Privacy Policy
This Privacy Policy describes how Corena (“Corena,” “we,” “us,” and “our”) collects, uses, discloses, and otherwise processes personal information when you visit corena.io, request a demo, or email us from this website (collectively, the “Site”). It does not address our privacy practices relating to job applicants, employees, or other personnel. It also does not describe how Corena handles information in a customer environment; that processing is governed by the applicable customer agreement.
This website is not intended to collect protected health information. Do not include patient names, medical record numbers, images, or other patient information in a demo request or in email sent through the Site.
I. What is Personal Information?
When we use the term “personal information” in this Privacy Policy, we mean information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular person or household, including information treated as “personal data” or “personally identifiable information” under applicable law.
II. Our Collection and Use of Personal Information
We collect personal information in a variety of ways. You may provide it when you request a demo or contact us. We and our service providers also collect information automatically when you visit the Site. We may combine information collected from you with information collected automatically or received from the partners described below.
1) Personal Information Collected from You.
We may collect the following categories of personal information submitted to us through the Site:
(a) Contact Information, including first and last name, work email address, company name, job title, phone number, and communication preferences. We use this information to respond to your request, schedule a demonstration, communicate with you, and manage and grow our organization.
(b) Inquiry and Communications Information, including information you include in a booking note, a form, or an email to us. We use this information to investigate and respond to your inquiry and to follow up on a demo.
2) Personal Information Automatically Collected.
As is true of many websites, we and our third-party partners may automatically collect certain information from your device when you visit or interact with the Site, including:
(a) Log Data, including IP address, operating system, device type and version, browser type and version, the URL requested, the referring page or campaign, date and time of visit, user agent data, time spent on the Site, and any errors that occur during the visit.
(b) Analytics Data, including the path you take to, through, and from the Site, UTM parameters, pages and links you view or click, and similar usage information.
(c) Location Data, such as general geographic location that we or our providers may derive from your IP address.
We and our third-party providers may use cookies (small data files stored on your computer) and related technologies such as pixels, web beacons, embedded scripts, and logging technologies (collectively, “cookies”) to collect this personal information. This helps us operate and analyze the Site. It also helps us and our advertising partners understand which campaigns brought you here and which products or services may be of interest to you. For choices regarding cookies, see Control Over Your Information below.
3) Personal Information from Third Parties.
We also obtain personal information from third parties, which we often combine with information we collect from you or automatically:
(a) Advertising and Social Media Platforms. When you interact with our ads or with our pages on platforms such as Google, LinkedIn, or Reddit, we may receive information those companies permit to be shared, such as campaign identifiers, hashed contact information used for audience matching, and whether you visited the Site after seeing an ad. What we receive depends on your settings with that platform.
(b) Service Providers. Providers that host the Site, measure its performance, or schedule demos collect personal information and share some or all of it with us so we can operate the Site and respond to you. Those providers currently include Vercel and Cal.com.
4) Additional Uses of Personal Information.
We may use personal information we collect to:
(a) Fulfill the reason the information was provided, including to schedule and follow up on a demonstration;
(b) Manage our organization and its day-to-day operations;
(c) Communicate with you, including by email, about the Site and our products;
(d) Send marketing about products or services we think may interest you, where permitted by law;
(e) Administer, measure, and improve the Site, including by recognizing returning visitors;
(f) Deliver, measure, and improve advertising, including audience creation, retargeting, and campaign attribution;
(g) Help maintain the safety, security, and integrity of the Site and our business;
(h) Enforce our terms, resolve disputes, and protect our rights and the rights of others;
(i) Prevent, investigate, or provide notice of fraud or unlawful activity;
(j) Comply with legal obligations; and
(k) Fulfill any other purpose for which you provide personal information, or any other lawful purpose to which you consent.
III. Data Retention Policy
We retain personal information for periods necessary to fulfill the purposes in this Privacy Policy or as required by applicable law. In practice:
Contact Information: Retained while we are in a sales or demo conversation with you and for a reasonable period afterward to maintain records and comply with legal obligations.
