Privacy Policy

This Privacy Policy applies only to this public marketing website (the "Site") operated by Post Acute Analytics, Inc. ("Post Acute Analytics," "we," "us," or "our"). It describes the information we may collect from visitors to the Site and how that information may be used.

This policy does not cover the Anna® platform or any authenticated product, customer environment, or protected health information (PHI) processed under a customer agreement or Business Associate Agreement (BAA). Those uses are governed by the applicable customer contract and associated data protection terms, not by this website policy.

You can browse most of the Site without giving us any personal information. When you choose to contact us or request a demonstration, you may provide information such as your name, work email address, organization, job title, organization type, area of interest, and any message you include.

When you submit the "Request Demo" form, we collect the details you enter so a member of our team can respond and coordinate a demonstration of Anna®. Submissions are delivered to our team by email via Microsoft's email delivery infrastructure (Microsoft Graph API). A notification copy is also received by our internal team communications platform (Slack) for routing purposes. We use this information solely to respond to your request and follow up about the specific inquiry you raised.

When you use the contact form or email us directly, we receive the information you provide (such as your name, email address, organization, and message) and use it to respond to your inquiry. Contact form submissions are logged in our customer support ticketing system (Atlassian/Jira) and a notification copy is received by our internal team communications platform (Slack) for routing purposes.

Our "Careers" links direct you to an external recruiting service (Paylocity) hosted on a third-party domain. Any information you submit through that recruiting service is handled under that provider’s own terms and privacy practices, not this policy. We encourage you to review the recruiting provider’s privacy notice before applying.

Like most websites, our hosting and content-delivery infrastructure may automatically record limited technical information when you visit, such as your IP address, browser type, device and operating system information, referring pages, and timestamps. This information helps operate, secure, and troubleshoot the Site.

We use a strictly necessary cookie to remember your cookie consent choices. Non-essential cookies and similar technologies (for example, analytics) are not used until you allow them. You can review the details and manage your choices at any time.

For the full inventory and controls, see our Cookie Policy.

Where you allow analytics cookies, we use Vercel Analytics — a privacy-friendly, aggregated analytics tool — to understand overall site traffic and performance so we can improve the Site. Vercel Analytics does not use cross-site tracking or fingerprinting, and does not load before you provide consent.

We rely on a limited set of third-party service providers to operate the Site. Each provider receives only the information necessary to perform its function:

• Vercel — hosting, content delivery, and server-side logging. Vercel processes limited technical data (such as IP addresses and request logs) as part of providing infrastructure for the Site.
• Vercel Analytics — aggregated, privacy-friendly site analytics. Loads only after you provide consent. Does not use cross-site tracking or persistent identifiers.
• Microsoft — email delivery for demo request form submissions, via Microsoft's email API infrastructure.
• Atlassian — customer support ticketing. Contact form submissions are logged in our Jira-based support system.
• Slack — internal team notifications. A copy of form submissions is routed to internal team channels for response coordination. Slack does not use this information for its own marketing purposes.
• Paylocity — external recruiting service. Careers links direct you to Paylocity's platform, which operates under its own terms and privacy policy.

The Site links to Post Acute Analytics content on LinkedIn, including our company page and our executive publication, The Post. These links take you to LinkedIn, a third-party platform governed by LinkedIn’s own terms and privacy policy. We do not control LinkedIn’s data practices.

We may use information collected through the Site to:

• Respond to your inquiries, demo requests, and messages.
• Operate, maintain, secure, and improve the Site.
• Understand aggregate site usage and performance (where analytics are consented).
• Comply with legal obligations and enforce our terms and policies.

We do not use information collected through this Site for advertising, remarketing, or marketing communications beyond responding to the specific inquiry you submitted.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may share information with service providers who process it on our behalf (as listed in the Third-Party Service Providers section above), and where required to comply with law, protect our rights, or in connection with a corporate transaction such as a merger or acquisition. Any such sharing is limited to what is necessary for the stated purpose.

We retain information collected through the Site only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Our general practices:

• Form submissions (demo requests and contact inquiries) — retained for up to two years, or until the inquiry is resolved, whichever is sooner.
• Server and access logs — subject to Vercel's own retention practices as our hosting provider.
• Aggregated analytics data — retained for up to twelve months.
• Cookie consent records — retained for approximately six months, after which we will ask for your preferences again.

We use reasonable administrative, technical, and organizational measures designed to protect information handled through the Site. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Post Acute Analytics is based in the United States, and information collected through this Site is processed and stored in the United States. If you visit this Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your country of residence. By using this Site, you acknowledge this transfer.

The Site contains links to third-party websites and services (for example, LinkedIn and the external recruiting service). We are not responsible for the privacy practices or content of those third parties. Please review their policies directly.

The Site is intended for a business audience and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can address it.

Depending on where you live, you may have rights regarding your personal information under applicable law. U.S. residents in states with comprehensive privacy laws — including California, Colorado, Connecticut, Texas, Virginia, and others — may have the right to:

• Know what personal information we have collected about you.
• Access a copy of your personal information.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information for these purposes.
• Appeal a decision we make regarding your privacy request.

Residents of the European Economic Area, the United Kingdom, and Switzerland may have additional rights under GDPR or equivalent legislation, including the right to data portability and the right to lodge a complaint with a supervisory authority.

To submit a privacy request, contact us at info@paanalytics.com. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling a request.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated as appropriate.

If you have questions about this Privacy Policy, contact us at: