Privacy Policy

Privacy Notice

This Notice was last updated on March 10, 2026.

PLEASE READ THIS PRIVACY NOTICE CAREFULLY TO UNDERSTAND HOW WE TREAT YOUR PERSONAL INFORMATION AS WELL AS YOUR CHOICES AND RIGHTS. IF YOU DO NOT AGREE WITH THIS POLICY, YOU SHOULD NOT ACCESS OR USE OUR SITE OR ENGAGE IN COMMUNICATIONS WITH US.

Introduction

MediView XR, Inc. (referred to as “we,” “us,” and “our”) is committed to protecting the privacy and security of your personal information. We also believe in transparency, and this Notice explains how we treat your personal information.

When Does This Notice Apply? This Notice describes our practices for the personal information for which we are a “data controller” under applicable law. By way of example, this includes personal information collected when you visit our website,https://mediview.com/ (the “Site”).

How Do We Process Personal Information?

Who is responsible for your Personal Information? For purposes of applicable law, including the EU General Data Protection Regulation, 2016/679 (the “GDPR”), we act as a data controller with respect to the personal information described below. In this role, we are responsible for implementing the applicable data protection principles and for safeguarding personal information.

What Personal Information Do We Collect? We collect and process the following personal information from you for the purposes set forth below, including in the “Other Processing Activities” section of this Notice. You may choose not to provide us with any personal information, but you will not be able to access portions of the Site that require personal information.

Personal Data From Other Sources. We also collect information about you from other sources including partners from whom we collect or purchase personal information, or who provide us with publicly available information which may contain personal information. We may combine this information with personal data provided by you. The personal data we may collect from other sources for the purposes of tailored advertising includes personal identifiers professional or employment-related information, education information, commercial information, internet activity information, and inferences about preferences and behaviors. We may collect this from third party providers of business contact information, including mailing addresses, job titles, email addresses, phone numbers, user behavior data, IP addresses, social media profiles, LinkedIn URLs and custom profiles for purposes of tailored advertising, delivering relevant email content, event promotion and profiling, marketing campaign eligibility, and verifying contact information. This helps us update, expand, and analyze our records, identify new customers, and create more tailored and relevant advertising to provide services that may be of interest to you.

Other Processing Activities. We may also process any of the personal information identified in this Notice when necessary for the following:

• The establishment, exercise, or defense of legal claims, whether in court, administrative, or other proceedings. (The legal basis for such processing is our legitimate interest in the protection and assertion of our legal rights, your legal rights, and the legal rights of others.)
• Obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. (The legal basis for this processing is our legitimate interest in the proper protection of our business.)
• Compliance with federal, state, or local laws. (The legal basis for this processing is compliance with a legal obligation to which we are subject.)
• Compliance with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities and cooperation with law enforcement agencies concerning conduct or activity that we, a service provider, or a third party reasonably and in good faith believe may violate applicable law. (The legal basis for this processing is compliance with a legal obligation to which we are subject.)
• Collection, use, retention, or disclosure of information that is deidentified or aggregated.
• Purposes that are consistent with, related to and/or ancillary to the purposes and uses described in this Notice for which your personal information was provided to us.

We may process your personal information in connection with any of the purposes and uses described in this Notice on one or more of the following legal grounds:

• Because it is necessary to perform the services you have requested or to comply with your instructions or other contractual obligations between you and us;
• To comply with our legal obligations as well as to keep records of our compliance processes;
• Because our legitimate interests, or those of a third-party recipient of your personal information, make the processing necessary, provided those interests are not overridden by your interests or fundamental rights and freedoms;
• Because you have chosen to publish or display your personal information on a public area of the Site, such as a comment area;
• Because it is necessary to protect your vital interests;
• Because it is necessary in the public interest; or
• Because you have expressly given us your consent to process your personal information in a particular manner.

We do not use personal information for making any automated decisions affecting or creating profiles other than as described herein.

Location of Processing. We are located and established in the United States, and your personal information will be transferred to, stored, and processed in the United States and other countries in which we or our partners, service providers, or agents maintain operations. By sending us personal information or using the Site, you agree and consent to the processing of your personal information in locations such as the United States, which may not offer the levels of protection required in other countries. We rely on recognized legal bases to lawfully conduct cross-border/international transfers of personal information, such as express consent, when transfer is necessary for us to deliver services pursuant to an agreement, or when the transfer is subject to safeguards that assure the protection of the personal information.

Cookies and Similar Technologies

What are First-Party and Third-Party Cookies? A “cookie” is a small file created by a web server that can be stored on your device (if you allow) for use either during a particular browsing session (a “session” cookie) or a future browsing session (a “persistent” cookie). “Session” cookies are temporarily stored on your device and remain there until they expire at the end of your browsing session. “Persistent” cookies remain stored on your device until they expire or are deleted by you. Local shared objects (or “flash” cookies) are used to collect and store information about your preferences and navigation to, from, and on a website. First-party cookies are set by the website you are visiting, and they can only be read by that site. Third-party cookies are set by a party other than the website you are visiting.

What are “Similar Technologies”? In addition to cookies, there are other data collection technologies, such as Internet tags, web beacons, pixels (clear gifs, pixel tags, and single-pixel gifs), and navigational data collection (log files, server logs, etc.) that can be used to collect data as you navigate through and interact with a website. For example, web beacons are tiny graphics with unique identifiers that are used to understand browsing activity. UTM codes are strings that can appear in a URL when you move from one web page or website to another. The string can represent information about your browsing, such as which advertisement, page, or publisher sent you to the receiving website.

What Cookies and Similar Technologies Are in Use and Why Do We Use Them?

Necessary Cookies

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Functional Cookies

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

Analytics Cookies

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Performance Cookies

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

There are currently no performance cookies being utilized.

Advertisement Cookies

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

Uncategorized Cookies

Other uncategorized cookies are those that are being analyzed and have not been classified into a category yet.

There are currently no uncategorized cookies being utilized.

Other Third-Party Technologies. Some third parties may use data collection technologies to collect information about you when you browse the Internet. We do not control these third parties’ technologies or how they may be used. If you have questions about targeted content, you should contact the responsible party directly or consult their privacy policies.

Choices About Cookies. Most web browsers are set by default to accept cookies. If you do not wish to receive cookies, you may:

1. choose to not allow certain cookies and technologies by adjusting your preferences via the cookies consent banner, or
2. set your browser to refuse all or some types of cookies or to alert you when cookies are being stored.

These settings may affect your enjoyment of the Site’s functionality. In addition, adjusting the cookie settings may not fully delete all of the cookies that have already been created. To delete them, you should review your web browser settings after you have changed your cookie settings.

The links below provide additional information about how to disable cookies or manage the cookie settings:

• Google Chrome
• Firefox
• Microsoft Edge
• Safari for Mac and iPhone

You may learn more about internet advertising practices and related consumer resources at https://youradchoices.com/control, https://thenai.org/about-online-advertising/faq, and http://www.networkadvertising.org/choices.

How Do We Share or Disclose Your Personal Information?

When we are acting as a data controller and where permitted by applicable law, we may share your information for the purposes described below.

How Long Do We Store and Use Your Personal Information?

We will retain and use your personal information for as long as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to resolve disputes, to protect our assets, to provide our services and fulfill our organizational mission, and to enforce our agreements.

We take reasonable steps to delete the personal information we collect when (1) we have a legal obligation to do so, (2) we no longer have a purpose for retaining the information, and (3) if you ask us to delete your information, unless we determine that doing so would violate our existing, legitimate legal, regulatory, dispute resolution, contractual, or similar obligations. We may delete your personal information if we believe it is incomplete, inaccurate, or that our continued storage of your personal information is contrary to our objectives or legal obligations. When we delete data, it will be removed from our active servers and databases, but it may remain in our archives when it is not practical or possible to delete it.

We may retain and use anonymous, de-identified, and/or aggregated information for as long as is permitted under applicable law.

How Do We Protect Your Personal Information?

We have adopted security measures that are designed to protect the personal information under our control. From time to time, we review our security procedures and consider new technologies and methods.

However, no security system is perfect, and no data transmission is 100% secure. Although we strive to protect personal information, we cannot guarantee or warrant the security of any information transmitted to or from our Site. Your use of the Site is at your own risk. We cannot guarantee that your personal information will remain secure in all circumstances.

