Privacy Policy

1. Overview

This Privacy Policy describes how AmbatechLLC ("AmbatechLLC," "we," "us," or "our") and our India technology partner Ambalsoft InfoTech Private Limited ("Ambalsoft") collect, use, disclose, and safeguard your information when you visit our website ambatechllc.com or engage with our products and services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services. This policy applies to all visitors, customers, and business contacts.

2. Who We Are

AmbatechLLC is a medical software company headquartered in Dublin, California, USA. We develop, distribute, and support healthcare software products and services in partnership with Ambalsoft InfoTech Private Limited, our India-based engineering partner.

Data Controllers

• AmbatechLLC — 11501 Dublin Blvd, Suite 200, Dublin, CA 94568, USA
• Ambalsoft InfoTech Pvt. Ltd. — Pitchu Old Street, Chennai – 600 004, Tamil Nadu, India

For purposes of data protection law, AmbatechLLC is the primary data controller for users in North America. Ambalsoft InfoTech acts as a data processor on behalf of AmbatechLLC for product development and support activities.

3. Information We Collect

3.1 Information You Provide Directly

• Contact information — name, email address, phone number, job title, company name
• Inquiry data — messages submitted through our contact forms or demo request forms
• Business information — details about your organization shared during sales or onboarding conversations
• Account credentials — if you create an account to access product portals or support systems
• Payment information — processed through secure third-party payment processors; we do not store card numbers

3.2 Information Collected Automatically

• Usage data — pages visited, time on site, click behavior, referral URLs
• Device data — IP address, browser type, operating system, screen resolution
• Cookies and tracking technologies — see Section 7 for details
• Log files — server access logs maintained for security monitoring

3.3 Information from Third Parties

• Business contact data from LinkedIn, trade shows, or industry events
• Referral information from business partners or resellers

4. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries, demo requests, and support tickets
• To provide, maintain, and improve our software products and services
• To process transactions and send related documentation
• To send product updates, technical notices, and security alerts
• To send marketing communications (with your consent, or where permitted by law)
• To analyze website usage and improve user experience
• To comply with legal obligations and enforce our agreements
• To protect against fraud, unauthorized access, and security threats
• To fulfill contractual obligations to our clients

We rely on the following legal bases for processing your data: (a) performance of a contract, (b) legitimate business interests, (c) your consent, and (d) compliance with legal obligations.

5. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 With Our India Partner

Ambalsoft InfoTech Pvt. Ltd. (Chennai, India) may process your data as a data processor for engineering, development, and support purposes. Appropriate data processing agreements are in place.

5.2 With Service Providers

We work with trusted third-party service providers for hosting, analytics, email, CRM, and payment processing. These providers access data only as necessary to perform services for us.

5.3 Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights and safety of our company, employees, or others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. HIPAA Compliance

AmbatechLLC and Ambalsoft are committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) where applicable to our software products and services.

• We execute Business Associate Agreements (BAAs) with covered entities and other business associates as required
• Our products are designed with HIPAA Security Rule controls including access controls, audit logs, encryption at rest and in transit
• Staff with access to PHI receive regular HIPAA training
• We maintain documented policies and procedures for HIPAA compliance
• Breach notification procedures are in place in accordance with the HIPAA Breach Notification Rule

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookies through your browser settings.

Types of Cookies We Use

• Essential cookies — required for the website to function; cannot be disabled
• Analytics cookies — help us understand how visitors use our site (e.g., Google Analytics)
• Preference cookies — remember your settings and preferences
• Marketing cookies — used to deliver relevant advertisements (only with consent)

Most browsers allow you to refuse cookies or delete existing cookies. Disabling cookies may affect website functionality. For more information, visit allaboutcookies.org.

8. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for all data in transit
• Encryption of sensitive data at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and vulnerability assessments
• Incident response and breach notification procedures
• Employee security awareness training

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to prompt notification in the event of a data breach affecting your rights.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law:

• Inquiry and contact data — retained for 3 years from last contact
• Customer account data — retained for the duration of the business relationship plus 7 years
• Financial records — retained for 7 years as required by law
• Website analytics data — anonymized after 26 months
• Support tickets — retained for 5 years for quality and audit purposes

When retention periods expire, data is securely deleted or anonymized.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restriction — request that we limit how we process your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us at privacy@ambatechllc.com. We will respond within 30 days.

11. GDPR — European Union & United Kingdom

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to your personal data.

Our lawful bases for processing under GDPR include: contractual necessity, legitimate interests, legal obligation, and consent. We have implemented appropriate safeguards for transfers of personal data from the EEA/UK to the United States and India, including Standard Contractual Clauses (SCCs).

You have the right to lodge a complaint with your local data protection authority. In the EU, find your authority at edpb.europa.eu.

12. CCPA — California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) / CPRA provides you with additional rights:

• Right to Know — what personal information we collect, use, disclose, and sell
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — we do not sell personal information; this right does not apply
• Right to Non-Discrimination — we will not discriminate against you for exercising your rights

To submit a California privacy rights request, contact privacy@ambatechllc.com or call +1 (XXX) XXX-XXXX. We will verify your identity before processing the request.

13. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@ambatechllc.com and we will delete such information promptly.

14. International Data Transfers

AmbatechLLC operates in the United States. Our India partner Ambalsoft InfoTech operates in Chennai, India. Your information may be transferred to and processed in countries other than your own.

When transferring data internationally, we implement appropriate safeguards including Standard Contractual Clauses, adequacy decisions, and binding corporate rules as applicable. By using our website or services, you consent to these transfers where such transfers are necessary for our services.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email where required by law
• Post a notice on our website homepage for significant changes

Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

16. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy team: