Privacy Policy
Effective July 8, 2026
1. Overview
Variate Health, Inc. ("Variate Health," "we," "us") operates the website www.variatehealth.com (the "Site") and the Variate Health platform (the "Service"). This Privacy Policy describes how we collect, use, and share personal information when you visit the Site or communicate with us. By using the Site, you agree to the practices described here.
2. The Platform and Protected Health Information
The Service is enterprise software provided to healthcare organizations under separate written agreements. Where the Service involves protected health information (PHI), that information is handled under the applicable customer agreement and Business Associate Agreement and in accordance with applicable law, including HIPAA. This Policy governs the Site and our general business communications; it does not modify those agreements. Our infrastructure runs on Google Cloud under a signed Business Associate Agreement, with encryption in transit and at rest.
3. Information We Collect
Information you provide. If you email us, request information, or otherwise communicate with us, we receive the information you choose to share — typically your name, email address, organization, and the contents of your message.
Information collected automatically. When you visit the Site, we and our service providers may collect device and usage information — such as browser type, pages viewed, referring URLs, and approximate location derived from IP address — using cookies and similar technologies.
4. How We Use Information
We use personal information to operate, maintain, and secure the Site and the Service; respond to inquiries; provide notices related to our products; send occasional marketing communications, which you can opt out of at any time; develop and protect our products; and comply with legal obligations.
5. How We Share Information
We do not sell or rent personal information. We share it only with service providers who perform work on our behalf (such as hosting, analytics, and email) and are permitted to use it only for that work; with professional advisors; as required to comply with law or to protect rights, property, or safety; in connection with a corporate transaction such as a merger or acquisition; and in aggregated or de-identified form that cannot reasonably identify you.
6. Cookies and Analytics
The Site uses cookies and similar technologies for operation and analytics. We do not use Site data for cross-context behavioral advertising. Most browsers let you control cookies through settings; disabling cookies may affect Site functionality.
7. Your Privacy Rights
Depending on where you live, you may have rights under state privacy laws — including the California Consumer Privacy Act — to access, correct, delete, or obtain a copy of your personal information, and to opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising. To exercise a right, email mike@variatehealth.com; we will verify your request and respond as required by law, and we will not discriminate against you for exercising your rights.
8. Data Retention
We keep personal information for as long as needed for the purposes described in this Policy, and then delete or de-identify it, unless a longer period is required by law.
9. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
The Site is intended for business audiences. It is not directed to children under 13, and we do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Policy from time to time. We will post the updated version on this page with a new effective date.
12. Contact Us
Variate Health, Inc. — San Francisco, California. Questions about this Policy or your information: mike@variatehealth.com.
