Privacy Policy

Enostics, LLC values your privacy and is committed to safeguarding personal information. This Privacy Policy outlines how we collect, use, store, and share data to support our digital quantum health tools and online healthcare community. By using Enostics services, you consent to the data practices described below, designed to ensure security, transparency, and compliance with HIPAA.

To protect user data, Enostics employs a secure, server-side processing architecture, allowing sensitive information to be handled with advanced security protocols from data intake to storage. The platform operates on a backend system built to manage and process data securely, with strict access controls and encryption mechanisms applied to all data exchanges.

Key Features of Enostics' Backend Infrastructure

End-to-End Data Encryption: All data is encrypted during transmission (using TLS) and at rest, ensuring that personal and wellness information remains protected throughout processing and storage phases.
Role-Based Access Control (RBAC): Access to data is restricted based on user roles and permissions, ensuring that only authorized personnel have access to sensitive data. This minimizes risk by strictly controlling and monitoring data access at all levels.
Automated Scaling and Data Isolation: The backend is designed to scale automatically to meet demand while keeping user data isolated to prevent unauthorized access. This architecture improves data handling efficiency and adds an extra layer of protection against unauthorized access.
Audit Logging and Monitoring: Comprehensive logging and real-time monitoring are implemented to detect and respond to any unauthorized access attempts. This audit trail ensures accountability and enables rapid response to potential security events.
Automated Backups and Redundancy: Regular automated backups ensure that data is securely stored and recoverable in the event of an emergency. Data redundancy features protect against data loss, providing a reliable and resilient data storage solution.
Compliance-Driven Infrastructure: The backend architecture aligns with HIPAA and GDPR requirements, incorporating security policies and practices that meet regulatory standards for protecting personal health information.

This robust approach ensures that all user data processed through Enostics’ server-side platform remains secure, protected, and handled in strict compliance with privacy and security regulations.

Information We Collect

Enostics collects certain types of information to facilitate services, enhance functionality, and protect user data. Information collected includes:

Personal Information: Basic identifiers such as your name, email address, and contact details, provided during account registration.
Billing Information: Payment details (e.g., credit card information) securely processed through Stripe, our payment partner. Only the last four digits and expiration date are accessible to Enostics for reference, while full billing information is managed securely by Stripe.
Health and Wellness Data: Non-diagnostic data collected through wellness scans and other services, used solely to provide educational wellness insights. This data is collected according to Enostics’ Terms of Use and is not shared with unauthorized third parties.
Technical Data: Device type, IP address, and browsing patterns, collected to optimize your user experience and protect against security threats.
Location-Based Data: When opting into local services or tools, you grant Enostics access to location data (e.g., region or nearby resources) to enhance relevant local content. This data is used strictly within the scope of local services and remains private within Enostics unless specifically disclosed and authorized by the user.

Enostics does not collect sensitive information such as race, gender, religion, or political affiliations except as required for wellness assessments or authorized by you.

How We Use Your Information

Collected information enables Enostics to deliver a secure, high-quality service that aligns with user expectations and legal obligations. Specific uses include:

Service Delivery: Personal data and wellness information are used to generate educational health insights and access services available on the platform.
Billing and Payment Processing: Billing data, managed through Stripe, supports seamless transactions. Enostics does not directly store payment information beyond essential reference details.
Communication: Enostics uses email, in-platform notifications, and SMS (if opted-in) to update you about account information, service changes, and important updates. Marketing communications are optional, with opt-out options in account settings.
Security and Compliance: Technical and location-based data help Enostics maintain platform security, prevent fraud, and comply with applicable legal and regulatory standards.

Your information is not sold, leased, or shared with third parties beyond the purposes outlined in this policy or as required by law.

Data Sharing with Third Parties

To enhance service quality, Enostics partners with trusted third parties, including:

Bruce Copen Laboratories: To support certain wellness services, some data may be shared with Bruce Copen Laboratories under strict data-sharing agreements. Bruce Copen Laboratories adheres to privacy standards that align with Enostics’ commitment to data protection. For details, refer to their Privacy Policy.
Stripe: Stripe securely processes payment transactions, adhering to PCI-DSS standards. For privacy and security details, users can refer to Stripe’s Privacy Policy.

All third-party interactions are limited to essential services and are governed by contractual agreements to uphold user privacy.

Data Security and Storage

Enostics employs stringent security protocols, including encryption, access controls, and regular audits, to protect personal data. Data is stored on secure servers and is retained only as long as necessary to fulfill service needs or meet legal obligations. Health and wellness data, along with billing details managed by Stripe, are stored in compliance with HIPAA and GDPR. Enostics may delete certain data, or files pertaining to your account after 180 days of inactivity.

User Rights and Data Management

Users retain control over their data and may exercise rights as outlined below:

Access: Request a copy of the information Enostics holds about you.
Correction: Update or correct any inaccurate information.
Deletion: Request deletion of personal data, subject to legal and service requirements.
Opt-Out: Opt out of specific communications, data uses, or third-party integrations in your account settings. Note that opting out of certain data uses may limit service functionality.

To exercise these rights, please contact Enostics support. Requests are typically addressed within 30 days.

Cookies and Tracking

Enostics does not use tracking cookies or personally identifiable tracking technologies. However, we monitor platform functionality and usage to enhance service quality and user experience.

Local Services and Location-Based Data

If you choose to enable local services, Enostics may use your location data to tailor content and suggest nearby resources. This data remains private within Enostics and is used solely to enhance local service functionality. Users can adjust permissions in account settings to control access to location-based data.

Policy Updates and Contact Information

Enostics may periodically update this Privacy Policy to reflect changes in data practices, legal requirements, or service offerings. Users are encouraged to review this policy regularly, as continued use of Enostics services constitutes acceptance of the latest terms.

For privacy inquiries, data requests, or further assistance, please contact us at:

Enostics, LLC
Email: support@enostics.com
Address: 202 N Cedar Ave, Suite 1, Owatonna, MN 55060, USA

By using Enostics services, you acknowledge and accept this Privacy Policy and our commitment to protecting your data.