Inquiry and Communications Information: Kept as long as needed to address the inquiry and for a reasonable period afterward.
Log, Analytics, and Performance Data: Kept for the operational periods set by our hosting and analytics providers.
Advertising Identifiers: Kept according to the relevant advertising partner and your opt-out choices.
You may request deletion of your personal information at any time, subject to our legal and operational obligations, by emailing privacy@corena.io.
IV. Our Disclosure of Personal Information
We may disclose personal information to third parties as follows:
(a) Service Providers. We share personal information with companies that perform services for us, including website hosting, infrastructure, analytics, and demo scheduling. Those providers currently include Vercel (Vercel Privacy Policy) and Cal.com (Cal.com Privacy Policy).
(b) Ad Networks and Advertising Partners. We work with advertising partners to deliver and measure advertising on the Site, on other websites and services, and across devices. These parties may collect information directly from a browser or device through cookies or similar technologies. See Third-Party Data Collection and Online Advertising below.
(c) Your Employer or Company. If you interact with the Site in connection with your employer, we may disclose your information to another representative of that organization.
(d) Business Transaction or Reorganization. We may disclose personal information in connection with a merger, acquisition, financing, or sale of assets, or in the event of insolvency, bankruptcy, or receivership.
(e) Legal Obligations and Rights. We may disclose personal information to legal advisors and law enforcement:
(i) in connection with the establishment, exercise, or defense of legal claims;
(ii) to comply with law or to respond to lawful requests and legal process;
(iii) to protect our rights and property and the rights and property of others;
(iv) to detect, suppress, or prevent fraud;
(v) to protect health and safety; or
as otherwise required by applicable law.
(f) With Your Consent or at Your Direction. We may disclose personal information to other parties with your consent or at your direction.
V. Third-Party Data Collection and Online Advertising
We may participate in interest-based advertising and use third-party advertising companies to serve you advertisements based on your browsing history. We permit advertising networks, social media companies, and other third-party services to collect information about your use of the Site over time so that they may display ads on the Site, on other websites or services, and on other devices. This information is typically collected through cookies, pixels, web beacons, and similar technologies, and may include clickstream data, browser type, time and date of visit, advertising identifiers, and similar information. We may share a common account identifier, such as a hashed email address, with advertising partners to help identify you across devices, including for customer-match or similar audience programs. We and our partners use this information to make advertising more relevant and to provide reporting, attribution, analytics, and market research.
We may engage in the following:
(a) Social Media Platforms. We may display advertising to you through platforms such as LinkedIn and Reddit. These companies operate interest-based advertising programs that allow us to reach people who have visited the Site or who share similar traits. We may share a unique identifier, such as a hashed email address, with these platforms, or they may collect information from Site visitors through a pixel, in order to build an audience or retarget visitors. Those advertisements are governed by the privacy policies of the platforms that provide them, including the LinkedIn Privacy Policy and the Reddit Privacy Policy. You may be able to adjust advertising preferences in your settings on those networks.
(b) Google. We may use Google advertising and measurement products, including campaign measurement, audience creation, retargeting, and Customer Match. Google may collect information through cookies or similar technologies on the Site. We may share a unique identifier, such as a hashed email address, with Google to facilitate those services. See the Google Privacy Policy and Google’s explanation of how Google uses data when you use our partners’ sites or apps. You may control some Google advertising at adssettings.google.com.
We do not sell personal information for money. Under some U.S. state laws, including California’s CCPA/CPRA, disclosing identifiers to advertising partners for cross-context behavioral advertising can still count as a “sale” or “share.” If those laws apply to you, you can opt out as described below.
VI. Control Over Your Information
You may control your information in the following ways:
(a) Email Communications Preferences. You can stop receiving promotional email from us by using the unsubscribe link in those messages. You may not opt out of messages about a demo you requested or other service-related communications.
