Privacy Policy Last Updated: December 11, 2025

Introduction Rubix Technology ("Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit the website rubixtechnology.com (our "Website") or when you use applications we host and manage for our customers (our "Hosted Applications"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Key Distinction: Website Data vs. Hosted Application Data

• Data collected via the Website is used only to operate, improve, and promote our services.
• Data entered into or generated within Hosted Applications (including all patient and customer data) is treated as strictly private, is never used for marketing, analytics, or any non-service purpose, and receives full HIPAA protection.

Information We Collect and How We Collect It

1. Website Data We collect the following when you visit rubixtechnology.com:

• Information you provide (e.g., name, email, phone, company, messages submitted via forms)
• Automatically collected data (IP address, browser type, device information, pages viewed, referring pages, time spent) via cookies, web beacons, and similar technologies
• Third-party analytics (Google Analytics, etc.)

2. Hosted Application Data All data you or your users enter into or that is generated within Hosted Applications — including Protected Health Information (PHI) — belongs to the customer, remains strictly confidential, and is never used for any purpose outside providing the contracted services.

How We Use Information

Website Data Used to:

• Operate and improve the Website
• Respond to inquiries
• Send marketing communications (you may opt out)
• Analyze usage and performance

Hosted Application Data Used exclusively to:

• Provide and maintain the contracted services
• Perform support, updates, and troubleshooting
• Comply with customer instructions and applicable BAA

Disclosure of Information

Website Data May be shared with:

• Service providers (hosting, analytics, marketing)
• In connection with a business transfer
• To comply with law or protect rights

Hosted Application Data We do not share, sell, rent, or disclose Hosted Application data (including PHI) to any third party except:

• As expressly directed in writing by the customer’s Business Associate Agreement (BAA)
• To authorized, HIPAA-trained subcontractors solely to perform the contracted services
• As required by law

Hosted Applications – HIPAA Compliance & Special Protections For all Hosted Applications and any PHI we process:

• We maintain full compliance with HIPAA, the HITECH Act, and all applicable regulations.
• We will promptly review, sign, and fully comply with any Business Associate Agreement (BAA) you provide.
• All application data remains your property and is treated as strictly confidential.
• Access is limited to authorized, HIPAA-trained Rubix personnel and subcontractors on a need-to-know basis.
• We implement and maintain administrative, physical, and technical safeguards that meet or exceed HIPAA Security Rule requirements.

Cookies and Tracking Technologies The Website uses cookies and similar technologies. You can control cookies through your browser settings. Hosted Applications do not use tracking technologies for marketing or analytics.

Choices About Your Information

• Opt out of marketing emails by clicking “unsubscribe”
• Manage cookie preferences via your browser
• Request access, correction, or deletion of your Website personal information by contacting us

Children Under the Age of 16 Our Website and Hosted Applications are not intended for children under 16. We do not knowingly collect personal information from children under 16.

Data Security We use reasonable administrative, technical, and physical safeguards to protect your information. For Hosted Applications, safeguards meet or exceed HIPAA requirements.

Your State Privacy Rights Residents of certain states (e.g., California, Colorado, Virginia) may have additional rights. Contact us to exercise those rights.

Changes to This Privacy Policy We may update this policy at any time. The new policy will be posted here with an updated “Last Updated” date.

Contact Us For questions about this Privacy Policy or our practices, contact: info@rubixtechnology.com

By using our Website or Hosted Applications, you agree to this Privacy Policy.