Privacy Policy

1. Who should read this Privacy Policy?

This Privacy Policy is addressed to visitors to the website and to the users of the Site and our Services who are the authorized persons of an entity that has an existing agreement with eXeX to use the platform and the Services (collectively “you” or “user”). If you browse through our website, use our Platform or Services, you need to read this Privacy Policy to understand how we collect and use your data.

2. Who is the Data Controller and Contacting Us?

Name: eXpanded eXistence, Inc., a corporation incorporated in [Delaware]
Address: 2706 Rew Circle Orlando, FL, 34786 USA
Contact email: ComplianceGroup@exex.ai

3. What personal data do we collect about you?

“Personal data” is information that, directly or indirectly, identifies you or another individual and which may include Full Name, email address, name and address of the facility you are associated with, your photo, as well as browser and device information (including Internet Protocol (IP) address), and information collected through cookies and other similar technologies. If you submit any Personal data relating to other people to us or to our service providers in connection with the Site, you represent that you have the authority to do so, have provided a copy of this Privacy Policy to the relevant individual, and that they have given their consent for us to use the information in accordance with this Privacy Policy.

a. User's Personal Data Provided to Us

We collect and process information when you visit our Site, register to use or access the Services, or otherwise interact with us. This includes information you provide, information we receive from other sources and information that we automatically collect (as discussed below) such as:

• Personal data needed for granting you access to the Site or Services such as username and email address. You are not obliged to provide us with any personal data but if you do not provide us with certain information, we cannot complete your account registration and you may be unable to access our complete services. Account registration information may include the Services licensee’s company name, postal address, telephone number and the name, email address and authorized user’s name, email address, phone number and username and password.
• Personal data you submit in connection with inquiries or calls to Customer Service such as your name, company name, email address, telephone number.
• Personal data you submit in connection with joining our Waitlist, to request a product demonstration or place an order such as you name, company name, email address, phone number, postal address, and product preference.

We may also collect, use, and disclose information about you in the course of performing a function, service, or activity for or on behalf of a HIPAA covered entity with which we have a business relationship. The terms under which we may use and disclose that information, which may include your protected health information, are governed by our business associate agreement with the covered entity and are described in the covered entity’s notice of privacy practices.

b. Data we automatically collect about you

We automatically collect information when you visit the Site and use our Services. This. This may include, but not limited to:

• Browser and device information (including Internet Protocol (IP) address), and information collected through cookies, pixels, and other similar technologies. Please check the Cookies Policy for more information about the cookies we use.
• Personal data obtained from information-gathering tools, such as log files, cookies, web beacons and similar technologies to automatically collect personal data as you navigate our Site or Services.
• Personal data obtained from Log Files. This collected information may include your IP address (or proxy server), device and application identification numbers, your general location, your browser type, your Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your operating system and system configuration information, and date/time stamps associated with your usage. This information is used to analyze overall trends, to help us provide and improve our Site and Services and to guarantee its security and continued proper functioning. We also collect IP addresses from users when they log into any "account" sections of the Site or Services as part of our security features.
• Site use information. Our web servers may collect information including the IP address of visitors to the Site, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
• Services use information. When you use our Services we may automatically collect information about your use including information about how the surgeons use our tools such as:

  -How long it takes to setup a room via surgical tech
  -Procedural Steps (Time Data)
  -Time periods during which surgeries are carried out
  -Tracking the amount of inventory and surgical tools used
  -IP Address
  -Device information
  -Number of users and sessions
  -Session duration
  -Operating systems
  -Device models
  -General location
  -First launches
  -App opens
  -App updates
  

c. Cookies and Similar Technologies; Do Not Track

We use cookies and similar technology to collect aggregate (non-personal) information about Site usage by all of our visitors and to help us remember you and your preferences when you revisit the Site. These cookies may stay on your browser into the future until they expire or you delete them. We also use technology to remember your purchase selections in your shopping cart. These cookies usually are erased when you close your browser window. Further general information about cookies and how they work is available at www.allaboutcookies.org.

We may allow selected third parties to place cookies, pixels and similar technologies through the Site to provide us with better insights into the use of the Site or user demographics or to provide relevant advertising to you. These third parties may collect information about a consumer’s online activities over time and across different websites when he or she uses our website. We may also permit third party service providers to place cookies through our Site to perform analytic or marketing functions where you are notified of them and you have consented to the usage. We do not control the use of such third party cookies or the resulting information and we are not responsible for any actions or policies of such third parties.

