Last updated: April 2026. This policy describes how Cavan Ventures, LLC (operating as CriteriaIQ) collects, uses, and protects your information.
We collect information you provide directly to us, including name, email address, company name, and payment information when you subscribe to CriteriaIQ. We also collect usage data, log data, and device information when you use our services.
CriteriaIQ processes Protected Health Information as a Business Associate under HIPAA. PHI is processed in-memory for analysis purposes only and is never stored in any AI training dataset. We have a Business Associate Agreement available for all customers. See our BAA page for full details.
We use the information we collect to provide, maintain, and improve our services, process transactions, send service-related communications, and comply with legal obligations. We do not sell your personal information to third parties.
We share your information with third-party service providers that help us operate our business, including Anthropic (AI processing), Stripe (payment processing), and AWS (infrastructure). Each subprocessor is bound by data processing agreements consistent with applicable law.
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security assessments.
We retain your information for as long as your account is active or as needed to provide services. Upon termination, PHI is returned or destroyed within 30 days per our BAA terms. Account data is retained for 7 years for legal and compliance purposes.
You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@criteriaiq.com. HIPAA rights regarding PHI are governed by our Business Associate Agreement.
For privacy questions: privacy@criteriaiq.com
Cavan Ventures, LLC · Deerfield Beach, Florida