
• Phone number
• Login credentials
• Organization or clinic association
• User role or permissions
• Account status and preferences

Patient and Clinic Information

If Opisoft is used by a clinic or healthcare provider, we may process information related to patient care coordination, clinic operations, or patient engagement, including:

• Patient name and contact information
• Clinic or provider association
• Appointment-related information
• Reminder-related information
• Care coordination information
• Treatment-related tasks or workflow information
• Check-ins or patient-submitted updates
• Forms, documents, or other information submitted through the app
• Communication between patients and their clinic or care team

Health-Related Information

Depending on the features enabled by your clinic or care provider, Opisoft may collect or process health-related information, including:

• Recovery-related reminders
• Medication-related or treatment-related reminders
• Appointment reminders
• Patient check-ins
• Care team messages
• Treatment workflow status
• Patient support communications
• Information submitted through forms or uploaded documents
• Other information provided by a clinic, care team, or user in connection with healthcare services

Messages and Communications

Opisoft may allow users to send or receive messages, reminders, notifications, or other communications. We may process:

• Messages between patients and clinics
• SMS or app-based reminders
• Push notifications
• Support messages
• Communication history
• Delivery and interaction status, such as whether a message was sent, delivered, opened, or responded to

Device, App, and Technical Information

We may collect information about your device and use of the app, including:

• Device type
• Operating system
• App version
• Browser type, if using a web application
• IP address
• Device identifiers
• Push notification tokens
• Log files
• Crash reports
• Diagnostics
• App performance data
• General usage activity
• Date and time of access
• Security and authentication logs

Usage Information

We may collect information about how users interact with Opisoft, including:

• Pages or screens viewed
• Features used
• Reminder activity
• Message activity
• Form activity
• Login activity
• General app analytics
• Error reports
• Workflow activity within the app

Uploaded Content

If enabled, users may upload or submit content through Opisoft, including:

• Forms
• Documents
• Images
• Identification or insurance-related files
• Patient-submitted information
• Other files submitted through the app

Only upload information that you are authorized to provide.

2. How We Use Information

We use information to provide, operate, improve, secure, and support Opisoft.

We may use information to:

• Create and manage user accounts
• Authenticate users
• Connect patients with their clinic or care team
• Send reminders, messages, notifications, or updates
• Support patient engagement and care coordination
• Allow clinics to manage workflows, forms, reminders, and communications
• Provide technical support
• Monitor app performance
• Detect, prevent, and respond to security issues
• Maintain audit logs and system integrity
• Improve app functionality and user experience
• Comply with legal, regulatory, contractual, and healthcare-related obligations
• Enforce applicable terms, policies, and agreements
• Respond to user, clinic, or provider requests

We do not use health-related information to make independent medical decisions, diagnose conditions, or provide medical treatment.

3. How Information Is Shared

We may share information only as needed to operate Opisoft, support users, comply with law, or provide services requested by clinics, patients, or authorized users.

With Clinics, Providers, and Care Teams

If you use Opisoft through a healthcare provider, clinic, or care team, information you submit or generate through the app may be shared with that provider, clinic, or care team.

This may include:

• Messages
• Reminder activity
• Check-ins
• Submitted forms
• Uploaded documents
• Patient-related workflow information
• Other information related to your use of the app

With Service Providers

We may share information with trusted vendors and service providers that help us operate Opisoft. These may include providers for:

• Cloud hosting
• Databases
• Authentication
• SMS messaging
• Push notifications
• Email delivery
• Analytics
• Error monitoring
• Security monitoring
• Customer support
• Infrastructure and application services

These service providers are only authorized to use information as needed to provide services to us and are expected to protect information appropriately.

With Authorized Users

Information may be visible to authorized users within a clinic, organization, or care team depending on their role and permissions.

For Legal, Safety, or Compliance Reasons

We may disclose information when we believe it is necessary to:

• Comply with applicable laws or regulations
• Respond to legal process or government requests
• Protect the rights, safety, and security of users, clinics, Opisoft, or others
• Investigate fraud, abuse, security incidents, or unauthorized access
• Enforce our agreements, policies, or terms
• Meet healthcare, audit, billing, or recordkeeping obligations

Business Transfers

If Brightview Group, Inc. is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

4. HIPAA and Healthcare Information

Opisoft may be used by healthcare providers or clinics that are subject to the Health Insurance Portability and Accountability Act of 1996 and related regulations, commonly known as HIPAA.

When Opisoft processes protected health information on behalf of a covered healthcare provider or clinic, Brightview Group, Inc. may act as a business associate under HIPAA, subject to applicable agreements with that provider or clinic.

In those cases, the healthcare provider or clinic remains responsible for its relationship with the patient and for providing any required HIPAA notices, authorizations, and rights related to protected health information.

If you are a patient and have questions about your medical record, treatment, clinic communications, or HIPAA rights, you should contact your healthcare provider or clinic directly.

5. Security

We use administrative, technical, and organizational safeguards designed to protect personal information and health-related information.