We do not currently use technology that recognizes a “do-not-track” signal from your web browser. As this technology matures we will update this Privacy Policy accordingly.

We have described the specific types of cookies placed by our Site and the purposes they perform in the table below:

4. Purposes For Collection and Use of Information

We collect, use, and process your data for our general commercial purposes such as to improve our Site and Services, to grow our business and to offer our own or third-party products or services that we think you may find of interest. We rely on Legitimate Interests under Article 6.1.f of the GDPR and Consent under article 6.1.a of the GDPR

1. Where your consent is not mandatory, we may process Personal data on the following lawful bases:
   • For the performance of a contract between you and us or to answer questions or take steps at your request prior to entering into a contract.
   • As necessary in certain legitimate interests (including our business interests), provided such interests are not overridden by your interests or fundamental rights and freedoms.
   • As necessary for our compliance with legal obligations to which we are subject (such as tax reporting and accounting processes).
2. We will process Personal data for the following purposes as is necessary for the performance of a contract or transaction between you and us or to answer questions or take steps at your request prior to entering into a contract:
   • To administer or otherwise carry out our obligations in relation to any agreement to which we are a party;
   • To assist you in completing a transaction or order;
   • To prepare and process invoices;
   • To respond to queries or requests and to provide the Services and associated support;
   • To provide customer relationship management;
   • To create and manage our accounts;
   • To notify you about changes to our services; and
   • To send you routine customer service messages, or information on updates.
3. We will process Personal data for the following purposes as necessary for certain legitimate interests, including:
   • To offer our services to you in a personalized way;
   • To send you personalized marketing communications where your consent is not required;
   • To allow you to participate in questionnaires, contests and surveys and benefit from personalized promotional offers;
   • To monitor quality control and ensure compliance with any and all applicable laws, regulations, codes and ordinances, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law;
   • To resolve any disputes;
   • As part of our efforts to keep our Site, Services and premises safe and secure;
   • To ensure the security of your account and our business and to prevent or detect malicious activity or abuses of our Site and Services, for example, by requesting verification information in order to reset your account password (if applicable);
   • To administer our Site and services, and for internal business administration and operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
   • To create products or Services that may meet your needs; and
   • To develop and improve our products and Services.
4. We will process Personal data for the following purposes as necessary for our compliance with legal obligations to which we are subject, including:
   • Preventing or detecting fraud; and
   • Ensuring compliance with any applicable laws, regulations, codes and ordinances, for example, in response to a binding request from a court or regulatory body, where such request is made in accordance with the law.
5. We may also process Personal data where you have given your informed consent to such processing, for example where you have signed up to one of our mailing lists. Where you have provided your consent for our processing of Personal Information, such consent may be withdrawn at any time.

We do not anticipate routinely processing special categories of personal data. However, we may do so in certain circumstances, for example where:

• You have included such information in any communications that you send us, in which case we will consider the provision of such information to constitute your express consent for us to process it; or
• Processing such personal data is strictly necessary in relation to a legal claim.

5. Accessing your information and your choices.

If you have a registered account with us you can update, amend or delete your account information at any time by logging into your account.

You can choose not to receive promotional emails from us by “unsubscribing” using the instructions in any email you receive from us. This will not stop us from sending emails about your account or your transactions with us.

You can choose to delete or block cookies by setting your browser to either reject all cookies or to allow cookies only from selected sites. If you block cookies performance of the Site may be impaired and certain features may not function at all.

1. Sharing data with third parties

   We may reveal information about you to unaffiliated third parties:

   1. if you request or authorize it;
   2. if it is necessary to provide the information to complete a transaction for you;
   3. if the information is provided to comply with the law, applicable regulations, governmental and quasi-governmental requests, court orders or subpoenas, to enforce our Terms of Use or other agreements, or to protect our rights, property or safety or the rights, property or safety of our users or others (e.g., to a consumer reporting agency for fraud protection etc.);
   4. if the disclosure is done as part of a restructure, purchase, transfer or sale of services or assets (e.g., in the event that substantially all of our assets are acquired by another party, customer information may be one of the transferred assets);
   5. if the information is provided to our agents, outside vendors or service providers to perform functions on our behalf (e.g., analyzing data, providing marketing assistance, providing customer service, processing orders, etc.);
   6. if the information is provided to our professional advisors (such as lawyers or accountants); or
   7. as otherwise described in this Privacy Policy.

   We do not share your information with unaffiliated third parties for their marketing purposes unless we have your informed consent to share your data for such purposes.

