1. Scope of This Policy

Exxat Inc. (“Exxat,” “we,” “us,” “our”) respects your privacy and values your trust. The purpose of this Privacy Policy is to inform you of the treatment and handling of personal information that we may learn about you from using our website at exxat.com (the “Site”), from using our mobile application (the “App”), from your engagement with any content and/or use of any of our services provided via the Exxat One platform (“Exxat One”), including: (i) the Talent Solutions product for placement management by clinics and healthcare services providers (“Talent Solutions”); (ii) the Exxat Prism product for management of healthcare services education programs (“Exxat Prism”), which includes the Preceptor module for supervision of students in clinical practice and healthcare education programs (“Preceptor”); and (iii) the Exxat Approve product for management of compliance records, including background checks, drug screens, and vaccination records (“Exxat Approve”) (the services provided via Exxat One collectively, the “Products”), from purchasing products and services from us or engaging with our content, or by use of any of our other services (the Site, the App, our Products, content, and other services are referred to, collectively, as the “Service”). If you have any questions regarding this information or our privacy practices, please contact us via the methods set out in the How to Contact Us section at the end of this Privacy Policy.

2. Agreement to Terms

If you do not agree with the terms of this Privacy Policy and our Terms of Use, then you should immediately discontinue use of the Service without providing us with any personal information.

3. Information We Collect

We may collect the following categories of personal information (a) directly from you (such as when you e.g., register for our Service, upload documents to your profile, apply for a job, or when you contact us), (b) from third parties, such as your employer, the health professional school you attend, social media networks, and background report and drug screening providers, (c) from the device and browser that you use to access the Service, and (d) from cookies.

Identifiers

We may collect your first name, last name, email address, account username and password, mailing address, billing address, phone number, Social Security number, student ID number, and signature.

Professional and/or Employment Information

We may collect your resume, employment history, the name of your employer, and your work contact information (such as email and phone number).

Education Records

We may collect education information such as the name of the educational institution you attend, your academic records, and records of trainings in which you participated.

Health Information

We may collect information relating to your health and wellbeing, such as vaccination records, physical exam results, health insurance details, and drug and alcohol test results. This information is used by your health professional school for its own compliance and recordkeeping purposes. We will not use your health information for marketing purposes.

Background Checks and Drug Screenings

We may receive the results of any background checks and/or drug screenings that you obtain through our Exxat Approve service. We use this information to advise your school about whether you may be eligible for certain clinical placements that require background checks and/or drug screenings. We may disclose your background check or drug screening reports to your school if your school requests access to such reports.

Demographics and Characteristics

We may collect your age, race, gender identity, sex assignment at birth, health background, and military or veteran status. This information is used for industry-specific compliance requirements and to personalize the Service.

User-generated Content

We may collect the information and content of communications that you share through the Service, including any personal information that you choose to include in any prompts or other inputs that you submit to our artificial intelligence (AI) powered chatbot or other AI resources that we may make available.

Audio-Visual Information

We may collect profile pictures.

Device Information

We may collect device information when you use the Service. Device information may include unique personal identifiers, IP address, browser type, device type, access times and geolocation information.

Internet Activity

We may collect information concerning your interaction with the Service, including when you access the Service and your browsing activity on the Service (such as which pages you visit, in what order, and for how long). This may also include “traffic data” or tracking information provided by the Service’s host or similar providers (e.g., Google Analytics) that may be helpful for marketing purposes or for improving the Service.

Other Identifying Information that You Voluntarily Choose to Provide

We may collect any personal information that you choose to include in emails, letters, texts, or other communications that you send to us.

You are not required to provide all personal information identified in this Privacy Policy to use our Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able register your account or respond to your requests.

4. Deidentified and Aggregated Data

This Privacy Policy relates to your personal information, i.e., information about you, an individual, from which you can be identified. This Privacy Policy does not apply to any information insofar as it is held, processed, disclosed, or published in a form which cannot be linked to a living individual (such as anonymized or aggregated data which cannot directly or indirectly be used to identify you or to obtain information about you) (“Anonymized and Aggregated Data”). We may generate or extract Anonymized and Aggregated Data containing your personal information, and we may make use of any such Anonymized and Aggregated Data for our purposes as we see fit.

5. Important Notice About Education Records

Exxat is a service provider to health professional schools, some of which may be subject to the Family Educational Rights and Privacy Act (“FERPA”). Exxat uses education records at the direction of our health professional school clients. You may have certain rights under FERPA with respect to your education records. To learn about these rights, please visit the FERPA site. To exercise any of your rights under FERPA, please contact the health professional school that you attend directly.

6. Cookies

We store certain information that gets collected automatically at our end through cookies and other similar technologies. A cookie is a small string of information that a website that you visit transfers to your browser for identification purposes. Cookies can be used to follow your activity while using a website or across websites, and that information helps companies understand your preferences and tendencies, as well as improve and personalize your website experience. Some cookies are necessary to operate a website, while others can be functional, analytical, or used for marketing purposes, including targeted advertising (as discussed in more detail below). Cookies on the Site, App, and Products are generally divided into the following categories:

1. Strictly Necessary Cookies. These are required for the operation of the Site, App, and Products. They include, for example, cookies that enable you to log into password-protected portions of the Site, App, and Products. These cookies are session cookies that are erased when you close your browser.
2. Analytical/Performance Cookies. These allow us to recognize and count the number of visitors to the Site, App, and Products and understand how such users navigate through the Site, App, and Products (e.g., when and which pages are visited, in what order the pages are visited, and where a user is located).
   
