Privacy Policy

This Privacy Policy governs XpertDox's public-facing website (xpertdox.com) only. Protected Health Information (PHI) processed through any other XpertDox platform is governed exclusively by Business Associate Agreements (BAAs) executed with each client and is not subject to this policy. Please do not submit PHI through any form or communication channel on this website.

This website and the services offered through it are intended solely for users located in the United States. XpertDox does not direct this website to, or intend it for use by, individuals located in the European Union, the United Kingdom, or any other jurisdiction outside the United States, and makes no representation that the website or its content is appropriate or available for use outside the United States. If you access this website from outside the United States, you do so on your own initiative and are responsible for compliance with applicable local laws. This Privacy Policy is governed exclusively by the laws of the United States.

XpertDox manages this Site from its offices in the United States, and the handling of your data is governed solely by U.S. law.

By accessing or using this website, you acknowledge that you agree to the collection, use, and real-time monitoring practices. If you do not agree with it, please discontinue use of the Site. Continued use of the site after the effective date constitutes acceptance of the policy.

XpertDox may update this Privacy Policy from time to time. For minor changes (corrections, clarifications), we will post the updated policy with a new effective date. For material changes — including changes to data collection practices, vendor sharing, or user rights — we will post the updated policy prominently on this website with a new effective date at least 30 days before the changes take effect.

We gather personal information when you show interest in our services, participate in activities on our Site, or contact us. Depending on how you interact with us, this may include: first and last name; phone number; email address; mailing address (including state, province, ZIP/postal code, and city); usage data; and IP address.

Please ensure the personal information you provide is accurate and up to date, and notify us of any changes. This website does not collect PHI; any PHI processed through any other XpertDox platform is governed by a separate BAA.

When you use our services, our systems automatically gather information that may include your IP address, browser type, and device details (such as operating system and hardware settings); diagnostic and usage data collected through server logs (such as timestamps, pages viewed, and interactions like searches and features used); and device data, which may include location data depending on your device settings. This information helps us maintain the security and operation of our services, support internal analytics, and improve performance.

Depending on your device's settings, we may collect precise or imprecise location data. You can disable location services or deny access to this information by visiting your browser settings or device settings, but doing so may affect functionality.

We may obtain additional information about you from external sources such as public databases, marketing partners, and data providers. This may include mailing addresses, job titles, and contact details; user behavior data and IP addresses; social media profiles and URLs; and information used for targeted advertising and event promotion.

When you visit or log in to our website, cookies and similar technologies may be used by our data partners or vendors to associate these activities with other personal information they or others hold about you. We (or service providers on our behalf) may send marketing communications based on this information. You may opt out of marketing communications by using the unsubscribe link in any marketing email or by contacting us at support@xpertdox.com.

We use your information to send administrative communications (service updates, policy changes, and notifications); to facilitate user-to-user communication features you choose to use; to send marketing and promotional messages based on your preferences (which you may opt out of at any time); to show personalized advertising based on your interests and location; and to analyze usage trends, assess marketing effectiveness, and improve our services and experience.

We use cookies, web beacons, pixels, and similar technologies on this website. Cookies are small text files stored on your device that support site functionality, enhance your experience, and provide analytics. The specific tracking tools we use, and the vendors that receive data through them, are listed in "Sharing Your Personal Information" below.

• Advertising and Lead Generation Partners: Advertising networks and platforms that receive pseudonymized behavioral and demographic data to optimize, track, and serve targeted advertisements on our behalf across the internet.
• Marketing, CRM, and Web Analytics Providers: Software providers and analytics services that monitor site traffic, track user behavior data, host our marketing databases, and analyze usage trends to help us improve website functionality and assess marketing effectiveness.
• Session Recording and Usability Technology: Analytics platforms that record real-time user interactions (such as clicks, mouse movements, scrolling behavior, and keystrokes) to help us diagnose technical issues, optimize website performance, and improve user experience.
• Infrastructure, Hosting, and Security Providers: Cloud infrastructure, web hosting, data backup, and managed security services are utilized to host our website, store data safely, and maintain corporate data security controls.

We may share or transfer your information during business transactions such as mergers, asset sales, financing, or acquisitions.

We may disclose your information if legally required, or where we believe it necessary to comply with legal obligations, protect our rights or property, prevent wrongdoing, ensure personal safety, or protect against legal liability.

We retain personal information for as long as necessary to provide and improve our services, comply with legal obligations and regulatory requirements, establish or defend legal claims, protect against fraud or security risks, and fulfill legitimate business purposes. When we no longer need your information, we will delete or anonymize it. Data stored in backup systems or archives may be retained longer but will be securely isolated from active use and deleted in accordance with our data retention practices. We may also retain information when required by law or legal process.

In the event of a data breach affecting your personal information, XpertDox will notify affected users as required by applicable law and without undue delay following confirmation of the breach. Where we hold an email address for you, we will notify you at that address; for affected individuals whose contact information we do not hold, we will provide notice by posting it prominently on our website and by other means required by applicable law.

We do not allow children under 18 to use our Site. If we discover we have collected information from a user under 18, we will delete it promptly. If you believe we have information from a child under 18, contact us at support@xpertdox.com.

Subject to applicable law, you may have the right to: opt out of the use of your data for targeted advertising, sale or sharing, or significant decision-making profiling; withdraw consent where we process data based on consent (without affecting prior processing); unsubscribe from marketing; reject cookies through your browser; use an authorized agent to exercise your rights (we may request proof of authorization); and request that we verify your identity before acting on a request.

If you are a resident of a state with an applicable consumer privacy law, you may also have the right to: confirm whether we process your personal information; access your personal information; correct inaccuracies in your personal information; delete personal information we have collected from you; obtain a portable copy of your personal information; and opt out of the processing of your personal information for purposes of targeted advertising.

To exercise any of the rights described in this section, please contact us by email at support@xpertdox.com. We will acknowledge receipt within 10 business days and respond within 45 days. We may ask you to verify your identity before processing your request. If we deny your request in whole or in part, we will explain the reason and describe any applicable appeal process.

You may designate an authorized agent to submit a privacy rights request on your behalf. The authorized agent must provide written authorization signed by you or a valid power of attorney. We may contact you directly to verify the request before processing it.

We will not discriminate against you for exercising any of your privacy rights, including by denying goods or services, charging different prices, or providing a different level or quality of service.

This website does not collect Protected Health Information (PHI). PHI processed through any other XpertDox platform is governed by Business Associate Agreements (BAAs) with each client, not this Privacy Policy. Please do not submit any PHI through this website's forms or communication channels.

If you have questions about this Privacy Policy, contact us by email at support@xpertdox.com, by visiting the Contact page on our website, or by mail at XpertDox, LLC, 8687 East Via de Ventura, Suite 302, Scottsdale, AZ 85258.

Last updated June 2026