Cascade AI

Privacy Policy

Version Date: October 16th , 2023

Cascade Health Innovations, Inc. (“Cascade,” “we,” “our,” and/or “us”) values the privacy of individuals who use our websites, including gocascade.ai ( “Website”) as well as our products and services (“Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and share personal information from users of our Website and Services (“Users”).If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), “personal information” means any information relating to an identified or identifiable individual.

By using or accessing our Website or Services in any manner, you agree to the collection, use, disclosure, and procedures described in this Privacy Policy. This Policy does not apply to any third-party applications or software. If you use the Website and Services as part of an entity or organization that has a corporate account with Cascade, your employer (“Customer”) may have entered into a separate customer agreement (“Agreement”), which may contain more restrictive terms than what’s described in this Privacy Policy.

Cascade’s Role as a Data Controller and a Data Processor

Cascade acts as a data controller when we collect and define the purpose for and control the means by which personal information is processed. For example, Cascade acts as a data controller when collecting customer feedback or information to improve our Services. Cascade acts as a data processor when we provide our Services to our Customers. When acting as a data processor, Cascade will only process personal information in accordance with a Customer’s instructions, Agreement, and this Privacy Policy.

Information We Collect

We may collect a variety of information, including personal information, from or about you or your devices from various sources, as described below.

A. Personal Information You Provide to Us.

Registration and Profile Information. If you register to use our Services, you sign up for notifications or updates, or participate in our surveys, we may ask you for your name, email address, and phone number.

Communications. If you contact us directly, we may receive additional personal information about you. For example, when you contact our support team, we may receive your name, email address, phone number, the contents of a message or attachments that you may send to us, and other personal information you choose to provide. If you subscribe to our newsletter, then we will collect certain personal information from you, such as your email address. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online through our Website. We will collect the personal information you choose to provide on your resume, such as your education and employment experience. You may also apply through LinkedIn. If you do so, we will collect the personal information you make available to us on LinkedIn.

B. Information We Collect When You Use Our Services and Website.

Location Information. We may infer your general location information, for example by using your internet protocol (IP) address.

Device Information. We receive information about the device and software you use to access our Services, which may include IP address, web browser type, operating system version, phone carrier and manufacturer, and device identifiers.

Usage Information. To help us understand how you use our Services and Website and to help us improve them, we automatically receive information about your interactions with our Services and Website, like the pages or other content you view, the searches you conduct, and the dates and times of your visits.

Information from Cookies and Similar Technologies. We and third-party partners collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. This aids your experience when you use our Website and allows us to improve the functionality of our Website. Cookies can be used for performance management (i.e., collecting information on how our Website is being used for analytics purposes). They can also be used for functionality management, enabling us to make your visit more efficient by, for example, remembering language preferences, passwords, and log-in details.

Below is an overview of the types of Cookies we and third parties may use to collect information.

Cookie Name Purpose Retention Period
IndexedDB. firebaseLocalStorageDb. firebaseLocalStorage. firebase:authUser Keep the user signed into the website 1 year or upon user logging out
JOTFORM_SESSION (third-party cookie) Registers a unique ID for the visitor in order for the website to recognize the visitor. (third-party 7 days
Cookie Name Purpose Retention Period
Guest (third-party cookie) Registers data on visitors' website-behaviour. This is used for internal analysis and website optimization. 1 month
userReferer(third-party cookie) Determines how the user accessed the website. This information is used by the website operator in order to measure the efficiency of their marketing. 1 month

Please review your web browser’s “Help” file to learn how you may modify your cookie settings. Please note that if you delete or choose not to accept cookies from our Website, you may not be able to utilize the features of our Website to their fullest potential.

How We Use the Information We Collect

We use the information we collect:

Legal Basis of Processing European Personal Information

If you are located in the EEA or the UK, we only process your personal information when we have a valid “legal basis,” including as set forth below:

How We Share the Information We Collect

Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our Services.