   We also use Google Analytics for part of this process. For more information about Google Analytics, please visit https://google.com/policies/privacy/partners/. Google provides users with the ability to prevent their data from being used by Google Analytics—learn more by going to https://tools.google.com/dlpage/gaoptout.
3. Functional Cookies. These improve the functional performance of the Site, App, and Products and make them easier for you to use. For example, cookies are used to remember that you have previously visited the Site, App, or Products and asked to remain logged in (e.g., this saves your username). These cookies qualify as persistent cookies because they remain on your device for use during your next visit to the Site, App, or Products. You can delete these cookies as detailed below.
4. Marketing Cookies. These record your visit to the Site and the pages you have visited and the links you have followed, to recognize you as a previous visitor, and to track your activity on the Site and other websites you visit. These cookies are used to display ads on other websites based on your visits to our Site and other online activity. These cookies qualify as persistent cookies because they remain on your device. We use marketing cookies only on our public website; we do not use them in Exxat’s products to track your use for marketing purposes.

You can also prevent the use of certain cookies by modifying your Internet browser settings, typically under the sections “Help,” “Internet Options,” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access our Site, App, or Products, however, you might not be able to access or use important functions or features of our Site, App, or Products, and you may, for example, be required to re-enter your log-in details.

Do-Not-Track Signals

At this time, we do not recognize automated “do-not-track” browser signals.

7. Children’s Privacy

The Service is not intended for users under the age of 13, and Exxat does not knowingly collect personal information from individuals under the age of 13. If you are aware of, or suspect that, someone under the age of 13 is using the Service without permission, please notify us immediately by contacting us as detailed in the How to Contact Us section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the FTC Guidelines for protecting your child’s privacy online.

8. Our Use of Personal Information

We collect and use your personal information for the following purposes:

1. Providing the Service to you and providing products or services requested by, or reasonably anticipated within the context of our relationship with, you;
2. Managing our relationship with you, and responding to your inquires or requests, and requesting feedback;
3. Evaluating your eligibility for employment or partnership;
4. Analyzing use of the Service;
5. Keeping track of login names and passwords;
6. Personalizing the Service (e.g., displaying your name when you login);
7. Tailoring advertisements to what we or our advertising partners believe will be of interest to you;
8. Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity, or prosecuting those responsible; and
9. Complying with legal and regulatory obligations.

9. Our Disclosure of Personal Information

We may share your personal information with the following third parties:

1. Service providers, including IT outsourcing and hosting providers, communication management providers, customer relationship managers, web analytics providers, and background check and drug screening vendors. In some instances, service providers will be directly responsible to you for their use of your personal information. They may be obliged by law to provide you with additional information regarding the personal information that they hold about you and how and why they process that information. Further information may be provided to you in a separate notice or may be obtained from such service providers directly, for example, via their websites.
2. Health professional schools, in connection with these entities' management of clinical internship placement and clinical education management. If you obtain a background check and/or drug screening through our Exxat Approve service, we will review the results and, if no "records" or "hits" are found, we will notify your school only that you have been "Approved." If the background check and/or drug screening does identify any "records" or "hits," we will notify your school that you are "Not Approved." We do not assess the severity or accuracy of any item appearing in your results, but we may share your background check and/or drug screening reports with your school upon your school's request.
3. Advertising networks to provide you with relevant marketing. Please note that we will not disclose or otherwise use your social security number or health information for marketing purposes.
4. Advisers and financial institutions, including auditors, notaries, business continuity support service providers, and legal, tax, and risk and compliance advisors.
5. With third parties in connection with a change to the control or financial status of the company, including a corporate restructuring, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, assignment of assets, or business merger or divestiture. Personal information and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction.
6. Government bodies, dispute resolution organizations, law enforcement agencies, or third parties in connection with (a) responding to a subpoena, search warrant, or other lawful request for information that we receive; (b) cooperating in a law enforcement or similar investigation; or (c) otherwise protecting our rights, as applicable.

10. Your Privacy Choices

If you no longer want to receive our newsletter, emails, or other marketing communications, you may unsubscribe at any time by choosing “Unsubscribe” from the email itself or sending us a request to unsubscribe at the contact information provided below under How to Contact Us.

Please note that you cannot unsubscribe from certain correspondence from us, including messages relating directly to your account.

11. Security

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and the general information that we receive from you through the Service. Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.

You play an important role in keeping your information secure. You should not share your username or password with anyone. If you have reason to believe that your account is no longer secure, please contact us immediately at the contact information in the How to Contact Us section below.

12. Links to Other Websites

For your convenience, we may link to third-party sites and services, or otherwise display third-party content through our Service to provide increased value to our visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.

13. Effective Date and Changes to This Privacy Policy

This Privacy Policy is effective as of the date at the top of this policy. Exxat has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service. In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.

14. How to Contact Us

If you have any questions about this Privacy Policy or our Service, please contact us at info@exxat.com or support@exxat.com. In addition, you may contact us at www.exxat.com/connect/contact-us or use the live chat feature available on our Site.