Privacy Policy

Welcome to exex.ai, owned and operated by eXpanded eXistence, Inc. (“eXeX,” “we,” “us,” “our”). We empower hospitals with a surgical optimization platform for the collaborative development and enhancement of surgical procedures. This Privacy Policy applies to this website, our platform, and related applications (“apps”) (collectively the “Site”) and our services provided through our platform and apps (“Services”). It describes how we collect, use and disclose information we collect on our Site effective as of the date posted above. By using the Site and submitting information you agree that we may use and disclose your information according to the terms of this Privacy Policy.

1. Who should read this Privacy Policy?

This Privacy Policy is addressed to visitors to the website and to the users of the Site and our Services who are the authorized persons of an entity that has an existing agreement with eXeX to use the platform and the Services (collectively “you” or “user”). If you browse through our website, use our Platform or Services, you need to read this Privacy Policy to understand how we collect and use your data.

2. Who is the Data Controller and Contacting Us?

Name: eXpanded eXistence, Inc., a corporation incorporated in Delaware.
Address: 2706 Rew Circle, Orlando, FL, 34786 USA
Contact email: ComplianceGroup@exex.ai

3. What personal data do we collect about you?

“Personal data” is information that, directly or indirectly, identifies you or another individual and which may include Full Name, email address, name and address of the facility you are associated with, your photo, as well as browser and device information (including Internet Protocol (IP) address), and information collected through cookies and other similar technologies. If you submit any Personal data relating to other people to us or to our service providers in connection with the Site, you represent that you have the authority to do so, have provided a copy of this Privacy Policy to the relevant individual, and that they have given their consent for us to use the information in accordance with this Privacy Policy.

a. User's Personal Data Provided to Us

We collect and process information when you visit our Site, register to use or access the Services, or otherwise interact with us. This includes information you provide, information we receive from other sources and information that we automatically collect (as discussed below) such as:

• Personal data needed for granting you access to the Site or Services such as username and email address. You are not obliged to provide us with any personal data but if you do not provide us with certain information, we cannot complete your account registration and you may be unable to access our complete services. Account registration information may include the Services licensee's company name, postal address, telephone number and the name, email address and authorized user's name, email address, phone number and username and password.
• Personal data you submit in connection with inquiries or calls to Customer Service such as your name, company name, email address, telephone number.
• Personal data you submit in connection with joining our Waitlist, to request a product demonstration or place an order such as your name, company name, email address, phone number, postal address, and product preference.

We may also collect, use, and disclose information about you in the course of performing a function, service, or activity for or on behalf of a HIPAA covered entity with which we have a business relationship. The terms under which we may use and disclose that information, which may include your protected health information, are governed by our business associate agreement with the covered entity and are described in the covered entity's notice of privacy practices.

b. Data we automatically collect about you

We automatically collect information when you visit the Site and use our Services. This may include, but is not limited to:

• Browser and device information (including Internet Protocol (IP) address), and information collected through cookies, pixels, and other similar technologies.
• Personal data obtained from information-gathering tools, such as log files, cookies, web beacons and similar technologies to automatically collect personal data as you navigate our Site or Services.
• Personal data obtained from Log Files. This collected information may include your IP address (or proxy server), device and application identification numbers, your general location, your browser type, your Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your operating system and system configuration information, and date/time stamps associated with your usage.
• Site use information, including the IP address of visitors to the Site, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
• Services use information — when you use our Services we may automatically collect information about your use, such as: how long it takes to set up a room via surgical tech; procedural steps (time data); time periods during which surgeries are carried out; the amount of inventory and surgical tools used; IP address; device information; number of users and sessions; session duration; operating systems; device models; general location; first launches; app opens; and app updates.

c. Cookies and Similar Technologies; Do Not Track

We use cookies and similar technology to collect aggregate (non-personal) information about Site usage by all of our visitors and to help us remember you and your preferences when you revisit the Site. These cookies may stay on your browser into the future until they expire or you delete them. We also use technology to remember your purchase selections in your shopping cart. These cookies usually are erased when you close your browser window. Further general information about cookies and how they work is available at www.allaboutcookies.org.

We may allow selected third parties to place cookies, pixels and similar technologies through the Site to provide us with better insights into the use of the Site or user demographics or to provide relevant advertising to you. These third parties may collect information about a consumer's online activities over time and across different websites. We may also permit third party service providers to place cookies through our Site to perform analytic or marketing functions where you are notified of them and you have consented to the usage. We do not control the use of such third party cookies or the resulting information and we are not responsible for any actions or policies of such third parties.

We do not currently use technology that recognizes a “do-not-track” signal from your web browser. As this technology matures we will update this Privacy Policy accordingly.

How to Control Cookies. When you first access our Site from certain jurisdictions, you will receive a message advising you that cookies and similar technologies are in use. By closing the message, or continuing to browse the Site, you signify that you understand and agree to the use of these technologies, as described in this Policy. You do not have to accept cookies and consent can be withdrawn at any time, although you may not be able to use certain features on the Site. Helpful information is available for Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, and Apple Safari. You can exercise advertising cookie choices at aboutads.info, networkadvertising.org, or youronlinechoices.com.

4. Purposes For Collection and Use of Information

We collect, use, and process your data for our general commercial purposes such as to improve our Site and Services, to grow our business and to offer our own or third-party products or services that we think you may find of interest. We rely on Legitimate Interests under Article 6.1.f of the GDPR and Consent under Article 6.1.a of the GDPR.

