Privacy Policy

Last Updated: January 14, 2026

RadOverlay, LLC (RadOverlay) respects the privacy of information that identifies you or is identifiable to you (Personal Information). RadOverlay’s processing of Personal Information collected through its website (https://radoverlay.com) and downloaded software applications is governed by this Privacy Policy as well as the laws and regulations that govern our processing of Personal Information, which are referred to as “Data Privacy Laws.” This Policy does not apply to RadOverlay’ processing of Personal Information for employment, or protected health information subject to the Health Insurance Portability and Accountability Act, or any other Personal Information that is otherwise excluded from Data Privacy Laws.

If you have any questions about this Policy or how RadOverlay processes Personal Information, please contact [email protected].

Personal Information

RadOverlay provides software and applications that can be used to generate structured reports and related outputs (“Services”). We provide these Services mainly to radiology enterprises and individual radiologists, who are referred to as “Clients.”

In the course of providing Services, we collect limited categories of Personal Information, which are listed below, including Personal Information that we have processed in the preceding 12 months.

• Name and Contact Information. Current and previous first, middle, and last names, signature, residential and business addresses, phone numbers, email, messaging, and online account addresses and identifiers, and other personal identifiers.
• Technological Information. Internet Protocol or IP address, Media Access Control or MAC address, browsing activity, use of RadOverlay’ website and technology systems, system configurations, and other technological information.

If you provide Personal Information to RadOverlay about any individual other than yourself, we ask and expect that you have the authority to do so or consent to do so from that Individual.

Sensitive Personal Information and Information about Children

Except as otherwise stated in this Privacy Policy, we do not intentionally collect Personal Information that is sensitive, including personally identifiable information or PII under Data Privacy Laws, protected health information or PHI and other health information, and information about race, ethnicity, national origin, citizenship, immigration status, gender and sexual orientation and identification, religion or religious belief, political affiliation, union membership, criminal and credit matters, biometric information, specific geolocation, financial information, and children, which is referred to as “Sensitive Personal Information.” For purposes of this Policy, Sensitive Personal Information is a sub-category of Personal Information.

Except as otherwise stated in this Privacy Policy, we do not intentionally collect Personal Information about individuals who are minors in the jurisdictions where they reside, who are referred to as “Children.”

Purposes and Bases for Processing Personal Information

Due to the broad range of our Services, RadOverlay may process Personal Information for a broad range of purposes and bases. The following lists some of the more common purposes and bases for which we process Personal Information.

• Consent and Direction. Based on consent and direction given to us by Clients, individuals, and third parties about whom the Personal Information pertains or who otherwise have authority or consent to provide such consent or direction.
• Provide Services. Activities related to providing Services to or for Clients, and improving the Services that we offer and provide.
• Business Relationships. Interact with Clients, individuals, and third parties with respect to RadOverlay’s or their business activities and interests.
• Compliance, safety, claims, and website. To comply with applicable laws and regulations, including Data Privacy Laws; to ensure safety and protect RadOverlay, our personnel, Clients, Individuals, third parties, and RadOverlay’s physical facilities and technology systems; to establish, enforce, and exercise our rights and defend against claims; and to monitor, develop and maintain the operation, security and integrity of our website and technology systems.
• Operations. Activities related to RadOverlay’ Operations.

Disclosure of Personal Information

RadOverlay may disclose Personal Information under the following circumstances.

• Consent and Direction. Based on consent and direction given to us by Clients, individuals and third parties about whom the Personal Information pertains or who otherwise have authority or consent to provide such consent or direction.
• Provide Services. As necessary or appropriate to provide Services to or for Clients.
• Agents of Clients, Individuals and RadOverlay. To owners, shareholders, members, managers, directors, officers, employees, associates, contractors, customers, vendors, subprocessors, service providers, agents, representatives, insurers, and attorneys of RadOverlay, Clients or Individuals as necessary or appropriate to provide Services to Clients or support our Operations. A list of current subprocessors is available at https://radoverlay.com/legal/subprocessors.
• Compliance, safety, claims and legal process. To comply with applicable laws and regulations, including Data Privacy Laws; to ensure safety and protect RadOverlay, our personnel, Clients, individuals, third parties, and RadOverlay’s physical facilities and technology systems; to establish, enforce, and exercise our rights and defend against claims; and to comply with a valid subpoena or other legal process or lawful request by governmental, regulatory, and law enforcement authorities.
• Business Transfers. In anticipation of or the course of an acquisition, merger, consolidation, restructuring, sale of ownership interests, assets or both, or other such corporate change.

Privacy Rights

Depending on the Personal Information RadOverlay processes about an individual, and the manner in which we process such Personal Information, an individual may have the following rights with respect to our processing of Personal Information about that individual.

