Introduction

Resonateapp, Inc. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this policy.

Company develops, operates, and distributes AI-powered voice and text communication software (collectively, the "Service") used by dental practices and other healthcare providers to communicate with their patients. The Service includes SMS/text messaging, AI voice agents, appointment scheduling tools, and related data collection, storage, and analytics functionality.

This policy describes the types of information we may collect from you or that you may provide when you visit our website at https://www.resonateapp.com, interact with the Service through one of our dental practice customers (each, a "Practice"), enter information on a Practice's website or intake form powered by the Service, or otherwise use our technology (collectively, the "Service"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• On our website.
• In email, text, voice, and other electronic messages sent through the Service between Practices and their patients.
• Through web forms, intake pages, and landing pages powered by the Service, whether embedded on a Practice's own website or hosted by us on a Practice's behalf.
• Through our software-as-a-service ("SaaS") platform and application programming interface ("API").
• When you interact with our advertising or applications on third-party sites, if those applications or advertisements include links to this policy.

It does not apply to information collected by:

• Us offline or through any other means not described above.
• Any third party, including our affiliates and subsidiaries, or any Practice's own internal systems, through any application or content (including advertising) that may link to or be accessible from or on the Service.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Service. By accessing or using the Service, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy below). Your continued use of the Service after we make changes is deemed to be acceptance of those changes.

Relationship to Practices

Resonate AI provides technology services to dental practices and other healthcare providers. Each Practice that uses our Service operates independently and is the "brand" responsible for the messages sent through the Service to its own patients. Where a Practice collects personal information from its patients through our Service, the Practice is the data controller of that information, and Resonate AI acts as a service provider or processor on the Practice's behalf.

If you are a patient of a Practice and have questions about how your personal or health information is used, you should contact the Practice directly. If you have questions about how the Service itself collects or processes information, you may contact us using the information at the end of this policy.

Children Under the Age of 13

Our Service is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Service. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Service or on or through any of its features. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at (650) 308-9621 or support@resonateapp.com.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of the Service, including information:

• Collected during the account registration process through our Service or through one of our Practices.
• By which you may be personally identified, such as name, postal address, email address, telephone number, date of birth, insurance information, or any other identifier by which you may be contacted online or offline ("personal information").
• Protected Health Information ("PHI") as defined by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), where applicable.
• Audio recordings, transcripts, and other content generated through interactions with our AI voice agents.
• SMS/text message content, metadata, delivery status, and consent records.
• That is about you but individually does not identify you.
• About your internet connection, the equipment you use to access the Service, and usage details.

We collect this information:

• Directly from you when you provide it to us or to a Practice through the Service.
• Automatically as you navigate through the Service. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
• From third parties, for example, our business partners and a Practice's other service providers.

Information You Provide to Us

The information we collect on or through the Service may include:

• Information that you provide by filling in forms on the Service, including information provided at the time of registering to use the Service, subscribing to the Service, posting material, or requesting further services. We may also ask you for information when you report a problem with the Service.
• Records and copies of your correspondence (including email addresses and phone numbers), if you contact us or a Practice through the Service.
• Details of transactions you carry out through the Service and of the fulfillment of your requests.
• Your responses to surveys that we or a Practice might ask you to complete for research purposes.
• Specific information about you and your use of the Service (such as demographic data, profile data, and frequency or duration of use).
• Information you provide to a Practice through their use of our SaaS, including when you submit an intake form, book an appointment, or respond to a text or voice message.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with the Service, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to the Service, including traffic data, location data, logs, and other communication data, and the resources that you access and use on the Service.
• Information about your computer, mobile device, and internet connection, including your IP address, operating system, and browser type.

Technologies we use include cookies, flash cookies, and web beacons.

SMS/Text Messaging Privacy

The Service includes text/SMS messaging capabilities used by Practices to communicate with their patients. When a patient opts in to receive text messages from a Practice through the Service, we collect and process the mobile phone number, the timestamp and content of opt-in consent, and the messages sent and received.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text messaging services.

We do not sell, rent, share, buy, or otherwise transfer mobile phone numbers or SMS opt-in consent data to any third parties or affiliates for marketing or promotional purposes. Information is only shared with messaging aggregators and carriers as strictly necessary to deliver messages.

