Privacy Policy

Effective: January 1, 2026

Pain Innovation Network ("PIN", "we", "us", or "our") operates the PIN · OS platform and associated services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, website, or services.

We are committed to protecting the privacy of all individuals whose information we process, including patients, clinical providers, researchers, and organizational partners. This policy is designed to be consistent with the Health Insurance Portability and Accountability Act (HIPAA) and applicable data protection laws.

1. Information We Collect

Information You Provide Directly

• Registration and account information (name, email, organization, role)
• Clinical and research data entered into the platform
• Survey responses and assessment data
• Support requests and communications
• Payment and billing information (processed by third-party providers)

Information Collected Automatically

• Usage data (pages visited, features used, time spent)
• Device and browser information
• IP address and approximate location
• Cookies and similar tracking technologies (see Section 6)

Protected Health Information (PHI)

When PIN processes Protected Health Information on behalf of covered entities, we act as a Business Associate under HIPAA. All PHI is handled in accordance with applicable HIPAA requirements and our Business Associate Agreement (BAA).

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our platform and services
• Process clinical data and generate research insights
• Authenticate users and maintain account security
• Respond to support requests and communications
• Send service notifications and updates (with your consent)
• Comply with legal obligations and regulatory requirements
• Conduct analytics to improve platform performance

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

• Service providers: Trusted third parties who assist in operating our platform (hosting, analytics, payment processing), bound by confidentiality obligations
• Research collaborators: De-identified or aggregated data shared with research institutions under appropriate data use agreements
• Legal requirements: When required by law, court order, or regulatory authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to continued privacy protections

4. Data Security

PIN implements administrative, technical, and physical safeguards to protect your information, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Regular security assessments and penetration testing
• SOC 2 Type II certification and ISO 27001 compliance
• HIPAA-compliant infrastructure and Business Associate Agreements with all subprocessors

5. Data Retention

We retain information for as long as necessary to provide our services, comply with legal obligations, and fulfill the purposes described in this policy. Clinical data retention periods are governed by applicable regulations and contractual agreements with covered entities.

6. Cookies

We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage patterns. You can control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal and contractual obligations)
• Object to or restrict certain processing
• Receive your data in a portable format
• File a complaint with a supervisory authority

To exercise these rights, contact us at privacy@painiq.net.

8. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy with a revised effective date and, where appropriate, by direct notification.

10. Contact Us

For privacy-related questions or to exercise your rights, contact:

Pain Innovation Network — Privacy Team
Email: privacy@painiq.net
Website: Contact Support