Legal
Privacy Policy
Last updated: August 13, 2026
1. Information we collect
We collect information you give us directly, such as your name, company, email, and phone number when you request a demo or create an account. We also collect information the Services generate as you use them, including trip records, driver credentials, dispatch logs, and billing data.
2. Protected health information
Some data processed through Iris Connect and Iris Bridge, such as trip pickup and drop-off details tied to a rider, may qualify as protected health information (PHI) under HIPAA. Where we act as a business associate, we handle that data under a signed Business Associate Agreement and use it only to provide the Services.
3. How we use information
We use information to operate and improve the Services, including dispatch, route optimization, credentialing tracking, claims generation, customer support, and account billing. We also use contact information to send product updates and, where you have opted in, marketing communications.
4. Cookies and analytics
Our website uses cookies and similar tools to understand how visitors use our site and to improve performance. You can control cookies through your browser settings.
5. How we share information
We share information with subprocessors who help us run the Services, such as hosting and payment providers, under agreements that limit their use of the data. We do not sell your information. We may share information when required by law or to protect the rights and safety of Iris, our customers, or riders.
6. Data security
We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, or loss. No system is completely secure, and we encourage you to use strong, unique passwords on your account.
7. Data retention
We keep trip, claims, and account data for as long as needed to provide the Services and to meet legal, regulatory, and audit requirements common in the NEMT industry. You can request deletion of data we are not required to retain by contacting us.
8. Your rights and choices
You can access, correct, or request deletion of your account information by contacting your account administrator or reaching out to us directly. Depending on your state, you may have additional rights over your personal information under applicable privacy law.
9. Children's privacy
The Services are intended for business use by adults working in NEMT operations. We do not knowingly collect personal information directly from children.
10. Changes to this policy
We may update this policy as our Services or legal obligations change. If we make material changes, we will notify account administrators by email or through the Services before the changes take effect.
11. Contact us
Questions about this policy or how we handle your data? Reach us at hello@irisnemt.ai or 500 Delaware Avenue, Suite 400, Wilmington, DE 19801.
