Privacy. the short version.

1. Introduction

HTJ2K MetaWave Inc. ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our codec software.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, company name, phone number when you request a demo or trial
• Account Information: Username, password, license key when you purchase our software
• Payment Information: Credit card details processed through our third-party payment processor (Stripe)
• Communication Data: Content of emails, support tickets, and other correspondence

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, pages visited
• Codec Telemetry: Performance metrics (FPS, resolution, chip type) - only if you opt-in
• Cookies: Session cookies for website functionality (see Cookie Policy below)

2.3 Information We Do NOT Collect

• We do NOT collect, process, or transmit your image data or patient health information
• Our codec operates entirely offline - no images are sent to our servers
• We do NOT track individual medical images or diagnostic data

3. How We Use Your Information

3.1 Legitimate Business Purposes

• Service Delivery: Provide codec software, licenses, and technical support
• Account Management: Create and maintain your account, process payments
• Communication: Send product updates, security alerts, and support responses
• Improvement: Analyze usage patterns to optimize performance (opt-in only)
• Compliance: Meet legal and regulatory requirements (FDA, export control)

3.2 Marketing (With Your Consent)

• Send newsletters and promotional materials (you can opt-out anytime)
• Conduct customer surveys and research

4. Data Sharing and Disclosure

4.1 We Share Information With:

• Service Providers: Stripe (payments), AWS (hosting), SendGrid (email)
• Business Partners: Authorized resellers and integration partners (with your consent)
• Legal Requirements: Law enforcement if required by subpoena or court order

4.2 We Do NOT:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your medical imaging data for any purpose

5. Data Security

We implement industry-standard security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, multi-factor authentication
• Monitoring: 24/7 security monitoring and intrusion detection
• Audits: Regular security assessments and penetration testing
• Employee Training: All staff trained on data protection and HIPAA

6. Data Retention

• Account Data: Retained while your account is active + 7 years for tax/legal compliance
• Support Tickets: Retained for 3 years
• Usage Logs: Retained for 90 days (if telemetry enabled)
• Marketing Data: Deleted within 30 days of opt-out request

7. Your Rights

7.1 Under GDPR (EU Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Object: Object to processing for marketing purposes
• Restrict: Request restriction of processing

7.2 Under CCPA (California Users)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of sale (note: we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

7.3 Exercising Your Rights

Contact us at privacy@htmeta.dev or use the data request form on our website. We respond within 30 days.

8. Cookies and Tracking

8.1 Essential Cookies

Required for website functionality (cannot be disabled):

• Session authentication
• Security tokens
• Load balancing

8.2 Analytics Cookies (Optional)

We use Google Analytics (with IP anonymization) to understand website traffic. You can opt-out via browser settings or the Google Analytics Opt-out Browser Add-on.

9. International Data Transfers

We are based in the United States. If you access our services from the EU/EEA, your data may be transferred to the US. We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

10. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect information from minors. If you believe we have inadvertently collected such data, contact us immediately.

11. Third-Party Links

Our website may contain links to third-party sites (e.g., GitHub, Twitter). We are not responsible for their privacy practices. Please review their policies before providing information.

12. Medical Data and HIPAA

Important: HTJ2K MetaWave codec software does NOT collect, transmit, or store your medical images or patient data. All processing occurs locally on your device. Therefore, we are NOT a Business Associate under HIPAA for codec usage.

If you purchase our software and provide us with Protected Health Information (PHI) during support interactions, we will execute a Business Associate Agreement (BAA) as required by HIPAA.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email. Continued use of our services after changes constitutes acceptance.

14. Contact Us

15. Jurisdiction-Specific Information

15.1 European Union

GDPR Representative: privacy-eu@htmeta.dev
You have the right to lodge a complaint with your local data protection authority.

15.2 California

CCPA Contact: ccpa@htmeta.dev
Categories of personal information collected: Identifiers, commercial information, internet activity.

15.3 Canada

PIPEDA Compliance Officer: privacy-ca@htmeta.dev