Marketing. We do not rent, sell, or share information about you with non affiliated companies for their direct marketing purposes, unless we have your permission.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting google.com/policies/privacy/partners . To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view, the searches you conduct, and the dates and times of your visits.

Advertising Partners. We work with third party advertising partners to show you ads that we think may interest you. Some of our advertising partners are members of the Network Advertising Initiative (optout.networkadvertising.org) or the Digital Advertising Alliance (optout.aboutads.info). If you do not wish to receive personalized ads, please visit their opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent. We may also disclose your information with your permission.

Your Choices

  1. Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt-out of receiving promotional messages from us, you will continue to receive administrative messages from us.
  2. Your European Privacy Rights. If you are located in the EEA or the UK, you have additional rights described below.
    1. Right to Access, Erasure, Rectification & Portability. You may request access to the personal information we maintain about you, update and correct inaccuracies in your personal information, restrict or object to the processing of your personal information, have your personal information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your personal information to another company. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
    2. Right to Object to Processing. You may withdraw any consent you previously provided to us regarding the processing of your personal information at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

    You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

  3. Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of our Services are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at info@gocascade.ai.

International Data Transfer and Standard Contractual Clauses

To facilitate our global operations, we may transfer, store and process your personal information in jurisdictions other than where you live, including in the United States. Laws in these countries may differ from the laws applicable to your country of residence. For instance, if you are a European Economic Area (EEA) data subject and your personal information is shared with our affiliates, partners, or third-party service providers acting on our behalf outside of the EEA, then it is done so pursuant to necessary means to ensure an adequate level of protection.

We offer Standard Contractual Clauses, also known as E.U. Model Clauses, to meet the adequacy and security requirements for our Customers that operate in the E.U. and other international transfers of Customer data. To receive a copy of our standard Data Processing Addendum, incorporating Standard Contractual Clauses, please email privacy@cascadehealth.ai. In addition, Cascade has executed Standard Contractual Clauses with its sub processors who process personal information on behalf of Cascade.

California Residents Rights

If you are a California resident, you have the rights outlined in this section. If you are a California resident and there are conflicts between this section and any other provision of this Privacy Policy, the portion that is more protective of your personal information shall control. If you have any questions about this section or whether any of the following applies to you, please email privacy@cascadehealth.ai.

  1. Access. You have the right to request certain information about our collection and use of your personal information over the past 12 months. We will provide you with the following information:
    1. The categories of personal information that we have collected about you;
    2. The categories of sources from which that personal information was collected;
    3. The business or commercial purpose for collecting or selling your personal information;
    4. The categories of third parties with whom we have shared your personal information; and
    5. The specific pieces of personal information that we have collected about you.

    If we have disclosed your personal information for a business purpose over the past 12 months, we will identify the categories of personal information shared with each category of third-party recipient.

    If we have sold your personal information over the past 12 months, we will identify the categories of personal information purchased by each category of third-party recipient.

  2. Deletion. You have the right to request that we delete the personal information that we have collected from you. Under the California Consumer Privacy Act of 2018 (“CCPA”), this right is subject to certain exceptions. For example, we may need to retain your personal information to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
  3. Exercising Your Rights. To exercise the rights described above, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected personal information (this will require you to send an email from the account in question or login credentials), and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria.
    1. We will only use personal information provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request. We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
    2. You may submit a Valid Request by emailing privacy@cascadehealth.ai. You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to do, and we may request a copy of this written permission from your Authorized Agent when they make a request to exercise your rights on your behalf.
  4. We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA. We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of personal information that we receive from you.

Data Retention

Cascade retains the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

Update Your Information or Pose a Question

You can update your account and profile information through your profile settings. If you have questions about your privacy on Services or this privacy policy, please contact us at privacy@cascadehealth.ai.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through Services, we will notify you through Services, by email, or other communication.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@cascadehealth.ai or mail us at:

Cascade Health
Attention: DPO
10700 NE 4th St, Unit 3208,
Bellevue, WA 98004

Back to Homepage

Cascade AI

Elevate the Employee
Experience for HR and Benefits
with Cascade AI

Get started now