Aevora Healthcare Privacy Policy

Effective date: June 29, 2026

Aevora Healthcare LLC ("Aevora," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites, use AevoraOS, communicate with us, or receive operational notifications from us.

This Privacy Policy applies to Aevora websites and services that link to it, including https://app.aevorahealthcare.com , https://www.aevorahealthcare.com, and https://www.aevoraos.com. If this policy is linked from another Aevora website, such as https://www.aevoraathome.com, it applies to that website unless a different privacy policy is posted there.

If you are a patient, family member, caregiver, clinician, agency staff member, or AevoraOS user, some information may also be protected by health privacy laws, contracts, business associate agreements, provider policies, or a separate Notice of Privacy Practices. This Privacy Policy does not replace those documents.

Information We Collect

Contact and account information

This may include your name, email address, phone number, organization, role, login information, account preferences, and communication preferences.

Website and device information

When you visit our websites, we may collect technical information such as IP address, browser type, device type, pages viewed, referring pages, dates and times of visits, and general usage information.

Communications

If you contact us, request information, submit a form, schedule a call, respond to a message, or communicate with support, we may collect the information you provide and records of the communication.

AevoraOS service information

If you use AevoraOS, we may process information needed to provide account access, family portal access, staff workflows, care operations, scheduling, billing workflows, security controls, support, and audit trails. AevoraOS is designed so external text and email notifications remain generic and direct users back to authenticated AevoraOS for details.

Payment and billing-related information

If a payment workflow is enabled, payments may be processed by third-party payment providers. We do not ask you to send payment card details through text message or unsecured email.

How We Use Information

We may use information to:

• Provide, operate, secure, and improve our websites, AevoraOS, and related services.
• Create and manage accounts.
• Send account, security, support, invite, workflow, and operational notifications.
• Respond to questions, requests, and support needs.
• Configure user preferences and communication choices.
• Monitor service reliability, security, fraud prevention, and abuse prevention.
• Comply with legal, regulatory, contractual, audit, and compliance obligations.
• Evaluate and improve our products, services, websites, and user experience.
• Send marketing communications only where permitted and subject to applicable consent and opt-out requirements.

Text Messages and Mobile Phone Numbers

Aevora may send recurring text messages only to recipients who have opted in. Text messages may relate to account access, secure updates, scheduling or workflow notifications, operational reminders, and similar no-PHI nudges. Message frequency varies. Message and data rates may apply.

You can opt in through AevoraOS account, onboarding, profile, portal, family portal invitation acceptance, staff onboarding, or notification preference screens. The SMS consent checkbox must be unchecked by default. You may update SMS preferences inside AevoraOS where available.

Text messages from Aevora are intended to be generic notifications only. We do not include diagnoses, clinical notes, wound details, payment card data, GPS data, raw patient identifiers, or other sensitive care details in SMS message bodies. To review details, sign in to AevoraOS.

You can reply STOP to opt out of SMS messages. You can reply HELP for help. After you opt out, you may receive a confirmation message, and we will stop sending SMS messages to that number unless you opt in again.

We do not sell, rent, or share mobile phone numbers or SMS opt-in information with third parties for their marketing or promotional purposes. We may share mobile phone numbers with service providers, such as messaging providers, only as needed to deliver messages, operate our services, maintain consent and opt-out records, prevent abuse, or comply with law.

Email Communications

We may send transactional or operational emails, such as password reset messages, account invitations, security notices, report-ready notices, payment setup notices, or service updates. AevoraOS email messages are intended to be no-PHI nudges unless a HIPAA-eligible workflow and required agreements are in place.

If we send marketing emails, you may opt out using the unsubscribe link or by contacting us. Opting out of marketing emails does not prevent us from sending transactional, security, account, or legally required notices.

Cookies and Similar Technologies

Our websites may use cookies, pixels, analytics tools, and similar technologies to operate the site, understand usage, improve performance, secure sessions, remember preferences, and measure marketing performance where permitted.

You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.

How We Disclose Information

We may disclose information:

• To service providers that help us host, secure, operate, support, analyze, message, email, or improve our services.
• To healthcare organizations, agencies, administrators, or authorized users as needed to provide AevoraOS services.
• To payment, email, messaging, cloud, security, analytics, support, and infrastructure providers as needed for approved workflows.
• To comply with law, regulation, subpoena, court order, audit, security investigation, or government request.
• To protect rights, safety, security, users, patients, staff, services, or property.
• In connection with a business transaction, such as a merger, financing, acquisition, reorganization, or sale of assets.
• With your direction or consent.

We do not sell personal information. We do not share mobile phone numbers or SMS opt-in information with third parties for their marketing or promotional purposes.

Health Information and PHI

AevoraOS may process health-related information when used by authorized organizations, staff, patients, or family contacts. When information is protected health information ("PHI"), its use and disclosure may be governed by HIPAA, business associate agreements, provider policies, authorizations, or other health privacy requirements.

AevoraOS is designed to limit PHI exposure in external channels. Do not send PHI, clinical notes, diagnoses, wound details, payment card data, GPS data, or sensitive identifiers through SMS, unsecured email, website forms, support tickets, or vendor metadata unless the workflow has been approved for that purpose.

Security

We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Data Retention

We retain information for as long as needed to provide services, operate accounts, maintain audit and security records, comply with legal and contractual obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the type of information and the applicable workflow.

Your Choices

Depending on your relationship with Aevora and applicable law, you may be able to:

• Access, correct, or update certain account information.
• Change communication preferences.
• Opt out of marketing emails.
• Reply STOP to opt out of SMS messages.
• Request information about privacy practices.

For AevoraOS accounts provided through an organization, some requests may need to be handled by that organization.

Children's Privacy

Our public websites are not directed to children under 13. AevoraOS may process information about pediatric patients only as part of authorized healthcare, family portal, or care operations workflows. Such information should be handled only by authorized users and according to applicable privacy requirements.

Third-Party Websites and Services

Our websites or messages may link to third-party websites or services. We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information to them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. Your continued use of the websites or services after an update means the updated Privacy Policy applies.

Contact Us