PRIVACY AND SECURITY POLICY AGREEMENT

Updated March 2, 2026 

InstaChart Technologies, Inc. (InstaChart) values its users’ privacy. This Privacy Policy (“Policy”) will help you understand how we collect and use personal information from those who visit our website or make use of our online facilities and services, and what we will and will not do with the information we collect. Our Policy has been designed and created to ensure those affiliated with InstaChart of our commitment and realization of our obligation not only to meet, but to exceed, most existing privacy standards. 

We reserve the right to make changes to this Policy at any given time. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page. If at any point in time InstaChart decides to make use of any personally identifiable information on file, in a manner vastly different from that which was stated when this information was initially collected, the user or users shall be promptly notified by email. Users at that time shall have the option as to whether to permit the use of their information in this separate manner. 

This Policy applies to InstaChart, and it governs any and all data collection and usage by us. Through the use of www.insta-chart.ai, you are therefore consenting to the data collection procedures expressed in this Policy. 

Please note that this Policy does not govern the collection and use of information by companies that InstaChart does not control, nor by individuals not employed or managed by us. If you visit a website that we mention or link to, be sure to review its privacy policy before providing the site with information. It is highly recommended and suggested that you review the privacy policies and statements of any website you choose to use or frequent to better understand the way in which websites garner, make use of and share the information collected. 

Specifically, this Policy will inform you of the following 

1. What personally identifiable information is collected from you through our website; 
2. Why we collect personally identifiable information and the legal basis for such collection; 
3. How we use the collected information and with whom it may be shared; 
4. What choices are available to you regarding the use of your data; and 
5. The security procedures in place to protect the misuse of your information. 

Information We Collect 

It is always up to you whether to disclose personally identifiable information to us, although if you elect not to do so, we reserve the right not to register you as a user or provide you with any products or services. This website collects various types of information, such as: · Voluntarily provided information which may include your name, address, email address, billing and/or credit card information etc. which may be used when you purchase products and/or services and to deliver the services you have requested. · Information automatically collected when visiting our website, which may include cookies, third party tracking technologies and server logs. 

In addition, InstaChart may have the occasion to collect non-personal anonymous demographic information, such as age, as well as the type of browser you are using, IP address, or type of operating system, which will assist us in providing and maintaining superior quality service. 

Please rest assured that this site will only collect personal information that you knowingly and willingly provide to us by way of surveys, completed membership forms, and emails. It is the intent of this site to use personal information only for the purpose for which it was requested, and any additional uses specifically provided for on this Policy.  

Why We Collect Information and For How Long 

We are collecting your data for several reasons: 

• The primary purpose of collecting your data is to empower you to share your health data with those you authorize (family members, medical professionals, legal professionals, etc). 

• To better understand your needs and provide you with the services you have requested; 

• To fulfill our legitimate interest in improving our services and products;
• To contact you to fill out surveys or participate in other types of market research, when we have your consent to do so;
• To customize our website according to your online behavior and personal preferences.

The data we collect from you will be stored for no longer than necessary. The length of time we retain said information will be determined based upon the following criteria: the length of time your personal information remains relevant; the length of time it is reasonable to keep records to demonstrate that we have fulfilled our duties and obligations; any limitation periods within which claims might be made; any retention periods prescribed by law or recommended by regulators, professional bodies or associations; the type of contract we have with you, the existence of your consent, and our legitimate interest in keeping such information as stated in this Policy. 

Use of Information Collected 

InstaChart does not now, nor will it in the future, sell, rent or lease any of its customer lists and/or names to any third parties. 

Disclosure of Information 

InstaChart may not use or disclose the information provided by you except under the following circumstances: 

• as necessary to provide services or products you have ordered;
• in other ways described in this Policy or to which you have otherwise consented;
• in the aggregate with other information in such a way so that your identity cannot reasonably be determined;
• as required by law, or in response to a subpoena or search warrant;
• to outside auditors who have agreed to keep the information confidential;
• as necessary to enforce the Terms of Service;
• as necessary to maintain, safeguard and preserve all the rights and property of InstaChart.

