1.   Introduction

This Privacy Policy describes how MD EXAM collects and uses Personal Information about you through the use of our Website, mobile MD EXAM, and through email, text, and other electronic communications between you and MD EXAM.MD EXAM LLC. (“MD EXAM,” “we,” “our,” or “us”) respects your privacy, and we are committed to protecting it through our compliance with this policy. This Privacy Policy (our “Privacy Policy”) describes the types of information we may collect from you or that you may provide when you visit MD EXAM.com or any of our affiliated websites where this Policy is posted(collectively, “Website”) and the MD EXAM application ( “Application”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• On our Website and Application.
• In emails, text messages, phone conversations, audio, and video interactions, and other electronic messages between you and our Website and Application.
• When you interact with our advertising and applications on third-party websites and services if those applications or advertising include links to this policy. It does not apply to information collected by:
• Us offline or through any other means, including on any other website operated by MD EXAM or any third party;
• Any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Website or Application.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, you should elect not to use our Website and application. By accessing or using our Website and/or Application, you agree to this Privacy Policy. this Privacy Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of our Website or Application after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

4.   How We Use Your Information

We use your Personal Information for various purposes described below, including to:

• Provide our Website or Application to you;
• Provide services to you;
• Provide you with information you request from us;
• Enforce our rights arising from contracts;
• Notify you about changes; and
• Provide you with notices about your account. We use information that we collect about you or that you provide to us, including any Personal Information:
• To provide and improve our Website, Application, products, and services. For example, we may convert our recordings to text and perform machine learning on data we receive;
• To provide you with information, products, or services that you request from us or that may be of interest to you;
• For purposes of treatment, quality, improvement of health status, customer and patient experience, customer and patient engagement and/or behavior modification, peer review, payment, efficiency, cost effectiveness and/or other purposes relating to operations and provision of telehealth services;
• To process, fulfill, support, and administer transactions and orders for products and services ordered by you;
• To provide you with notices about your MD EXAM account;
• To contact you in response to a request;
• To administer surveys;
• To fulfill any other purpose for which you provide it;
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us or between us and health plans or other benefit programs, including for billing and collection;
• To notify you about changes to our Website, our Application, or any products or services we offer or provide though them;
• In any other way we may describe when you provide the information; and
• For any other purpose with your consent.

We may also use your information to contact you about goods and services that may be of interest to you, including through newsletters. If you wish to opt-out of receiving such communications, you may do so at any time by clicking unsubscribe at the bottom of these communications. For more information, see “Choices About How We Use and Disclose Your Information”. Health InformationSome information MD EXAM collects constitutes protected health information (“PHI”) under the U.S. Health Insurance Portability and Accountability Act (“HIPAA”). As set forth above, MD EXAM Medical Group (or your own medical provider if you do not use an MD EXAM Medical Group Provider) will provide you with a Notice of Privacy Practices describing its collection, use, and disclosure of your PHI, not MD EXAM, Inc. MD EXAM is a “business associate” (as that term is used under HIPAA) that provides services to and for MD EXAM Medical Group, other health care providers and health care plans, referred to as “covered entities” under HIPAA, and enters into business associate agreements with these covered entities. MD EXAM will use and disclose PHI only in accordance with the business associate agreements and HIPAA. We may de-identify your Personal Information so that it no longer reasonably identifies you. In this case, we may use this de-identified data without restriction and for any purpose, including to improve our Website, Application, and products and services.

7.   Your Rights Regarding Your Information

You may review and change your Personal Information by logging into the Application or Website and visiting your User Preferences page.You can review and change your Personal Information by logging into our Website or Application and visiting either the Account Details section of our Application or Website. You may also notify us through the ContactInformation below of any changes or errors in any Personal Information we have about you to ensure that it is complete, accurate, and as current as possible or to delete your account. We cannot delete your personal information except by also deleting your account with us. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.With respect to any PHI in our possession, you have certain rights under HIPAA as described in the Notice ofPrivacy Practices provided to you by your healthcare Provider.

10.   California Privacy Rights

California residents have certain additional privacy rights as described in this Section. These California Privacy Rights supplement the other information contained in our Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). This notice is to comply with the California Consumer Privacy Act of 2018 (“CCPA“) and any terms defined in the CCPA have the same meaning when used in this notice. We may update these California Privacy Rights as necessary and in the event of changes in the CCPA. These terms apply only to California residents. Please note that the CCPA expressly excludes personal information regulated under the California Confidentiality of Medical Information Act (CMIA) and protected health information (PHI) collected by a “covered entity” ( e.g .,a health care provider or insurance plan) or “business associate” (e.g., MD EXAM) that provides services to a covered governed by HIPAA. Categories of Personal Information MD EXAM collectsAs described in more detail in other areas of our Privacy Policy, we collect and/or disclose Personal Information about you when you visit use our Website or Application, including information about you that you provide to us, and information that we automatically collect from you or your computer or device as you use our Website or Application. Please refer to Information We Collect About You and How We Collect It for additional information and details.Personal information does not include information that is: (a) publicly available information from government records; (b) de-identified or aggregated consumer information; or (c) certain information excluded from the scope of CCPA (e.g., PHI covered under HIPAA and medical information covered under the CMIA as discussed above).Categories of Sources from which MD EXAM has collected Personal Information:We collect Personal Information directly from you, for example when you provide it to us to when you contact us to our Website for Application, for create an MD EXAM account; and indirectly from you automatically through your computer or device as you use our Website or Application. We may also collect Personal Information about you from our advertising partners and service providers Use of Personal Information: We do not sell your Personal Information and have not done so in the prior 12 months from the effective date of this Policy. We may use or disclose the personal information we collect for our business purposes described elsewhere in this Privacy Policy (for example, please refer to “How We Use Your Information” and Disclosure of Your Information).Sharing Personal Information MD EXAM may disclose your Personal Information to a third party for one or more business purposes. When we disclose Personal Information for a business purpose, such as to service providers, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.Disclosures of Personal Information for Business Purposes:We may disclose your Personal Information for our business purposes, such as your contact information, other information you have provided to us and unique identifiers that identify you to us or to our service providers, such as companies that assist us with marketing and advertising. Please refer to Information We Collect About You and How We Collect It for additional information and details. We disclose your Personal Information to certain third parties such as our health care Provider partners, service providers, including companies that assist us with marketing and advertising. For additional information please refer to How We Use Your Information and Disclosure of Your Information).Access Request RightsYou have the right to request that MD EXAM disclose certain information to you about our collection and use of your Personal Information over the past 12 months for the above business and commercial purposes. To submit an access request, see Exercising Access and Deletion Rights. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of Personal Information we collected about you.
• The categories of sources for the Personal Information we collected about you.
• Our business or commercial purpose for collecting that Personal Information.
• The categories of third parties with whom we share that Personal Information.
• The specific pieces of Personal Information we collected about you.
• If we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:. o sales, identifying the Personal Information categories that each category of recipient purchased; and disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained. Deletion Request Rights You have the right to request that MD EXAM delete your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless certain exceptions apply. Exercising Access and Deletion Rights To exercise the access and deletion rights described above, please submit a verifiable consumer request to us by either:
• Calling us at (833)-210-4080.
• Emailing us at privacy@mdexam.com.Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. The verifiable consumer request must:
• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. Non-Discrimination We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. Other California Privacy Rights California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Website that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information with for the immediately prior calendar year (e.g. requests made in 2020 will receive information regarding such activities in 2019). You may request this information once per calendar year. To make such a request, please contact us by email at privacy@MDExam.com.