Where your consent is not mandatory, we may process Personal data on the following lawful bases: for the performance of a contract between you and us; as necessary in certain legitimate interests (including our business interests), provided such interests are not overridden by your interests or fundamental rights and freedoms; and as necessary for our compliance with legal obligations to which we are subject (such as tax reporting and accounting).

We will process Personal data as necessary for the performance of a contract: to administer our obligations under any agreement; to assist you in completing a transaction or order; to prepare and process invoices; to respond to queries and provide Services and support; to provide customer relationship management; to create and manage our accounts; to notify you about changes to our services; and to send routine customer service messages or update information.

We will process Personal data as necessary for certain legitimate interests: to offer our services in a personalized way; to send personalized marketing communications where consent is not required; to allow you to participate in questionnaires, contests and surveys; to monitor quality control and ensure compliance with applicable laws; to resolve disputes; to keep our Site, Services and premises safe and secure; to prevent or detect malicious activity; for internal business administration and operations (troubleshooting, data analysis, testing, research, statistical and survey purposes); and to create and improve our products and Services.

We will process Personal data as necessary for compliance with legal obligations, including preventing or detecting fraud and ensuring compliance with applicable laws, regulations, codes and ordinances. We may also process Personal data where you have given your informed consent (for example, where you have signed up to one of our mailing lists); such consent may be withdrawn at any time. We do not anticipate routinely processing special categories of personal data, but may do so where you include such information in communications to us, or where processing is strictly necessary in relation to a legal claim.

5. Accessing your information and your choices

If you have a registered account with us you can update, amend or delete your account information at any time by logging into your account. You can choose not to receive promotional emails from us by “unsubscribing” using the instructions in any email you receive from us; this will not stop us from sending emails about your account or transactions. You can choose to delete or block cookies by setting your browser to reject all cookies or to allow cookies only from selected sites.

Sharing data with third parties

We may reveal information about you to unaffiliated third parties: if you request or authorize it; if it is necessary to complete a transaction for you; to comply with the law, applicable regulations, governmental requests, court orders or subpoenas, to enforce our Terms of Use or other agreements, or to protect our rights, property or safety; as part of a restructure, purchase, transfer or sale of services or assets; to our agents, outside vendors or service providers performing functions on our behalf; to our professional advisors (such as lawyers or accountants); or as otherwise described in this Privacy Policy. We do not share your information with unaffiliated third parties for their marketing purposes unless we have your informed consent.

Retention of your data

We retain your data for as long as it is necessary for the purpose for which it is collected. When determining the data retention period for each specific data category, we take into account criteria such as the statutory requirements, your legitimate expectations, our business interests, and the nature and sensitivity of the data.

International data transfers

Our Site is maintained on servers located in the United States, and personal data submitted is stored on our servers in the United States. If you are visiting our Site from outside the United States, please be advised that your information is transferred to our U.S. servers. When we transfer UK and European Economic Area (“EEA”) personal data to a third party located in a country not recognized as ensuring an adequate level of protection, we will take appropriate steps, such as implementing the Standard Contractual Clauses under Article 46 of the EU and UK GDPR.

Security of your Data

We use reasonable technical, administrative and physical measures to protect information contained in our system against unauthorized access, destruction, misuse, loss or alteration. We may use standard encryption technology to protect information being transferred to our Site, but no method of transmission over the Internet, or method of electronic storage, is 100% secure and we cannot guarantee its absolute security.

Your UK and European Privacy Rights

This section only applies to users from the EEA and the UK. Under certain circumstances you may have the following rights: Right of Access; Right to Rectification; Right to Object; Right to Be Forgotten; Right to Restriction; and Right to Data Portability, each subject to the conditions set out in the GDPR. To submit a complaint or exercise these rights, contact us by postal mail at 2706 Rew Circle, Orlando, FL, 34786 USA or by email at ComplianceGroup@exex.ai.

Notice about Google Firebase

We use Google Firebase to collect and process your data. Google Firebase collects a variety of personal data such as session information, IP address, and device information. For more information, visit the Google Firebase Privacy page.

Service Providers

When collecting and using your data, we use various categories of service providers including cloud service providers, analytics service providers, payment processors, and Customer Relationship Management (CRM) platforms. You can contact us to learn about the specific service providers we use.

6. State Specific Notices

Your California Privacy Rights. California residents with an established business relationship with us are permitted by California law once a year to request information about the manner in which we shared certain categories of information with others for their marketing purposes during the prior calendar year. We do not share your personal information with third parties for their direct marketing use unless we have your permission.

Notice to Nevada Residents. We do not transfer personal information for monetary consideration. If you would like to tell us not to sell your information in the future please email us at info@expandedexistence.com with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject line.

Notice to Residents of California, Colorado, Connecticut, Florida, Montana, Oregon, Virginia and Utah. We are currently not subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Personal Data Privacy Act, the Florida Digital Bill of Rights, the Montana Consumer Data Privacy Act, the Oregon Consumer Privacy Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, or the Virginia Consumer Data Protection Act. If we become subject to any of these laws in the future we will update this Privacy Policy accordingly.

7. Children's Privacy

Neither the Site nor our Services are designed nor intended to be attractive to use by children under the age of 13. We do not knowingly collect information from children under the age of 13. If you are under 13 please do not submit any information to us.

8. Changes to the Privacy Policy

We may make changes to this Privacy Policy at any time. Any changes shall become effective immediately. The Privacy Policy in effect at the time you use the Site or the Services governs how we may use your information. If we make material changes we will post the revised Privacy Policy and the revised effective date on this Site. Please check back here from time to time to review any changes.