Kopyn LLC — Privacy Policy
Effective date: 09/15/2025 | Last updated: 10/01/2025
1. Who we are and what this policy covers
Kopyn LLC ("Kopyn," "we," "us," or "our") is an Oklahoma limited liability company providing healthcare compliance technology and services, including a software platform and fractional compliance services.
This Privacy Policy explains how we handle personal information collected through our public website at kopyn.com (the "Site") and through the account-based portions of our platform — for example, account registration, billing, and support.
2. Information we collect
Information you provide to us. When you contact us, request a demo, subscribe to communications, register for an account, or purchase a subscription, we may collect your name, business email, phone number, employer/organization, job title, and any information you include in your message.
Billing information. Payments are processed by our payment provider (Stripe). We do not store full payment card numbers on our systems; Stripe handles card data under its own terms and security standards.
Account and authentication information. For registered platform users, we collect account credentials and authentication data used to secure access (managed through Amazon Cognito).
Information collected automatically. When you visit the Site, we may automatically collect technical and usage information such as IP address, browser and device type, pages viewed, referring URLs, and timestamps, through cookies and similar technologies (see Section 5).
3. How we use information
We use personal information to:
- Operate, secure, and maintain the Site and platform;
- Respond to inquiries, provide demos, and deliver customer support;
- Process subscriptions, invoices, and payments;
- Send administrative and, where permitted, marketing communications about our products and services;
- Understand and improve how the Site and platform are used;
- Comply with legal obligations and enforce our agreements.
4. How we share information — and our no-sale commitment
We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.
We share personal information only as follows:
- Service providers (subprocessors). With vendors who perform services on our behalf under contractual confidentiality and data-protection obligations, including: Amazon Web Services (hosting and infrastructure — Cognito, API Gateway, Lambda, DynamoDB), Stripe (payment processing), Microsoft (Microsoft 365 email and productivity), and Google (website analytics).
- Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of Kopyn, our clients, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
We do not authorize service providers to use your personal information for their own purposes.
5. Cookies and analytics
The Site uses cookies and similar technologies for functionality and to understand usage. We use Google Analytics on our public marketing pages to measure traffic and improve the Site. Google Analytics collects usage data as described in Google's own privacy disclosures.
We do not use Google Analytics or other third-party analytics/advertising trackers on authenticated platform pages where client data may be present.
You can control cookies through your browser settings and can opt out of Google Analytics using Google's browser add-on. We honor recognized browser-based opt-out signals (such as Global Privacy Control) where applicable.
6. Marketing communications and opt-out
If you receive marketing email from us, every message includes an unsubscribe link, and we include our postal address as required by law (CAN-SPAM Act). You may opt out of marketing email at any time using that link or by contacting us at . We may still send you non-marketing, transactional messages related to your account or subscription.
7. Your choices and requests
For personal information covered by this policy, you may:
- Access or correct the contact/account information we hold about you;
- Request deletion of marketing and contact information we maintain;
- Opt out of marketing communications (Section 6).
To make a request, email . We will respond within a reasonable time and may need to verify your identity.
Where required by applicable state privacy law, residents of certain U.S. states may have additional rights (to access, correct, delete, or obtain a portable copy of personal data, and to opt out of sale/targeted advertising). Because we do not sell personal information or use it for targeted advertising, several of these rights may not apply to our processing. To exercise any right that applies to you, contact us at .
8. Data security
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encrypted authentication, and infrastructure hosted on established cloud providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data retention
We retain personal information for as long as needed to fulfill the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements.
10. Children's privacy
The Site and our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13 (or the applicable age under local law).
11. Third-party links
The Site may link to third-party websites or services we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy practices.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Material changes will be identified as appropriate.