Non-Marketing Purposes 

InstaChart greatly respects your privacy. We do maintain and reserve the right to contact you if needed for non-marketing purposes (such as bug alerts, security breaches, account issues, and/or changes in InstaChart products and services). In certain circumstances, we may use our website, newspapers, or other public means to post a notice. 

Children under the age of 13 

InstaChart’s website is not directed to, and does not knowingly collect personal identifiable information from, children under the age of thirteen (13). If it is determined that such information has been inadvertently collected on anyone under the age of thirteen (13), we shall immediately take the necessary steps to ensure that such information is deleted from our system’s database, or in the alternative, that verifiable parental consent is obtained for the use and storage of such information. Anyone under the age of thirteen (13) must seek and obtain parent or guardian permission to use this website. 

Unsubscribe or Opt-Out 

All users and visitors to our website have the option to discontinue receiving communications from us by way of email or newsletters. To discontinue or unsubscribe from our website please send an email that you wish to unsubscribe to support@insta-chart.ai. If you wish to unsubscribe or opt-out from any third-party websites, you must go to that specific website to unsubscribe or opt-out. InstaChart will continue to adhere to this Policy with respect to any personal information previously collected. 

Links to Other Websites 

Our website does contain links to affiliate and other websites. InstaChart does not claim nor accept responsibility for any privacy policies, practices and/or procedures of other such websites. Therefore, we encourage all users and visitors to be aware when they leave our website and to read the privacy statements of every website that collects personally identifiable information. This Privacy Policy Agreement applies only and solely to the information collected by our website. 

Notice to European Union Users 

InstaChart’s operations are located primarily in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) and sent to the United States. (The adequacy decision on the EU-US Privacy became operational on August 1, 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. It allows the free transfer of data to companies that are certified in the US under the Privacy Shield.) By providing personal information to us, you are consenting to its storage and use as described in this Policy. 

Your Rights as a Data Subject 

Under the regulations of the General Data Protection Regulation (“GDPR”) of the EU you have certain rights as a Data Subject. These rights are as follows: 

• The right to be informed: this means we must inform you of how we intend to use your personal data and we do this through the terms of this Policy.
• The right of access: this means you have the right to request access to the data we hold about you and we must respond to those requests within one month. You can do this by sending an email to .
• The right to rectification: this means that if you believe some of the date, we hold is incorrect, you have the right to have it corrected. You can do this by logging into your account with us, or by sending us an email with your request.
• The right to erasure: this means you can request that the information we hold be deleted, and we will comply unless we have a compelling reason not to, in which case you will be informed of same. You can do this by sending an email to .
• The right to restrict processing: this means you can change your communication preferences or opt-out of certain communications. You can do this by sending an email to support@championchart.com.
• The right of data portability: this means you can obtain and use the data we hold for your own purposes without explanation. If you wish to request a copy of your information, contact us at .
• The right to object: this means you can file a formal objection with us regarding our use of your information with regard to third parties, or its processing where our legal basis is our legitimate interest in it. To do this, please send an email to .

In addition to the rights above, please rest assured that we will always aim to encrypt and anonymize your personal information whenever possible. We also have protocols in place in the unlikely event that we suffer a data breach and we will contact you if your personal information is ever at risk. For more details regarding our security protections see the section below or visit our website at www.championchart.com. 

Security  

InstaChart takes precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Wherever we collect sensitive information (e.g. credit card information), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the webpage.  

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers and servers in which we store personally identifiable information are kept in a secure environment. This is all done to prevent any loss, misuse, unauthorized access, disclosure or modification of the user’s personal information under our control. 

The company also uses Secure Socket Layer (SSL) for authentication and private communications to build users’ trust and confidence in the internet and website use by providing simple and secure access and communication of credit card and personal information. In addition, InstaChart is a licensee of TRUSTe. The website is also secured by VeriSign.  

