Wizia Privacy Policy

RabbitEars II, Inc. (dba Wizia) provides healthcare intervention-orchestration services to employers, health plans, risk-bearing organizations, and their authorized partners. This policy describes how Wizia handles personal information in different contexts.

1. Scope and Wizia's role

Wizia's role depends on the relationship and the data:

• Website visitor data: Wizia generally determines why and how this information is used for site operation, security, and permitted analytics.
• Prospect and demo information: Wizia uses business contact information to respond to requests, conduct diligence, and communicate about our services.
• Customer account information: Wizia uses account, administrative, support, security, and billing information to provide and manage the service.
• Protected health information (PHI): Wizia processes PHI on behalf of customers under their instructions and the applicable services agreement and Business Associate Agreement (BAA). In this context, Wizia acts as a business associate and service provider/processor, as applicable.

2. Information we collect

Website visitor data

We may collect IP address, browser and device information, pages visited, referral information, dates and times, security events, and cookie or similar-technology data used to operate and understand our website.

Prospect and demo information

We collect information you provide, such as name, work email, company, role, meeting details, communications, and diligence requests.

Customer account information

We may collect names, business contact details, roles, authentication information, account settings, approvals, support communications, audit events, and contract or billing contacts.

PHI and other customer data

Depending on the customer-authorized deployment, Wizia may process eligibility, claims, pharmacy, prior-authorization, vendor-engagement, scheduling, care-management, provider-confirmation, contact, consent, opt-out, and intervention-result data. The specific fields and permitted purposes are defined with the customer and limited to what is reasonably necessary for the service.

3. How we use information

• Operate, secure, support, and improve the website and service.
• Respond to inquiries, demo requests, diligence, and customer communications.
• Authenticate users, administer accounts, and maintain audit and security records.
• Perform customer-authorized opportunity detection, prioritization, intervention selection, partner coordination, completion confirmation, reporting, and measurement.
• Implement customer-approved consent, suppression, opt-out, clinical-exclusion, and eligibility rules.
• Comply with law, enforce agreements, prevent misuse, and protect rights and safety.

Wizia does not use PHI for its own advertising. Use of PHI for service improvement, de-identification, or aggregation is governed by the applicable customer agreement, BAA, and law.

4. Customer responsibilities

Customers determine the purposes of the healthcare workflows they authorize and are responsible for their legal authority, notices, plan and clinical rules, member eligibility, approved channels, consent requirements, incentive terms, and instructions to Wizia. Customers are also responsible for routing member requests that relate to records they control.

5. How we disclose information

Wizia does not sell PHI or use it for cross-context behavioral advertising. We may disclose information:

• To service providers and subprocessors that support hosting, security, communications, support, and other contracted operations, subject to appropriate obligations.
• To customer-designated carriers, TPAs, PBMs, providers, pharmacies, navigators, vendors, concierges, scheduling systems, or other delivery partners as required for an approved workflow.
• At a customer's direction or with the individual's authorization.
• To comply with law, protect rights and safety, investigate misuse, or respond to valid legal process.
• In a permitted corporate transaction, subject to applicable confidentiality and legal requirements.

6. Security and HIPAA

Wizia maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of customer data. These include access controls, authentication, logging, encryption, workforce controls, monitoring, incident response, and vendor-management procedures. Wizia enters BAAs when required. No security program can eliminate all risk.

Read more about Wizia security and compliance.

7. Retention

Retention depends on the data category, customer instructions, contract, deployment measurement window, security needs, and legal obligations. Customer data is returned or deleted in accordance with the applicable agreement, subject to documented backup, legal-retention, and security exceptions.

8. Member rights and request routing

If your information was processed through a health plan, employer health plan, provider, or other Wizia customer, contact that organization first. The customer controls the relevant record and determines how the request is handled. Wizia will assist the customer as required by contract and law.

For information Wizia controls directly, you may request access, correction, deletion, or other rights available under applicable law by emailing privacy@wizia.com. We may need to verify your identity. Rights vary by jurisdiction and may be subject to legal exceptions.

9. Cookies and website analytics

Wizia may use cookies or similar technologies that are necessary for site operation, security, preferences, and measurement. Where required, we will request consent for non-essential technologies. Browser controls may also allow you to restrict or delete cookies.

10. International data transfers

Wizia primarily operates in the United States. If personal information is transferred across borders, Wizia uses safeguards required by applicable law and contract.

11. Children

Wizia's website and business services are not directed to children. Healthcare data about a minor may be processed only on behalf of a customer under the customer's instructions and applicable legal and contractual safeguards.

12. Changes to this policy

We may update this policy as our services or legal obligations change. We will post the updated policy and effective date, and provide additional notice when required.

13. Contact

RabbitEars II, Inc. (dba Wizia)
149 Upper Mountain Ave
Montclair, NJ 07042 USA
privacy@wizia.com