Privacy Policy.

This Privacy Policy describes how InterScripts, Inc. and its affiliates (“InterScripts,” “we,” “us,” or “our”) collect, use, share, and protect personal information when you visit our websites (including interscripts.com), interact with our marketing materials, request demos or capability statements, register for events, apply for employment, or otherwise engage with InterScripts in a business or prospective-business context (collectively, the “Services”).

This Policy does not cover personal information that we process on behalf of our customers in connection with the BytePad platform or our professional services engagements; in those cases, InterScripts acts as a service provider or processor, and the customer's privacy notice and our written agreement with that customer govern the processing. For questions about data processed in customer environments, please contact the relevant customer.

We collect the following categories of personal information:

Information you provide directly — name, business email address, phone number, company or agency name, job title, country, the subject of your inquiry, and any other information you choose to include when you submit a form, request a meeting, subscribe to communications, attend an event, or apply for a role.

Information collected automatically — IP address, device type, operating system, browser type and version, referring URL, pages viewed, click paths, timestamps, and similar usage data, collected through cookies, web beacons, and analytics tools when you interact with the Services.

Information from third parties — business contact information, firmographic data, and intent signals that we may obtain from sales intelligence providers, public sources, social and professional networks, and event registration platforms.

Recruitment information — résumés, cover letters, work history, educational background, references, work authorization status, and other information you submit when applying for a role with InterScripts.

We use personal information for the following purposes:

• respond to your inquiries, schedule meetings, deliver demos, and provide requested materials;
• send relevant marketing and product communications (where permitted) and measure their effectiveness;
• operate, maintain, secure, and improve the Services, including detecting and preventing fraud, abuse, and security incidents;
• analyze usage and trends to inform product development and content decisions;
• fulfill legal, regulatory, contractual, and corporate-governance obligations;
• evaluate candidates and make hiring decisions;
• conduct business transactions such as mergers, financings, and corporate restructurings.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following legal bases:

• Consent — when you explicitly opt in (for example, marketing emails);
• Contract performance — when processing is necessary to take steps you request before entering into a contract, or to perform a contract with you;
• Legitimate interests — to operate, secure, and improve the Services; respond to inquiries; conduct B2B marketing to corporate contacts where it does not override your rights; protect our legal position; and conduct ordinary business operations;
• Legal obligation — to comply with applicable laws.

You have the right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

We do not sell your personal information. We share it only in the following circumstances:

Service providers — with vendors that perform services on our behalf, such as cloud hosting, email delivery, analytics, customer relationship management, recruiting, scheduling, and security operations. These providers are bound by written agreements that restrict their use of personal information to the services they provide to us.

Affiliates — within the InterScripts corporate family for the purposes described in this Policy and subject to the same protections.

Professional advisors — with legal, accounting, audit, and other professional advisors, in connection with the services they provide.

Legal and regulatory — when we believe in good faith that disclosure is necessary to comply with a legal obligation, respond to lawful requests from public authorities, protect the rights, property, or safety of InterScripts, our customers, or others, or enforce our agreements and policies.

Business transactions — in connection with a merger, acquisition, financing, asset sale, reorganization, bankruptcy, or similar transaction; we will require any successor to honor the commitments we have made in this Policy.

With your consent or at your direction — for example, when you ask us to share information with a third party or you participate in a co-marketing arrangement.

We use cookies and similar technologies (including web beacons, pixels, and local storage) to operate the Site, remember your preferences, understand how visitors use the Services, and measure the performance of our marketing. Some cookies are strictly necessary for the Site to function; others are used for analytics or to support our marketing efforts.

You can manage cookies through your browser settings, including refusing or deleting them. Disabling certain cookies may affect Site functionality. We honor the Global Privacy Control (GPC) browser signal where required by applicable law.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, audit, dispute-resolution, and reporting requirements. Retention periods vary by data type and purpose. When personal information is no longer required, we securely delete or anonymize it. For specific retention questions, please contact us at info@interscripts.com.

InterScripts maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. Our control environment is independently assessed and aligned with frameworks including HITRUST r2, SOC 2 Type II, ISO 27001:2022, ISO 9001, CMMI Level 3, NIST SP 800-53, and HIPAA. No method of transmission over the internet or electronic storage is 100% secure; we cannot guarantee absolute security but we work continuously to protect the information entrusted to us.

InterScripts operates from the United States, Colombia, and India. Personal information that you provide may be transferred to, stored in, or processed in any country where we or our service providers operate. We use appropriate safeguards for cross-border transfers, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and equivalent mechanisms where required. You may request a copy of these safeguards by contacting us.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information, subject to applicable exceptions;
• request portability of your personal information in a structured, machine-readable format;
• object to or restrict certain processing (including direct marketing);
• withdraw consent where processing is based on consent;
• opt out of the “sale” or “sharing” of personal information, or of targeted advertising and profiling that produces legal or similarly significant effects (we do not sell personal information);
• lodge a complaint with a competent data-protection supervisory authority.

To exercise any of these rights, email info@interscripts.com with the subject line “Privacy Rights Request.” We will verify your identity before responding and may decline requests where permitted or required by law. We will not discriminate against you for exercising any of these rights.

For California residents: the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights, including the right to know, the right to delete, the right to correct, the right to opt out of sale/sharing, the right to limit use of sensitive personal information, and the right to non-discrimination. We do not sell personal information and have not done so in the preceding 12 months.

For residents of Virginia, Colorado, Connecticut, Utah, and other U.S. states with comprehensive privacy laws: you may have rights similar to those described above. Authorized agents may submit requests on your behalf where the law allows; we will verify the agent's authority before responding.

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate steps to delete it.

The Services may contain links to third-party websites or services that we do not own or control. This Policy does not apply to those third parties; we encourage you to review their privacy notices before providing them with any personal information.

Some browsers offer a “Do Not Track” (DNT) signal. There is currently no industry consensus on how to respond to DNT signals, and the Services do not respond to them. We do honor the Global Privacy Control (GPC) signal where required by applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice (for example, by posting a banner on the Site or sending an email). Your continued use of the Services after the updated Policy takes effect constitutes your acknowledgment of the changes.

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

InterScripts, Inc.
Attn: Privacy Office
43130 Amberwood Plaza, Suite 215
Chantilly, VA 20152, United States
Email: info@interscripts.com
Phone: (703) 635-7676

If you are located in the EEA, UK, or Switzerland and have an unresolved concern, you may also contact your local data protection supervisory authority. A list of EU supervisory authorities is available at the European Data Protection Board.