These safeguards may include:

• Encryption in transit
• Encryption at rest where appropriate
• Access controls
• Authentication protections
• Role-based permissions
• Audit logging
• Secure infrastructure practices
• Monitoring for errors, abuse, or unauthorized access
• Internal policies and procedures designed to protect information

No system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their login credentials and for notifying us or their clinic if they believe their account has been compromised.

6. Push Notifications, SMS, and Communications

Opisoft may send reminders, messages, alerts, or other communications by app notification, SMS, email, or other communication methods depending on the features enabled by your clinic or care team.

These communications may relate to:

• Appointment reminders
• Medication or treatment-related reminders
• Clinic messages
• Form reminders
• Care coordination updates
• Account or security notifications
• Support messages

Standard messaging and data rates may apply for SMS or mobile communications.

You may be able to manage some notification preferences through your device settings, app settings, or by contacting your clinic or care team. Some service-related or security-related communications may still be sent where necessary.

7. Analytics and App Performance

We may collect analytics, diagnostics, crash reports, and performance information to help us understand how Opisoft is used, improve reliability, fix bugs, and secure the service.

This information may include:

• App version
• Device type
• Operating system
• Error logs
• Crash reports
• Performance data
• Feature usage
• General interaction data

Where possible, we use this information to improve Opisoft and troubleshoot technical issues.

8. Data Retention

We retain information for as long as reasonably necessary to provide Opisoft, support clinic operations, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and meet healthcare-related recordkeeping or audit requirements.

Retention periods may vary depending on:

• The type of information
• The clinic or provider using Opisoft
• Legal or regulatory requirements
• Healthcare recordkeeping obligations
• Billing, audit, or compliance requirements
• Security and fraud prevention needs
• Instructions from a clinic or healthcare provider

Because Opisoft may be used in connection with healthcare services, some information may need to be retained even after a user stops using the app.

9. Account and Data Deletion Requests

Users may request deletion of their Opisoft account or personal information by contacting us at:

Email: privacy@getopisoft.com
Alternative Email: info@brightview.group

Because Opisoft may be used in connection with healthcare services, certain records may need to be retained where required by law, healthcare recordkeeping obligations, audit requirements, security obligations, billing requirements, or instructions from the user’s healthcare provider or clinic.

When we receive a deletion request, we will review the request and delete or de-identify information where legally and operationally permitted. If certain information cannot be deleted immediately, we may retain it as required or permitted by law, contract, healthcare recordkeeping obligations, or legitimate operational needs.

If you use Opisoft through a healthcare provider or clinic, you may also need to contact that provider or clinic directly to request access, correction, amendment, or deletion of information maintained as part of your medical record.

10. Your Choices and Rights

Depending on where you live and how you use Opisoft, you may have certain rights related to your personal information.

These may include the right to:

• Request access to certain information
• Request correction of inaccurate information
• Request deletion of certain information
• Request restriction of certain processing
• Object to certain processing
• Request a copy of certain information
• Withdraw certain consents, where applicable

If your information is maintained by a healthcare provider or clinic, some requests may need to be handled directly by that provider or clinic.

To make a privacy request, contact us at:

privacy@getopisoft.com

We may need to verify your identity before responding to certain requests.

11. Medical Disclaimer

Opisoft is not a medical device and does not diagnose, treat, cure, or prevent any medical condition.

Opisoft is intended to support communication, reminders, organization, patient engagement, and care coordination between users and their clinic or care team.

Opisoft does not replace professional medical advice, diagnosis, treatment, emergency care, or direct communication with your healthcare provider.

Always contact your clinic, doctor, or qualified healthcare professional for medical advice, diagnosis, treatment decisions, emergencies, or urgent health concerns.

If you are experiencing a medical emergency, call emergency services immediately.

12. Children’s Privacy

Opisoft is not intended for use by children under 13.

For healthcare-related services involving minors, access may be provided only through a healthcare provider, parent, guardian, or other authorized party where legally permitted and with appropriate consent.

If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete that information or handle it as required by applicable law.

13. Third-Party Services and Links

Opisoft may integrate with or rely on third-party services that help us provide the app, such as cloud infrastructure, messaging providers, analytics tools, authentication providers, or support tools.

Opisoft may also contain links to third-party websites or services. We are not responsible for the privacy practices, security, or content of third-party websites or services that we do not control.

Users should review the privacy policies of any third-party services they access.

14. International Users

Opisoft is operated from the United States. If you access Opisoft from outside the United States, your information may be processed in the United States or other locations where our service providers operate.

By using Opisoft, you understand that your information may be transferred to and processed in locations that may have different privacy laws than your location.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we may update the “Last Updated” date at the top of this page. If changes are material, we may provide additional notice through the app, website, email, or other appropriate means.

Your continued use of Opisoft after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, privacy practices, account deletion, or data requests, contact us at:

Brightview Group, Inc.
Operator of Opisoft

Email: privacy@getopisoft.com
Alternative Email: info@brightview.group
Website: https://getopisoft.com

If you use Opisoft through a healthcare provider or clinic, you may also contact your clinic directly for questions related to your care, medical records, treatment, or clinic communications.