Privacy Policy

TYDEi (“TYDEi,” “we,” “us,” or “our”) provides software that helps healthcare facilities and their vendors manage contracts, pricing, rebates, and compliance. We take the privacy and security of the information entrusted to us seriously. This policy describes what we collect, how we use it, and the choices you have.

1. Information We Collect

Information you provide

• Account information — name, work email, organization, role, and authentication credentials.
• Business data you upload — contracts, pricing files, cost-of-goods (COG) and purchase data, rebate terms, and related documents.
• Communications — messages you send us through support channels or the contact form.

Information collected automatically

• Usage and device data — log data, IP address, browser type, and interactions with the platform, used to operate and secure the service.
• Cookies — strictly necessary cookies for authentication and session management. We do not use advertising cookies.

2. How We Use Information

• To provide, maintain, and improve the platform and its features.
• To authenticate users and enforce tenant isolation between organizations.
• To compute analytics, rebate accruals, and compliance metrics on your data.
• To respond to support requests and send service-related communications.
• To detect, prevent, and address security incidents, fraud, and abuse.
• To comply with legal obligations.

3. Protected Health Information (PHI)

Where TYDEi processes Protected Health Information on behalf of a covered entity or business associate as defined under HIPAA, we do so only as permitted by a written Business Associate Agreement (BAA). We apply administrative, physical, and technical safeguards designed to protect such information and limit its use to the purposes described in that agreement.

4. How We Share Information

We do not sell your personal information. We share information only:

• Within your organization’s tenant and with the counterparties you explicitly connect with (for example, a facility and its vendor on a shared contract).
• With service providers (subprocessors) who help us run the platform — such as cloud hosting, database, and transactional email providers — under contractual confidentiality and security obligations.
• For legal reasons, when required by law or to protect the rights, safety, and security of TYDEi, our users, or the public.
• In a business transfer, such as a merger or acquisition, subject to the protections of this policy.

5. Data Retention

We retain information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data subject to applicable retention requirements.

6. Security

We use industry-standard measures including encryption in transit, access controls, and strict per-tenant data scoping. No method of transmission or storage is completely secure, but we work continuously to protect your information and to notify affected parties of incidents as required by law.

7. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; we will respond consistent with applicable law.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

9. Contact Us

Questions about this policy or your data? Reach us at privacy@tydei.com or through our contact page.