Privacy Policy

This privacy policy describes how HVN Portal, Inc. ("HVN Portal", "we", "our") collects, uses, and discloses personal data when you visit our website, request a demo, or use our platform under a customer agreement. We act as a controller for personal data we collect directly through this website, and as a processor for personal data our customers upload to the platform.

Personal data we collect

• Information you provide directly — name, work email, company, role, and any message content when you fill out a contact or demo form.
• Account information — for customer users, we store username, business email, hashed credentials, role, and audit-trail metadata required by 21 CFR Part 11 and EU Annex 11.
• Technical information — IP address, browser user-agent, pages viewed, and timestamps. We use these for security, fraud prevention, and aggregate analytics.

How we use it

• To respond to demo requests and customer enquiries.
• To provide and maintain the HVN Portal platform under our customer agreements.
• To meet our legal and regulatory obligations, including those under GxP and applicable data protection law.
• To improve security, prevent abuse, and audit our systems.

Legal bases (GDPR)

We rely on consent (for marketing emails where required), contract performance, legitimate interest (security, fraud prevention, product improvement), and legal obligation (tax, regulatory, audit).

Sharing

We don't sell personal data. We share it with sub-processors under contract, professional advisors, and regulators or law enforcement when legally required. International transfers from the EU/UK are governed by Standard Contractual Clauses.

Retention

Marketing-form submissions: 24 months unless you opt out earlier. Customer platform data: per the customer agreement and applicable GxP record-retention requirements (typically 25 years from last use for clinical trial records).

Your rights

You may have rights to access, correct, delete, restrict processing of, or port your personal data. Contact privacy@hvn-portal.com. EU residents may complain to a supervisory authority.

Security

SOC 2 Type II and ISO 27001 controls. Suspected compromise: security@hvn-portal.com.

Changes

Material changes posted on this page with an updated date.

Contact

HVN Portal, Inc. — 75 State Street, Suite 2500, Boston, MA 02109 — privacy@hvn-portal.com