• Scope of Processing. Disclosure about how we process Personal Information, the categories of Personal Information we process, and the categories of sources from which such Personal Information was obtained.
• Access. Access or receipt of a copy of Personal Information, including (if appropriate) in a portable, machine-readable, and commonly used format.
• Correction. Rectify or correct inaccurate or incomplete Personal Information.
• Deletion. Deletion or erasure of Personal Information.
• Withdraw Consent. Withdraw consent if we rely on consent as a basis for processing Personal Information, provided that such withdrawal will not affect the lawfulness of our processing of Personal Information before such withdrawal or the continued processing of it after withdrawal for a purpose or basis other than consent.
• Selling, Profiling, and Targeted Advertising. Disclosure about whether RadOverlay sells, shares, trades, exchanges, or brokers Personal Information with or to a third party for the purpose of that or any other third party using the Personal Information to market on their own behalf, which is referred to as “Selling”; disclosure about whether RadOverlay uses automated decision making to evaluate, analyze or predict personal aspects related to an individual’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, which is referred to as “Profiling.”; disclosure about whether RadOverlay targets advertising to individuals based on their activities on unaffiliated third party websites, which is referred to as “Targeted Advertising”; and to object or opt-out of such Selling, Profiling and Targeted Advertising.

To make a request concerning these rights, please complete and submit the Privacy Rights Request Form on our website. RadOverlay will respond to all complete requests within 45 days, subject to extension of that period. Also, there may be a delay in processing a request while we verify that the request is valid and originates from a person authorized to make it.

There may be valid reasons that require or permit us to decline to honor a request, in whole or in part, including legal and regulatory requirements that we retain and process certain information. Also, honoring certain requests may limit or prevent us from providing Services to the individual about whom the request is made. In those situations, we will notify you in writing within 45 days, subject to extension of that period. You may also contact one of our Privacy Officers for information about and help with those situations.

RadOverlay will not discriminate against you or any individual for exercising these rights or any other rights under Data Privacy Laws, including by not denying Services, not providing a different level or quality of Services, and not suggesting that you will receive a different level or quality of Services.

Selling, Profiling, and Targeted Advertising

RadOverlay does not engage in Selling, Profiling, or Targeted Advertising, except with respect to tracking technologies as discussed below.

Use of Artificial Intelligence

RadOverlay uses artificial intelligence or AI to process Personal Information and for other purposes, including for the purposes and bases described above and with respect to our Services. While it would be imprudent to attempt to list every such use of AI, particularly since it is an evolving technology, the following lists some ways that RadOverlay uses AI to process Personal Information and for other purposes: organize, summarize, analyze, recognize patterns, and identify specific aspects of information; create records, documents, text, images, communications, and similar content generated by AI based on information and prompts input into AI; conduct research; use notetakers and transcribers for meetings, video conferences, and RadOverlay events; and perform other discrete aspects of our Services. As a result, the Services provided by RadOverlay and the information generated by RadOverlay may be based, in whole or in part, on output from AI.

Video and Audio Recording

RadOverlay uses technology to facilitate meetings, video conferences, and other RadOverlay events, including technology that captures video, images, and audio, such as recording devices and AI notetakers and transcribers. By participating in RadOverlay meetings, video conferences, and events, you consent to RadOverlay’ recording and processing of video, images, and audio collected during such meetings, video conferences, and events.

Website, Cookies, Tracking Technology, and Third Party Tools

RadOverlay may collect and generate information about you when you interact with our website, which may include name and contact information (as described above), information about the device you use to interact with our website, and information about your interaction with our website (such as content you view, features you access, sites you view immediately before and after you access our website, content you view on our website, search terms you use on our website, and content in which you have indicated interest).

When you visit RadOverlay’ website, we may place a cookie (a text file containing a randomly assigned number) or a similar technology on your device so we have the ability to customize the look and feel of the website for you. Cookies remember information about you, your preferences, and your device for a better user experience when visiting the website. Using cookies, we may also collect other information about your use of the website, including your Internet Protocol or IP address, username, session, browser, web pages you view and referring web pages, when you access the website, and general online behavior for performance and marketing purposes.

RadOverlay may use third-party analytics tracking technologies and tools to collect information about how you use our website, such as the frequency of visits, pages viewed, traffic data, location, referring and exit pages, and error information. These tools may also collect device-specific data, including your IP address, operating system, browser type, and Internet connection details. These tools examine website activities to prepare usage reports, and this information helps us improve our website and enhance user experience. Tracking information will be shared with the third-party analytics provider, which may use that information for its own purposes, potentially including marketing or advertising. While the tracking information we collect through such tools is not sufficient on its own for RadOverlay to identify you, the third-party analytics provider may be able to combine it with other data it has to identify you.

If you would like to limit the ability of cookies or tracking technologies and tools to track your activity on our website, you can either configure your preferences for cookie settings on our website, or disable cookies in your Internet browser settings, although doing so may impact the performance and effectiveness of our website or other websites.

RadOverlay may use third party tools to provide Services and for other purposes, and our website may contain links to third party websites. We have no control over the policies and practices of such third-party tools and websites. Please review the applicable policies of such third parties for information regarding their processing of Personal Information.

Changes to Policy

RadOverlay reserves the right to change or amend this Privacy Policy at any time and for any reason.

Questions or Concerns

For questions or concerns, please contact [email protected].