If Our Company Is Sold or Transferred

If our company is sold, merged, or transferred to another organization, your information may be transferred as part of that transaction. The new owner must follow the promises made in this Privacy Policy.

If the transfer changes how your information is used or protected, we will notify you before those changes take effect.

How We Notify You About Privacy Policy Changes

If we make important changes to this Privacy Policy, we will notify you in one or more of the following ways:

• By email to the address linked to your account

• By showing a notice inside the application when you log in

• By posting a notice on our website with an updated “Effective Date”

Your continued use of the application after receiving notice means you accept the updated Privacy Policy.

Your Right to Request Data Deletion

You may request that we delete your personal information at any time by contacting us at support@insta-chart.ai or through your account settings.

• We will complete verified deletion requests within 45 days.

• We will delete 100% of your personal information from our active production systems, unless we are required by law to keep certain records.

• Backup copies will be securely deleted according to our data retention and security policies and will not be restored into active systems.

Dormant Accounts

If your account is inactive for  24 months, it may be considered dormant.

We will notify you by email to the address linked to your account before deleting a dormant account. If no action is taken, your account and associated data will be permanently deleted within 60 days after notice.

Acceptance of Terms 

By using this website, you are hereby accepting the terms and conditions stipulated within the Privacy Policy Agreement. If you are not in agreement with our terms and conditions, then you should refrain from further use of our sites. In addition, your continued use of our website following the posting of any updates or changes to our terms and conditions shall mean that you agree and acceptance of such changes. 

Individual Access Services Notice 

This Privacy and Security Notice describes how InstaChart Technologies, Inc. accesses, uses, exchanges, and discloses Individually Identifiable Information (III) through the Trusted Exchange Framework and Common Agreement (TEFCA). This Notice is publicly available and is kept current at all times, including updated versions. It is conspicuously posted on our website and all user-facing applications.

This Notice is provided to you before your first use of our Individual Access Services (IAS). Please read it carefully before proceeding.

1. How We Access, Use, Exchange, and Disclose Your Information

InstaChart Technologies, Inc. may access, exchange, use, and/or disclose your Individually Identifiable Information (III) in the following ways and for the following purposes:

1.1 Purposes of Use

We use your III solely for the following specific purposes:

• Facility access to your health records from participating healthcare providers

1.2 Third-Party Disclosure

Your III may be accessed, exchanged, used, or disclosed to the following types of third parties:

• TEFCA-participating healthcare providers, Qualified Health Information Networks (QHINs)
• Qualified Health Information Networks (QHINs)

All disclosures through TEFCA are made in accordance with the permitted and required uses established by the TEFCA Common Agreement and applicable law.

When we share information through TEFCA-participating providers or QHINs, we require that those organizations protect Veteran information using privacy, security, and confidentiality standards that are equal to or stronger than the standards required by the U.S. Department of Veterans Affairs (VA).

1.3 Restrictions on Use

Your III will not be accessed, exchanged, used, or disclosed to assert any claim against you, except as may be necessary for fee collection related to our services.

1.4 De-Identification

We do not de-identify your III. 

1.5 Data Retention

We retain your III for [1 year, or as required by applicable law]. After this period, your information will be securely deleted or de-identified.

1.6 HIPAA Status

InstaChart Technologies, Inc. is not a HIPAA Covered Entity or Business Associate. While we are not subject to the HIPAA Rules, we are committed to protecting your information in accordance with the TEFCA Common Agreement and this Notice.

2. Your Rights

As a user of our services, you have the following rights regarding your Individually Identifiable Information:

2.1 Right to Deletion

You have the right to require that we delete your III, to the extent that deletion is technically feasible. To request deletion, contact us using the information in Section 6 below.

2.2 Right to Access

You have the right to access your III that we maintain. You may request a copy of your information at any time by contacting us.