If a data breach compromises your personal information, we will notify you and any applicable regulator when we are required to do so by applicable law.

Your Rights and Choices

Please use the “Contact Us” details provided at the end of this Notice to exercise your rights and choices under this Notice. We honor requests when we are required to do so under applicable law.

Email Opt-Out and Communication Preferences. If you no longer wish to receive communications from us, you may opt-out of receiving emails by clicking the unsubscribe link available at the bottom of our emails, and you may opt-out of other communications by contacting us at data.privacy@mediview.com. Please provide your name and contact information in your request, and we will respond to your request in accordance with applicable law.

Cookies. You may opt-out of optional cookies via the cookies consent banner, and you can adjust your cookies preferences for the Site at any time by clicking the Consent Preferences banner.

Updating Your Personal Information. Our goal is to keep your information accurate, current, and complete. If any of your information changes, please let us know via the “Contact Us” details at the end of this Notice.

Complaints. If you believe that your rights relating to your personal information have been violated, please contact us via the “Contact Us” details provided at the end of this Notice.

Residents of the United States

Depending on where you live in the United States, you may have certain rights relating to your personal information. We honor these rights where required under applicable law. These may include the following:

Right to Confirmation and Access

Residents of certain states have the right to confirm whether we process their personal information and to access such personal information.

Right to a Copy

Residents of certain states have the right to access their personal information, including a right to obtain a copy of the consumer’s personal information in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another entity without hindrance. Residents of certain states also have the right to receive a list of specific third parties to which we have disclosed the consumer’s personal data.

Right to Know

Residents of certain states have the right to request:

1. the specific pieces of personal information we have collected about you;
2. the categories of personal information we have collected about you;
3. the categories of sources from which the personal information is collected;
4. the categories of personal information about you that we have sold or shared and the categories of third parties to whom the personal information was sold or shared;
5. the categories of personal information about you that we disclosed for a business purpose and the categories of third parties to whom the personal information was disclosed for a business purpose;
6. the business or commercial purpose for collecting, disclosing, selling, or sharing personal information; and
7. the categories of third parties to whom we disclose personal information.

Our response will cover the 12-month period preceding our receipt of a verifiable request unless a longer period is requested by you.

Right to Delete

Residents of certain states have a right to request the erasure/deletion of certain personal information collected or maintained by us. As described herein, we will delete your personal information from our records and, as applicable, notify any service providers and contractors (as defined under applicable law) to delete your personal information from their records. However, we are not required to honor a deletion request if an exemption applies under the law.

Right to Correct

Residents of certain states have a right to correct inaccuracies in their personal information, taking into account the nature of the personal information and the purposes for which we process the personal information. We will use commercially reasonable efforts to correct the inaccurate personal information as directed by you.

Rights Regarding Sensitive Data

We only process sensitive data with your consent or where otherwise permitted by applicable law. Where you have provided consent to this processing, you may revoke your consent or opt out of the processing of your sensitive data at any time.

Right to Opt-Out

Residents of certain states have the right to direct us to stop selling your personal information to third parties and to refrain from doing so in the future. Residents of certain states also have the right to opt out of targeted advertising and profiling based on your personal information. In addition to the Submission Process below, you can opt-out of targeted advertising by adjusting your preferences in the Consent Preferences banner.

Submission Process

You may submit a request to exercise one of the above rights by using the contact information below. If a request is submitted in an incorrect manner or if it is deficient, we will either (1) treat the request as if it had been submitted via the designated manner, or (2) provide you with specific directions on how to submit the request or remedy any deficiencies, as applicable.

Verification Process

We are required to verify the identities of those who submit requests to exercise certain of the above rights. To determine whether the individual making the request is the consumer about whom we have collected information, we will verify your identity by matching the identifying information provided by you in the request to the personal information that we already maintain about you. As a part of this process, you will be required to provide your name, email address, address, and/or telephone number. We willinform you if we cannot verify your identity.