Standard opt-out handling (reply STOP) and help handling (reply HELP) are implemented platform-wide. Message and data rates may apply, depending on the recipient's mobile phone service plan. Message frequency varies by Practice and by the nature of the messaging program. Carriers are not liable for any delayed or undelivered messages.

For questions about our SMS messaging program, call (650) 308-9621 or email support@resonateapp.com. For full SMS messaging terms, please visit https://www.resonateapp.com/sms-terms-of-service.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To provide and maintain the Service.
• To allow Practices to communicate with their patients via SMS, voice, and other channels supported by the Service.
• To improve the Service, including through testing, research, and product development.
• For security, fraud prevention, and compliance with carrier and regulatory requirements (including A2P 10DLC, TCPA, and CTIA guidelines).
• To manage your account and respond to your inquiries.
• To notify you about changes to the Service.
• To produce aggregated, de-identified analytics and performance reporting.
• To carry out our obligations and enforce our rights arising from any contracts entered into between us and a Practice.
• In any other way we may describe when you provide the information, or for any other purpose with your consent.

Disclosure of Your Information

We may disclose aggregated or de-identified information about our users, which does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To the Practice that you are a patient of or that you interact with through the Service.
• To contractors, service providers, and other third parties we use to support our business (including messaging aggregators, carriers, cloud infrastructure providers, and customer support tools) who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Resonate AI's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Resonate AI about our Service users is among the assets transferred.
• To fulfill the purpose for which you provide it, or with your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Service and other agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Resonate AI, our customers, or others.

We do not sell personal information. We do not share mobile phone numbers or SMS consent data with third parties for marketing or promotional purposes.

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

In operating the Service, and as it relates to PHI, Company endeavors to comply in all material respects with HIPAA. Pursuant to HIPAA, dental practices and healthcare professionals from whom Company receives information about patients are Covered Entities (as defined under HIPAA), and we serve as their Business Associate (as defined under HIPAA) under executed Business Associate Agreements. As a result, some of the information we collect may constitute PHI (as defined in HIPAA), and we handle such information in accordance with HIPAA and applicable Business Associate Agreements.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications on the Service are served by third parties, including analytics providers, advertising networks, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use the Service. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us:

• Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Service may then be inaccessible or not function properly.
• SMS Opt-Out. You may opt out of any SMS messaging program at any time by replying STOP to any message you receive.
• Promotional Emails. You may unsubscribe from our promotional emails at any time by clicking the unsubscribe link at the bottom of any marketing email.

California residents may have additional personal information rights and choices. Please see Your California Privacy Rights below for more information.

Accessing and Correcting Your Information

You can review and change your personal information by calling us at (650) 308-9621 or sending us an email at support@resonateapp.com to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. If the information you are requesting is held by a Practice (for example, as part of your patient record), please contact the Practice directly.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information, including the right to know what personal information we collect, the right to request deletion, the right to request correction, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, please call (650) 308-9621 or email support@resonateapp.com.

California's "Shine the Light" law (Civil Code Section 1798.83) permits users of the Service that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please call (650) 308-9621 or email support@resonateapp.com.

Additional State Privacy Rights

Residents of states with consumer data privacy laws (including but not limited to Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have additional rights regarding their personal information, including rights of access, correction, deletion, data portability, and opt-out from certain processing. To exercise any applicable rights under your state's privacy law, please call (650) 308-9621 or email support@resonateapp.com.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include encryption of data in transit and at rest, role-based access controls, audit logging, and regular security assessments. The safety and security of your information also depends on you. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Service.

Non-US Users

The Service is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. The data protection and other laws of the United States might not be as comprehensive as those in your country. By using the Service, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this privacy policy.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page with a notice that the privacy policy has been updated. If we make material changes to how we treat our users' personal information, we will notify you through a notice on our website or by email. The date the privacy policy was last revised is identified at the top of the page. You are responsible for periodically visiting this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

Resonate AI, Inc.

Phone: (650) 308-9621

Email: support@resonateapp.com

Website: https://www.resonateapp.com

To register a complaint or concern, please call (650) 308-9621 or email support@resonateapp.com.