(b) Access, Correction, and Deletion. To review, correct, or delete personal information, or to opt out of the sale or sharing of personal information, email privacy@corena.io. For a sale or sharing opt-out, use the subject line “Do Not Sell or Share My Personal Information.” We may need to verify your request. We will not discriminate against you for exercising a privacy right. We may not be able to delete information in every circumstance, including where we must retain it for legal or operational reasons.
(c) Cookies. You can control cookies through your browser settings. Blocking some cookies may affect how the Site works.
(d) Online Ads. To learn more about interest-based advertising and how you may opt out of some of it, visit the Digital Advertising Alliance at optout.aboutads.info and the Network Advertising Initiative at optout.networkadvertising.org. You may also be able to limit interest-based advertising in your mobile device settings.
(e) Opting out of interest-based ads does not mean you will no longer see advertisements. It means that ads you see from participating companies should not be based on your inferred interests. We are not responsible for third parties’ opt-out tools. Third parties may still use cookies for analytics, fraud prevention, and other purposes permitted by applicable self-regulatory principles.
(f) Global Privacy Control. Some browsers and browser extensions can send a Global Privacy Control (“GPC”) signal, an opt-out preference signal that communicates a request to opt out of the sale or sharing of personal information. We detect that signal on the Site and treat it as a request to opt out of the sale and sharing of personal information for cross-context behavioral advertising. It takes effect automatically — you do not need to submit a request or take any other step. Because the signal is sent by your browser and we apply it without identifying you, it applies to the browser and device that sent it, and not to any other browser or device or to information we hold that is not linked to it. If you use the control on our Your Privacy Choices page to turn advertising cookies back on, that explicit choice is stored in that browser and overrides the GPC signal there until you change it or clear your browser storage.
VII. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure.
VIII. Children’s Personal Information
The Site is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will delete it.
IX. Links to Third-Party Websites or Services
The Site may include links to third-party websites, plug-ins, and applications, including the Cal.com booking flow. Except where we post, link to, or expressly adopt this Privacy Policy, it does not apply to the practices of those third parties. Please read their privacy policies to understand how they handle personal information.
X. State-Specific Disclosures
California. If you are a California resident, you may have the right to know the categories of personal information we collect, the purposes for which we use it, the categories of sources, and the categories of third parties with whom we disclose it, as described in this Privacy Policy; to request deletion or correction; and to opt out of the sale or sharing of personal information for cross-context behavioral advertising. To exercise those rights, email privacy@corena.io as described in Control Over Your Information.
Nevada. Nevada law permits a resident to opt out of the sale of certain covered information. To submit a Nevada opt-out request, email privacy@corena.io with the subject line “Nevada Opt Out Request.”
Other U.S. States. Comprehensive consumer privacy laws are also in effect in Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. To the extent one of those laws applies to our processing of your personal information, you may have the right to confirm whether we process your personal information and to access it; to obtain a copy of it in a portable form; to correct inaccuracies; to request that we delete it; and to opt out of targeted advertising, of the sale of personal information, and of certain profiling. Several of those laws also give you the right to appeal a decision we make about your request. To exercise any of these rights, email privacy@corena.io as described in Control Over Your Information; for an opt-out, use the subject line “Do Not Sell or Share My Personal Information.” We may need to verify your request, and we will not discriminate against you for making one.
Opt-Out Preference Signals. Several states, including California and Colorado, require businesses subject to their privacy laws to honor a universal opt-out mechanism such as Global Privacy Control. We honor the GPC signal on the Site for every visitor whose browser sends one, regardless of where that visitor lives, as described in Control Over Your Information.
XI. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will change the date at the beginning of this Privacy Policy. If we make material changes, we will post a notice on the Site or provide notice through other appropriate channels. Changes are effective from the date of publication unless otherwise stated.
XII. Contact Us
Corena is operated by Scout OS, Inc., which is the controller of personal information collected through the Site. Questions or requests in connection with this Privacy Policy can be sent to privacy@corena.io.