2. Retention of your data

   We retain your data for as long as it is necessary for the purpose for which it is collected. When determining the data retention period for each specific data category, we take into account various criteria such as the statutory requirements, your legitimate expectations, our business interests, and nature and sensitivity of the data.

3. International data transfers

   Our Site is maintained on servers located in the United States, and personal data submitted is stored on our servers in the United States. If you are visiting our Site from outside the United States, please be advised that your information is transferred to our U.S. servers. Disclosing your personal information to us pursuant to this Privacy Policy is at your own risk. We strive to comply with laws of jurisdictions in which we maintain operations but we make no representations that the practices described in this Privacy Policy are compliant with laws outside those jurisdictions that apply to the collection, security, use and disclosure of personal information.

   When we transfer UK and European Economic Area (“EEA”) personal data to a third party located in a country not recognized by the European Commission, or another relevant body, as ensuring an adequate level of protection, we will take appropriate steps, such as implementing the Standard Contractual Clauses under article 46 of the EU and the UK GDPR.

4. Security of your Data

   We use reasonable technical, administrative and physical measures to protect information contained in our system against unauthorized access, destruction, misuse, loss or alteration. We may use standard encryption technology to protect information being transferred to our Site, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure and we cannot guarantee its absolute security. You can contact us to learn more.

5. Your UK and European Privacy Rights and How to Exercise Them

   This section only applies to users from the EEA and the UK area. Under certain circumstances you may have the following rights:

   1. Right of Access: You may have the right to submit a request to access and obtain copies of the personal data we have concerning you. Furthermore, you may also ask for confirmation whether we hold and/or process your data.
   2. Right to rectification: You may have the right to correct any inaccuracies in personal data.
   3. Right to Object: You may have the right to object to the processing of your personal information.
   4. Right to Be Forgotten: You may have the right to request to have your personal data erased. However, this is subject to the limitations set forth in the GDPR.
   5. Right to Restriction: You may have the right to request that we restrict the processing of your personal data.
   6. Right to Data Portability: You may have the right to request to have your data transmitted to another data controller, provided that the conditions set out in the GDPR are met.

   To submit a complaint or to exercise your rights listed above, you can contact us via the following ways:

   Application by postal mail: 2706 Rew Circle Orlando, FL, 34786 USA
   Application by email: ComplianceGroup@exex.ai

6. Notice about Google Firebase

   We use Google Firebase to collect and process your data. Google Firebase collects a variety of personal data such as session information, IP address, and device information. For more information about how Google Firebase collects and uses your data, visit the Google Firebase Privacy page:

   https://firebase.google.com/support/privacy?_gl=1*wygev8*_up*MQ..*_ga*NjgxMTUxODE2LjE3MTAyNzM2Mzg.*_ga_CW55HF8NVT*MTcxMDI3MzYzNy4xLjAuMTcxMDI3MzYzNy4wLjAuMA..

7. Service Providers

   When collecting and using your data, we use various categories of service providers including cloud service providers, analytics service providers, payment processors, and Customer Relationship Management (CRM) platforms. You can contact us to learn about the specific service providers we use.

8. State Specific Notices
   1. Your California Privacy Rights.

      California residents with an established business relationship with us are permitted by California law once a year to request information about the manner in which we shared certain categories of information with others for their marketing purposes during the prior calendar year. We do not share your personal information with third parties for their direct marketing use unless we have your permission.

   2. Notice to Nevada Residents.

      We do not transfer personal information for monetary consideration. If you would like to tell us not to sell your information in the future please email us at info@expandedexistence.com with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject line.

   3. Notice to Residents of California, Colorado, Connecticut, Florida, Montana, Oregon, Virginia and Utah We are currently not subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Personal Data Privacy Act, Florida Digital Bill of Rights, the Montana Consumer Data Privacy Act, the Oregon Consumer Privacy Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, or the Virginia Consumer Data Protection Act. If we become subject to any of these laws in the future we will update this Privacy Policy accordingly.
9. Children's Privacy

   Neither the Site nor our Services are designed nor intended to be attractive to use by children under the age of 13. We do not knowingly collect information from children under the age of 13. If you are under 13 please do not submit any information to us.

10. Changes to the Privacy Policy

    We may make changes to this Privacy Policy at any time. Any changes shall become effective immediately. The Privacy Policy in effect at the time you use the Site or the Services governs how we may use your information. If we make material changes we will post the revised Privacy Policy and the revised effective date on this Site. Please check back here from time to time to review any changes.