Privacy Policy

Overview

Orisan Sage is a drug information platform for medical professionals, operated by Orisan Clinical Systems (“we,” “us”). This policy describes the personal information we collect through orisansage.com and the Orisan Sage application, how we use it, and the choices you have. It applies to visitors to our website, people who submit demo requests, and users whose accounts are provisioned by their organization.

Information We Collect

• Account information. Orisan Sage accounts are created by your organization or by our team — there is no self-serve signup. We collect the name, work email address, role, and organization associated with each account.
• Demo request submissions. When you request a demo or contact us, we collect the information you provide in the form, such as your name, work email, organization, role, and message.
• Usage information. We collect information about how the website and application are used — pages visited, features used, query volumes, and technical data such as browser type and approximate location derived from IP address. For customers on the developer API tier, we record API request counts and metadata for operations and billing.

How We Use Information

• To provide, operate, and secure the Orisan Sage service.
• To respond to demo requests and support inquiries.
• To administer accounts, measure usage, and calculate billing for organizations with usage-based pricing.
• To understand how the product is used so we can improve it.
• To send service-related communications, such as account and security notices.

What We Do Not Do

• We do not sell personal information.
• We do not use personal information for third-party advertising, and we do not share it with advertising networks.

Service Providers

We use a small number of service providers to operate Orisan Sage. Each processes information only to provide its service to us:

• Amazon Web Services (AWS) — application hosting, authentication, and data storage in the United States (us-east-1 region).
• Resend — transactional email delivery (for example, account and demo-request notifications).
• Google Analytics — website usage analytics, when enabled on the marketing site.

Data Retention

We retain account information for the duration of your organization’s agreement with us and for up to 24 months afterward, unless a longer period is required by law or by contract. Demo request submissions are retained for up to 24 months. Usage and billing records are retained as needed for accounting and audit obligations.

Access and Deletion Requests

You may request access to, correction of, or deletion of your personal information by contacting us through the contact form. If your account is managed by your organization, we may direct some requests to your organization’s administrator. We respond to verified requests within a reasonable time and as required by applicable law.

Where Data Is Stored

Orisan Sage is hosted in the United States, in the AWS us-east-1 region. If you access the service from outside the United States, your information will be transferred to and processed in the United States.

Security

We use technical and organizational safeguards designed to protect personal information, including encryption in transit and at rest, authenticated access through Amazon Cognito, and least-privilege access controls. No method of transmission or storage is completely secure, so we cannot promise absolute security; we work to protect information in line with industry practice.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, notify account administrators.

Contact

Questions about this policy or our data practices can be sent through the contact form at orisansage.com/contact.