• If we cannot verify the identity of the person making a request for categories of personal information, we may deny the request. If the request is denied in whole or in part for this reason, we will provide a copy of or direct you to our privacy policy.
• If we cannot verify the identity of the person making the request for specific pieces of personal information, we are prohibited from disclosing any specific pieces of personal information to the requestor. However, if denied in whole or in part for this reason, we will evaluate the request as if it is seeking the disclosure of categories of personal information about the consumer.
• If we cannot verify the identity of the person making a request to delete, we may deny the request.
• If there is no reasonable method by which we can verify the identity of the requestor to the degree of certainty required, we will state this in our response and explain why we have no reasonable method by which we can verify the identity of the requestor. In such cases we may not be required to comply with the request or may request additional information reasonably necessary to verify the request.

Authorized Agents

Authorized agents may submit requests via the methods identified in this Notice. If you use an authorized agent to submit a request to know or a request to delete, we may require:

1. the authorized agent to provide proof that you gave the agent signed permission to submit the request;
2. you to verify your identity directly with us; and
3. you to directly confirm with us that you provided the authorized agent permission to submit the request.

However, we may not require these actions with respect to confirmed guardianship, conservatorship, power of attorney, or other protective arrangement in accordance with applicable law.

Excessive Requests

If requests from a consumer are manifestly unfounded or excessive, in particular because of their repetitive character, we may either (1) charge a reasonable fee, or (2) refuse to act on the request and notify the consumer of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs of providing the information or communication or taking the action requested.

Non-Discrimination

You have the right not to receive discriminatory treatment by us due to your exercise of the above rights. We do not offer financial incentives and price or service differences, and we do not discriminate against consumers, employees, applicants, or independent contractors for exercising their rights under applicable law.

Appeals Process

Residents of certain states have the right to appeal a refusal to take action on a request within a reasonable time after your receipt of the decision. You may submit an appeal to a decision on your request by email to data.privacy@mediview.com. We will inform you of any action taken or not taken in response to the appeal, along with a written explanation of the reasons in support of the response.

California Residents

Under California Civil Code Section 1798.83, California residents who provide personal information in obtaining products or services for personal, family, or household use may be entitled to request and obtain from us once each calendar year information about the information we shared, if any, with other businesses for direct marketing uses. We do not currently share your personal information with third parties for those third parties’ direct marketing purposes. As a part of the California Online Privacy Protection Act, all users of our Site may make any changes to their information at any time by contacting us at data.privacy@mediview.com.

Nevada Residents

Nevada residents may submit a verified request to us at data.privacy@mediview.com to request that we not make any sale (as defined under Nevada law) of any covered information (as defined under Nevada law) that we have collected or will collect about you. Please provide your name and contact information in your request, and we will respond to your request in accordance with Nevada law.

Residents of the EEA

EU/EEA and UK Residents. If you are located in the EU, EEA or UK, you have the following rights. All requests should be sent to the address noted in the “Contact Us” section of this Notice, and we will fulfill requests to the extent required by applicable law.

Right of Access

To the extent required by law, you have the right to receive confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; and the recipients or categories of recipient to whom the personal data have been or will be disclosed. We will provide a copy of your personal information in compliance with applicable law.

Right of Rectification

Our goal is to keep your personal information accurate, current, and complete. Please contact us if you believe your information is not accurate or if it changes.

Right to Erasure

In some cases, you have a legal right to request that we delete your personal information when:

1. it is no longer necessary for the purposes for which it was collected,
2. consent has been withdrawn in certain instances,
3. you have objected to the processing in certain instances,
4. the personal information has been unlawfully processed,
5. the personal data have to be erased for compliance with a legal obligation; and
6. the personal data were collected in relation to the offer of information society services.

However, the right is not absolute. When we delete personal information, it will be removed from our active servers and databases; but, it may remain in our archives when it is not practical or possible to delete it. We may also retain your personal information as needed to comply with our legal obligations, resolve disputes, or enforce any agreements.

Right to Restrict Processing

You have the right to restrict the processing of your data when:

1. the accuracy of the personal data is contested, for a period enabling us to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose erasure and request a restriction instead;
3. we no longer need the personal data, but you need us to keep it for the establishment, exercise, or defense of legal claims; or
4. you have objected to us processing the personal information, pending resolution of the objection.

