Legal

Privacy Policy.

Last updated: September 18, 2026

This policy explains what CausisAI, Inc. collects when you visit causis.ai, how we use it, who we share it with, and the choices you have. It is written to be read.

1. Who we are

"Causis," "we," "us," and "our" refer to CausisAI, Inc., a Delaware corporation with a place of business at 33 Arch St, FL 17, Boston, MA 02210. We build infrastructure for medical judgment: software that supports physicians and firms in independent medical examination and related medical-legal work.

This policy applies to the marketing website at causis.ai. The Causis platform used by physicians and firms is governed by separate signed agreements, including Business Associate Agreements where applicable, and those agreements take precedence over this policy for platform users and platform data.

2. What this policy covers, and what it does not

This policy covers information collected through causis.ai, including its contact forms. It does not cover:

• Data processed inside the Causis platform under a signed customer agreement or Business Associate Agreement.
• Data collected by third-party websites we may link to, which have their own policies.
• Information you send us outside the website, such as direct email, which is handled under our ordinary business practices.

3. Information we collect

We keep this list short on purpose.

Information you provide

When you submit a contact form we ask for your name, work email, and a small number of professional details that help us respond well. Physicians provide specialty, practicing state or states, approximate matter volume, and an optional note. Firms provide firm name, role, work email, primary matter types, approximate matter volume, and an optional note. Please do not include patient names, protected health information, or confidential case details in these forms; the forms carry the same warning.

Campaign and referral context

If you arrive from one of our emails or links, the address may carry campaign parameters (such as source, campaign, and segment). We attach these to your inquiry so we understand which outreach was useful. They identify the campaign, not your browsing on other sites.

Information collected automatically

When you visit causis.ai our hosting provider records standard request metadata, including IP address, browser user agent, referring URL, and timestamp. This is used for security, abuse prevention, and aggregate traffic measurement.

Privacy-preserving analytics

We use Cloudflare Web Analytics, which measures aggregate site traffic without setting cookies and without collecting personal identifiers. It does not use cross-site tracking. We do not use Google Analytics, Meta Pixel, or any advertising tracker on this site.

Cookies

causis.ai does not set cookies for advertising, analytics, or cross-site tracking. Cloudflare may set a small number of security cookies to protect the site from abuse.

Fonts

Typography is delivered by Google Fonts. Google may log the IP address of the request as part of standard web serving.

4. How we use information, and our legal bases

We use the information above only to:

• Respond to inquiries submitted through the site and open a follow-up conversation.
• Evaluate whether we can serve a physician or a firm.
• Understand which outreach and which parts of the site are useful, in aggregate.
• Operate and secure the website, including detecting and preventing abuse.
• Comply with legal obligations, such as tax and corporate record keeping.

For visitors in the European Economic Area or the United Kingdom, our legal bases are: performance of steps you request prior to entering a contract (responding to your inquiry); our legitimate interests (operating, securing, and improving the site, and understanding our outreach), balanced against your rights; and compliance with legal obligations. Where we ever rely on consent, we will ask for it clearly and you may withdraw it at any time.

We do not sell, rent, or trade your personal information. We do not use it to train foundation models. We do not run behavioral advertising on this site.

5. When we share information

Service providers

• Cloudflare (United States and global): hosting, delivery, security, privacy-preserving analytics.
• Resend (United States): transactional email delivery for contact form notifications.

We give service providers only the information they need to perform their function, under contracts that restrict their use of it. If we add a provider that materially changes how your information is handled, we will update this policy.

Legal and safety

We may disclose information if we believe in good faith it is required by law, subpoena, or other legal process, or necessary to protect the rights, property, or safety of Causis, our users, or the public.

Business transfers

If Causis is involved in a merger, acquisition, financing, or sale of assets, information we hold may be transferred as part of that transaction. We will require the successor to honor the commitments in this policy or provide notice and choices where required by law.

6. How long we keep it

Contact form submissions are retained for as long as needed to respond to your inquiry and, if you become a customer, for the duration of the relationship plus a reasonable period for audit and record keeping. Aggregate analytics data is retained for up to 12 months. Standard security logs are retained for a shorter period as set by our hosting provider. When information is no longer needed, we delete or de-identify it.

7. Your privacy rights

Wherever you live, you can write to privacy@causis.ai to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate.
• Ask us to delete information we are not required to keep.
• Object to certain uses, or ask us to transfer your information to another provider.

We honor these requests as a matter of practice, not only where a statute compels it, and we will respond within 30 days.

California

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act. Because there is nothing to opt out of, opt-out rights are satisfied by default. Our site honors the Global Privacy Control signal by design: we have no tracking for it to disable. California residents may exercise the access, correction, and deletion rights above and will not be discriminated against for doing so.

European Economic Area and United Kingdom

You may additionally lodge a complaint with your local supervisory authority if you are not satisfied with our response. Our legal bases for processing are described in Section 4.

8. Security

We treat security as part of the product. The website and the Causis platform are built on infrastructure that supports encryption in transit and at rest, hardened network defaults, and least-privilege access controls. The platform maintains SOC 2 Type II attestation. The platform operates under HIPAA-aligned controls, with Business Associate Agreements in place with covered parties. No system is perfect; if a personal data incident meets an applicable notification threshold, we will notify affected individuals and any required regulator.

9. Children

causis.ai is intended for adult professionals. We do not knowingly collect personal information from anyone under 16, and we will delete it if we learn we have.

10. International transfers

Our vendors are located primarily in the United States. If you access the site from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our providers operate. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

11. Changes to this policy

If we make a material change we will update the date at the top and, where appropriate, notify people who have contacted us. Continued use of the site after a change means you accept the updated policy.

12. Contact

CausisAI, Inc.
33 Arch St, FL 17
Boston, MA 02210
United States

Email: privacy@causis.ai
General inquiries: contact@causis.ai