Website Privacy Policy

Applies to www.graymattersalliance.com. Effective Date: July 19, 2026 · Version: 1.0

Gray Matters Alliance, LLC

1. What This Policy Covers (and What It Does Not)

This Website Privacy Policy (“Policy”) describes how Gray Matters Alliance, LLC (“GMA,” “we,” “our,” or “us”) collects, uses, and protects information from visitors to our public website, www.graymattersalliance.com. It covers the pages of the Website that anyone can browse without logging in, including any contact, demo-request, careers, or newsletter forms the Website offers.

This Policy does not cover GMA’s products or services. GMA’s remote support and assistive-technology platform, including the MyCompass App, the Compass Care Calling and Compass Care Alerts Apps, the MyCompass Web Portal, the Compass Care Command Center, and Nora Caregiver Intelligence, is governed by GMA’s Mobile App & Platform Privacy Policy and, for protected health information, GMA’s Notice of Privacy Practices. If you are a client, caregiver, or provider organization using those services, those documents govern that use, and they are available on the Website. If you log in to any GMA service from a link on the Website, this Policy stops applying and the platform documents take over.

2. Our Commitment Applies Here Too

GMA’s promise to the people we serve extends to visitors of our Website: we do not sell, rent, or trade Website visitor information; we do not share it with advertisers or data brokers; we do not use it for behavioral or targeted advertising; and we do not use third-party advertising trackers or advertising pixels on the Website. Because GMA is a healthcare provider, we treat even ordinary website data more conservatively than a typical company would.

3. Information We Collect on the Website

3.1 Information you choose to give us. If you fill out a form on the Website, for example to contact us, request information or a demonstration, apply for a job, or sign up for updates, we collect what you submit, which may include your name, email address, phone number, organization, and the content of your message. Job applications may include your résumé and related materials.

3.2 Technical information collected automatically. Like most websites, our hosting and security infrastructure automatically logs limited technical data: IP address, browser type and version, device and operating-system information, the pages you visit on our Website and the time of your visit, and the referring page. We use this data for security, troubleshooting, and understanding aggregate site usage, not to build profiles of individual visitors.

3.3 Cookies and similar technologies. The Website uses only the cookies necessary for it to function and, where enabled, privacy-respecting analytics as described in Section 5. We do not use advertising cookies, cross-site tracking cookies, social-media pixels, or fingerprinting techniques. Your browser settings allow you to block or delete cookies; essential features of the Website will still work.

4. A Note About Health Information

The public Website is not intended for the exchange of medical or health information, and information you browse or submit on the public Website is generally not protected health information (“PHI”) under HIPAA. Please do not include detailed health information about yourself or another person in a Website contact form. If you share information in a form because you are seeking services, we use it only to respond to you; if you become a GMA client, information about your services is then governed by our Notice of Privacy Practices and Mobile App & Platform Privacy Policy. Because GMA is a HIPAA covered entity, we deliberately avoid tracking technologies on our Website that could link visitors to health-related inferences, consistent with guidance from the HHS Office for Civil Rights on tracking technologies.

5. How We Use Website Information

• To respond to you: answering inquiries, scheduling demonstrations, and following up on requests you make.
• To consider job applications: evaluating candidates and communicating about openings.
• To send updates you asked for: if you subscribe to updates, we send them until you unsubscribe, which you can do at any time using the link in each message.
• To operate and secure the Website: maintaining performance, detecting and preventing abuse, fraud, and security incidents, and debugging.
• To understand aggregate usage: if analytics are enabled, we use privacy-respecting, aggregate measurements (such as page views and visit counts) configured without advertising features, without cross-site tracking, and without selling or sharing data with the analytics provider for its own purposes.

We do not use Website information for advertising, profiling, or automated decision-making, and we do not combine Website visitor data with client service records.

6. When We Share Website Information

We share Website information only with:

• Service providers that host the Website, deliver email we send, or process forms on our behalf, under contracts that limit their use of the information to providing services to us;
• Professional advisors (lawyers, accountants, insurers) where reasonably necessary;
• Authorities, where required by law, subpoena, or court order, or to protect the rights, safety, or property of GMA, our clients, or others; and
• A successor entity, in the event of a merger, acquisition, reorganization, or sale of assets, in which case the successor must honor this Policy and GMA’s no-sale, no-advertising commitments, as described in our other privacy documents.

We never sell Website visitor information, never share it with data brokers, and never disclose it for another party’s advertising or marketing.

7. Your Choices and Rights

• Email: unsubscribe from updates at any time via the link in any message or by contacting us.
• Cookies: manage or block cookies through your browser settings.
• Access, correction, deletion: you may ask us what information we hold about you from the Website, ask us to correct it, or ask us to delete it; we will honor requests except where we must keep information for legal, security, or record-keeping reasons.
• Opt-out preference signals: we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of; to the extent an opt-out preference signal (such as Global Privacy Control) applies, honoring it requires no change to our practices.

Depending on where you live, state privacy laws (for example, in California, Virginia, Colorado, or Connecticut) may give you additional rights regarding personal information collected by the Website. Where such a law applies to you, we will honor the rights it provides and will not discriminate against you for exercising them. To exercise any right, contact us using Section 12.

8. Children

The Website is intended for adults, prospective clients, families, caregivers, provider organizations, and job applicants. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Website. If you believe a child has submitted personal information through the Website, contact us and we will delete it. (Information about minors who receive GMA services is governed by the platform documents and HIPAA, not this Policy.)

9. Security and Retention

We protect Website information with reasonable administrative and technical safeguards, including encryption of the Website in transit (HTTPS/TLS) and access limits on form submissions. We keep Website information only as long as needed for the purposes above, inquiries and correspondence for as long as useful to respond and follow up, job applications for the period allowed by employment-records law, and technical logs for a limited security-retention window, after which it is deleted or de-identified. No website can be guaranteed perfectly secure; please use judgment about what you submit.

10. Third-Party Links and Embedded Content

The Website may link to third-party sites (for example, app stores, social-media pages, or partner organizations) and may embed third-party content such as videos or maps. Those third parties operate under their own privacy policies, which we do not control. Where feasible, we configure embedded content in privacy-enhanced modes that limit third-party tracking. We encourage you to review the privacy policy of any site you visit from ours.

11. Changes to This Policy

We may update this Policy from time to time. The current version, with its effective date, will always be posted on the Website. If we make a material change to how we handle Website information, we will post a prominent notice on the Website before the change takes effect. We will never change this Policy to permit the sale of visitor information or its use for advertising.

12. Contact Us

For questions about this Policy or to exercise any right described in it, contact:

Gray Matters Alliance, LLC, Privacy
Attn: Kyle Dortch, Chief Administrative Officer & HIPAA Privacy Officer
Email: privacy@graymattersalliance.com
Phone: 314-266-2678
Mail: 119 S Main Street, St. Charles, MO 63301, United States

If your question concerns GMA’s services, apps, or your health information, please see the Mobile App & Platform Privacy Policy and the Notice of Privacy Practices posted on the Website, or contact the Privacy Officer directly.