Right to Object

In certain circumstances, you have the right to object to the processing of your personal information where the processing is necessary for performance of a task carried out in the public interest, for our legitimate interests, or for the legitimate interests of others. You also have the right to object where personal data are processed for direct marketing purposes or for scientific or historical research purposes or statistical purposes.

Right to Withdraw Consent

If you have provided your consent to the collection, processing, and transfer of your personal information, you may have the right to fully or partially withdraw your consent. Once we have received notice that you have withdrawn your consent, in whole or in part, we will no longer process your information for the purpose(s) to which you originally consented and have since withdrawn unless there are compelling legitimate grounds for further processing that override your interests, rights and freedoms or for the establishment, exercise, or defense of legal claims. Withdrawal of consent to receive marketing communications will not affect the processing of personal information for the provision of our services.

Right to Complain

If you believe we have not processed your personal information in accordance with applicable law, we encourage you to contact us at data.privacy@mediview.com. You may also have the right to make a complaint to the relevant Supervisory Authority or seek a remedy through the courts. A list of Supervisory Authorities for residents of the EU or EEA is available at https://edpb.europa.eu/about-edpb/board/members_en. UK residents may contact the UK Supervisory Authority here: https://ico.org.uk/make-a-complaint/data-protection-complaints/. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law.

Third-Party Sites and Services

This Notice does not apply to any third-party websites or applications or services provided by third parties.

The Site may include links to and content from third parties. These links are to external resources and third parties that have their own privacy policies. It may not always be clear to you which links are to external, third-party resources. If you click on a third-party link to another site, you will be redirected away from the Site. You can check the URL to confirm whether you have left this Site.

We cannot and do not:

1. guarantee the privacy or security practices of third parties or any content provided by third parties,
2. control third parties’ independent collection or use or your information, or
3. endorse any third-party information, products, services, applications, or websites.

Any information provided by you or collected from you by a third party will be governed by that party’s privacy policy and terms of use. You should review their privacy policy and terms of use carefully.

Children

We are a medical technology company, and our Site activities, and services are not directed to children under the age of 18, and we do not knowingly collect information online from children under the age of 18. No one under the age of 18 shall access, browse, or use the Site or provide any information to us online. If we learn that we have collected or received personal information from a child under the age of 18 online without a parent’s or legal guardian’s consent, we will take steps to stop collecting that information and to delete it. If you believe we have received any information from a child under the age of 18 online, please contact us using the “Contact Us” details provided at the end of this Notice.

For more information about the Children’s Online Privacy Protection Act, please visit the Federal Trade Commission’s website.

Updates and Changes to This Notice

We may update this Notice from time to time. If we change this Notice, we will post the revised version of this Notice on our Site. The updated Notice will be effective immediately upon posting. If we make material changes, we will also notify you through a notice on the homepage of the Site for a reasonable period of time. We may also notify you about changes to this Notice by email.

You should carefully review this Notice before using the Site, and you should review it from time to time so that you are aware of its current terms. Your continued use of the Site after the “Last Updated” date will constitute your acceptance of and agreement to any changes and to our collection, use, and sharing of your information according to the then-current Notice. If you do not agree with this Notice, you should not use the Site or the App.

Contact Us

For more information, or if you have any questions or concerns regarding this Notice, wish to exercise your rights, or wish to lodge a complaint with us, you may contact us using the information below, and we will do our best to assist you. Please note, if your communication is sensitive, you may wish to contact us by postal mail or telephone.

In writing:
Attn: Legal
10000 Cedar Ave
Mailstop #2
Cleveland, OH 44106
United States

By phone: 216-306-1977

By email: data.privacy@mediview.com

European contact:

Pursuant to Article 27 of GDPR, MediView XR, Inc has appointed European Data
Protection Office (EDPO) as its GDPR Representative in the EU. You can
contact EDPO regarding matters pertaining to the GDPR:

• by using EDPO’s online request form: https://edpo.com/gdpr-data-request/
• by writing to EDPO at: Avenue Huart Hamoir 71, 1030 Brussels, Belgium

MediView’s EU Data Protection Officer (DPO) may be contacted at Glenn.raudins@mediview.com.