Privacy Policy

Last Updated: September 21, 2026

RadOverlay, LLC (RadOverlay) respects the privacy of information that identifies you or is identifiable to you (Personal Information). RadOverlay’s processing of Personal Information collected through its website (https://radoverlay.com) and browser-based and downloaded software applications is governed by this Privacy Policy as well as the laws and regulations that govern our processing of Personal Information, which are referred to as “Data Privacy Laws.”

This Policy applies to account, contact, and technological information that RadOverlay processes for its own purposes, such as operating its website, providing and securing the Services, and communicating with Customers. This includes information about website visitors, prospective customers, and users of free and paid Services, whether or not they have created an account or made a payment. Inputs that Customers submit to the Services and the outputs the Services generate are governed by the applicable services agreement or Terms of Service and, for protected health information (“PHI”), the applicable business associate agreement (“BAA”) under the Health Insurance Portability and Accountability Act (“HIPAA”). This Policy does not apply to that processing, to RadOverlay’s processing of Personal Information for employment, or to Personal Information otherwise excluded from Data Privacy Laws.

If you have any questions about this Policy or how RadOverlay processes Personal Information, please contact [email protected].

Personal Information

RadOverlay provides software and applications that can be used to generate structured reports and related outputs (“Services”). We provide these Services mainly to radiology enterprises and individual radiologists. In this Policy, “Customer” means the individual or organization that is a party to the applicable Terms of Service or services agreement with RadOverlay, whether the Services are free or paid.

We collect Personal Information that you provide directly, that Customers or their representatives provide about you, and that we collect automatically when you use our website and Services. The categories below include Personal Information collected in the preceding 12 months:

  • Name and Contact Information. Current and previous first, middle, and last names, signature, residential and business addresses, phone numbers, email, messaging, and online account addresses and identifiers, and other personal identifiers.
  • Technical and Usage Information. Device and network identifiers, browser and operating system details, system configurations, application activity, diagnostic logs, and other information described under Cookies, Analytics, and Diagnostics.
  • Communications and Recordings. Messages, support requests, feedback, and recordings and transcripts of meetings and other interactions with RadOverlay.

If you provide Personal Information to RadOverlay about any individual other than yourself, we ask and expect that you have the authority to do so or consent to do so from that Individual.

Information about Children

Except as otherwise stated in this Privacy Policy, we do not intentionally collect Personal Information about individuals who are minors in the jurisdictions where they reside, who are referred to as “Children.”

Purposes and Bases for Processing Personal Information

RadOverlay processes Personal Information for the following purposes, as permitted by Data Privacy Laws:

  • Consent and Direction. Based on consent and direction given to us by Customers, individuals, and third parties about whom the Personal Information pertains or who otherwise have authority or consent to provide such consent or direction.
  • Provide and Improve Services. Operate, support, analyze, evaluate, develop, and improve the website and Services, including troubleshooting, debugging, and understanding how they are used.
  • Business Relationships. Interact with Customers, individuals, and third parties with respect to RadOverlay’s or their business activities and interests.
  • Security and Compliance. Detect, investigate, and prevent fraud, abuse, unauthorized access, and other harmful activity; protect people, data, and systems; comply with law; enforce our agreements; and establish, exercise, or defend legal claims.
  • Business Operations. Manage accounts, billing, business records, and internal administration.

Disclosure of Personal Information

RadOverlay may disclose Personal Information under the following circumstances.

  • Consent and Direction. Based on consent and direction given to us by Customers, individuals and third parties about whom the Personal Information pertains or who otherwise have authority or consent to provide such consent or direction.
  • Provide Services. As necessary or appropriate to provide Services to or for Customers.
  • Service Providers and Advisers. To providers that support our business, including hosting, analytics, diagnostics, communications, and payment processing, and to professional advisers such as attorneys, accountants, and insurers. Providers processing Personal Information on our behalf do so under contracts governing its use and protection. A list of current subprocessors is available at https://trust.radoverlay.com/subprocessors.
  • Compliance, safety, claims and legal process. To comply with applicable laws and regulations, including Data Privacy Laws; to ensure safety and protect RadOverlay, our personnel, Customers, individuals, third parties, and RadOverlay’s physical facilities and technology systems; to establish, enforce, and exercise our rights and defend against claims; and to comply with a valid subpoena or other legal process or lawful request by governmental, regulatory, and law enforcement authorities.
  • Business Transfers. In anticipation of or the course of an acquisition, merger, consolidation, restructuring, sale of ownership interests, assets or both, or other such corporate change.

Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining business records, complying with law, and resolving disputes, subject to applicable privacy rights.

Privacy Rights

Depending on the Personal Information RadOverlay processes about an individual, and the manner in which we process such Personal Information, an individual may have the following rights with respect to our processing of Personal Information about that individual.

  • Scope of Processing. Disclosure about how we process Personal Information, the categories of Personal Information we process, and the categories of sources from which such Personal Information was obtained.
  • Access. Access or receipt of a copy of Personal Information, including (if appropriate) in a portable, machine-readable, and commonly used format.
  • Correction. Rectify or correct inaccurate or incomplete Personal Information.
  • Deletion. Deletion or erasure of Personal Information.
  • Withdraw Consent. Withdraw consent if we rely on consent as a basis for processing Personal Information, provided that such withdrawal will not affect the lawfulness of our processing of Personal Information before such withdrawal or the continued processing of it after withdrawal for a purpose or basis other than consent.
  • Objection and Opt-Out. Object to or opt out of certain processing, including sales, targeted advertising, or profiling, where applicable under Data Privacy Laws.

To make a request concerning these rights, please complete and submit the Privacy Rights Request Form on our website or email [email protected]. RadOverlay will respond within the time required by applicable Data Privacy Laws, including any permitted extensions. We may need to verify your identity and authority to make the request.

There may be valid reasons that require or permit us to decline to honor a request, in whole or in part, including legal and regulatory requirements that we retain and process certain information. Also, honoring certain requests may limit or prevent us from providing Services to the individual about whom the request is made. If we decline a request, we will explain the reason and any available appeal rights as required by applicable Data Privacy Laws.

RadOverlay will not unlawfully discriminate against you for exercising your privacy rights.

Sale and Targeted Advertising

RadOverlay does not sell Personal Information or use or share it for targeted advertising based on activity across unaffiliated websites or applications. We do not permit analytics or advertising providers to use Personal Information collected through our website or Services to build profiles for their own advertising or marketing purposes.

Use of Artificial Intelligence

RadOverlay uses artificial intelligence or AI to process Personal Information and for other purposes, including for the purposes and bases described above and with respect to our Services. These uses include analyzing and summarizing information, recognizing patterns, generating content, conducting research, and transcribing meetings. RadOverlay does not use Personal Information to train or fine-tune artificial intelligence or machine-learning models.

Video and Audio Recording

RadOverlay uses technology to facilitate meetings, video conferences, and other RadOverlay events, including technology that captures video, images, and audio, such as recording devices and AI notetakers and transcribers. By participating in RadOverlay meetings, video conferences, and events, you consent to RadOverlay’s recording and processing of video, images, and audio collected during such meetings, video conferences, and events.

Cookies, Analytics, and Diagnostics

RadOverlay uses cookies and similar technologies, analytics, and diagnostic tools in its website and applications, including tools operated by service providers on our behalf. These tools help us maintain sessions and preferences, understand usage, troubleshoot problems, prevent abuse, and improve the website and Services.

Information collected may include IP addresses and other device identifiers; account and session identifiers; browser, operating system, network, and system configuration details; pages and features used, referring pages, searches, clicks, and other interactions; and diagnostic logs, errors, performance data, and information about connected systems and integrations. We may associate this information with your account or organization.

We may also use session replay to capture and reconstruct interactions with our website and applications, including navigation, clicks, scrolling, and content displayed or entered during a session. RadOverlay personnel and service providers acting on our behalf may review these replays and other diagnostic information for the purposes described above. Customer inputs, outputs, and PHI captured in logs or replays remain subject to the applicable services agreement or Terms of Service and BAA, including their use, retention, and deletion restrictions.

You can manage or disable cookies through your browser settings, although doing so may affect website functionality. Browser settings may not control all tracking technologies.

Third-Party Links

Our website and Services may link to third-party websites or services whose privacy practices are governed by their own policies. Please review those policies before providing information to them.

Changes to Policy

RadOverlay reserves the right to change or amend this Privacy Policy at any time and for any reason.

Questions or Concerns

For questions or concerns, please contact [email protected]. To exercise your privacy rights, use the Privacy Rights Request Form or email [email protected].

© 2026 RadOverlay, LLC
TI-RADS|Terms|Privacy
Trust Center
11 E Park Street, Unit 247
Lebanon, NH 03766