2.3 Right to a Machine-Readable Export

You have the right to obtain a machine-readable export of your III in a standard, portable format.

2.4 Right to Be Notified of Incidents

You have the right to be notified if an IAS Incident (security breach or unauthorized access) affects your III. See Section 5 for details on what our incident notifications will include.

3. Consent

3.1 Express Documented Consent

Before you access, exchange, use, or receive any IAS from InstaChart Technologies, Inc., we will obtain your express, documented consent to the terms of this Notice. Your consent will be collected with sufficient context for you to make an informed decision, prior to your first use of our services, and will be stored in a secured, auditable log.

3.2 How to Revoke Your Consent

You may revoke your consent at any time. The revocation process is designed to be straightforward and not burdensome.

You may also revoke consent electronically by emailing support@insta-chart.ai with the subject line “Consent Revocation Request.”

Important: Revoking your consent does not affect any actions taken based on your consent prior to the date of revocation.

4. Your Choice on Information Exchange

As a Request-Only IAS Provider, InstaChart Technologies, Inc. enables you to request access to your health information via TEFCA Exchange. We do not have the capability to disclose your III to other TEFCA participants on your behalf.

If this capability changes in the future, we will update this Notice and provide you with a clear choice to opt in or opt out before your information is shared. We will respect and implement your choice at all times, subject to applicable legal requirements.

5. Security and Incident Notification

5.1 Our Commitment to Security

InstaChart Technologies, Inc. is required to act in conformance with this Notice and to protect the security of your Individually Identifiable Information. We use commercially reasonable efforts to safeguard your III and encrypt all III both in transit and at rest.

5.2 IAS Incident Notification

In the event of an IAS Incident affecting your III, we will notify you within three (3) business days of receiving a legal demand or discovering the incident. Our notification will include each of the following:

• What happened: A brief description of the incident, including the dates of occurrence if known.
• Information involved: A description of the type(s) of Individually Identifiable Information that was involved in the incident.
• Steps you should take: Recommended actions you can take to protect yourself from potential harm resulting from the incident.
• What we are doing: A description of the steps InstaChart Technologies, Inc. is taking to investigate and mitigate the incident and prevent future occurrences.
• How to contact us: Contact procedures, including a toll-free phone number, email address, and website where you can obtain additional information.

6. Complaint Process

6.1 Filing a Privacy Complaint

If you believe your privacy rights have been violated or you are dissatisfied with how your III has been handled, you may file a complaint by contacting us through any of the methods listed above.

We maintain a formal process for documenting, tracking, and resolving all privacy-related complaints. Upon receipt of your complaint:

• Acknowledgment: We will acknowledge receipt of your complaint within [INSERT TIMEFRAME, e.g., 5 business days].
• Investigation: We will investigate the matter and keep you informed of our progress.
• Resolution: We will provide you with a written response detailing the final disposition of your complaint, including any corrective actions taken.

7. Fees

InstaChart Technologies, Inc. does not currently charge any fees or costs for the use of our Individual Access Services.

8. Changes to This Notice

We may update this Notice from time to time. Updated versions and material changes will be conspicuously posted on our website and all user-facing applications no later than the effective date of the change. We will proactively make reasonable efforts to notify existing users of any material changes to this Notice.

We encourage you to review this Notice periodically. The “Last Updated” date at the top of this Notice indicates when the most recent revisions were made.

9. Sale of Data and Marketing

InstaChart Technologies, Inc. does not sell your Individually Identifiable Information and does not use it for marketing purposes.

How to Contact Us 

If you have any questions or concerns regarding the Privacy Policy Agreement related to our website, please feel free to contact us at the following email, telephone number or mailing address. 

Email: 

Telephone Number: 2817057869 

Mailing Address: 

InstaChart 

9609 N 4500 West 

Cedar Hills, UT 84062 

The data controller responsible for your personal information for the purposes of GDPR compliance is: 

Timothy Cottrell  

tim@insta-chart.ai 

2816872396