Privacy Policy

Stream Technologies, Inc.

Version 1.0 — Effective February 23, 2026

Stream Technologies, Inc. (“Stream,” “we,” “us,” or “our”) recognizes the importance of protecting the privacy of personal data. We have prepared this Privacy Policy to provide important information about the privacy practices applicable to the website at www.getstream.co (the “Site”) and the services that Stream offers to its permitted account holders. Collectively, the Site and those services are referred to as the “Services”.

This Privacy Policy describes the types of information we collect and receive in providing the Services, how and the purposes for which we use such information, and to whom and under what circumstances we may disclose it.

This Privacy Policy applies to personal data collected by Stream through use of the Services, and any other personal information obtained when you call, email, or otherwise communicate with Stream.

“You” and “you” mean any visitor to the Site, any person with an account at the Site, and the entity under or through which the person has created an account.

Please read the policy carefully. If you do not agree to this Privacy Policy, do not use the Sites and do not communicate personal information to us. We encourage you to periodically review this Privacy Policy to stay informed about how we are using the personal data we may collect.

By accessing the Services, you agree to the terms of this Privacy Policy. You are consenting to the collection and receipt of the personal data described in it for the purposes we describe.

1. Data Processing Principles

We process your Personal Data in compliance with all relevant laws, fairly and in a transparent manner.
We process your Personal Data only for specified and legitimate purposes as described in this Privacy Policy.
We do not process Personal Data that is not adequate, relevant, or necessary for the purposes set out in this Privacy Policy.
We strive to keep your Personal Data accurate and up to date and will erase or rectify inaccurate data without delay.
We keep your Personal Data in a form which enables us to identify you no longer than needed for the purposes for which your Personal Data is processed.
We process your Personal Data with appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

2. Types of Information We Collect or Receive

2.1 De-identified, Aggregated, and Other Non-Personal Data

Not all data we collect is personal data. Only personal data is covered by this Privacy Policy. Personal data that has been de-identified and/or aggregated may not be personal data. Some of the data collected constitutes personal data only when combined with sufficient other data.

2.2 Information We Collect from You During Your Access to the Services

When you access the Services, we may collect information such as:

IP address, geographic location, Internet service provider, MAC address
Browser type, operating system, device-identifying information
Specific web pages visited and the domain name from which you accessed the Services
Date/time of visits, pages/areas visited, time spent, number of returns, and other clickstream data
Cookies and related technologies used on the Site
Technical data to address and fix technical problems and improve our Services (e.g., memory state on system/app crash, which may include parts of a document you were using or contents of communications). Your device or browser settings may allow you to control collection of technical data.

We also collect certain information during account creation and while maintaining account information and profiles. This may include personal names, business names, emails and phone numbers, business financial information, and other details required for account creation/maintenance.

In some cases, we may require written authorization to obtain consumer credit reports and similar information (e.g., business details, acquiring Merchant IDs, funding purpose, card takings history, chargeback/refund data, Merchant Category Code(s), industry type, OFAC/credit/fraud checks, etc.).

We may collect personal information (email, phone number, mailing address) when you request information about our Services, register for our product, seek support, or otherwise communicate with us.

We may contact you to participate in surveys. If you participate, you may be asked to provide information which may include personal information.

We and others who use our Services may collect personal information that you submit or make available through interactive features (e.g., messaging/chat, commenting, forums, blogs, social media pages).

We may collect personal information for sweepstakes or contests that we offer (and, where required, publicly share information of winners).

We may collect personal information at conferences, trade shows, and other events, and from individuals/third parties to assess and pursue potential business opportunities.

We may post job openings on our Services; you may reply by submitting your application and related materials.

2.3 Information We Receive from Third Parties

Non-PHI personal data may include information about health care entities and their employees, including entities providing services to health care providers. That information may include job title, practice area, primary specialty, medical license status, gender, date of birth, languages spoken, educational background, address, photograph, SSN, Tax ID, NPI, professional license information, and bank account information.

We may receive information about users of the Services from third-party services and organizations (e.g., if you access Facebook, Google, or Twitter to sign in or share information).

2.4 Protected Health Information (PHI)

Personal health information may be included in information sent to or through our Services. Individually identifiable information relating to a third party providing or arranging for medical care (“Protected Health Information” or “PHI”) may be provided to us in connection with the Services. Information we obtain from health care providers and other sources in connection with the Services may include medical records from past, current, and future health care providers about third parties, but not about you. This may include information included on Electronic Remittance Advice forms, and related documents such as diagnosis, treatments, health history, lab/pathology results, social histories, family history, and records about phone calls and emails related to illnesses.

3. Consents

As described above, for information we receive from third parties and/or from account holders in the course of their use of the Services, we rely on them (and require them) to have obtained all necessary and appropriate consents for sharing personal data with us, to maintain records of such consent, to keep consent in force, and to communicate any issues/concerns and applicable data subject requests to us.

In most cases, we process personal data to provide the Services. Other purposes may apply (e.g., fulfilling statutory obligations). Our legal basis may include legitimate interests in creating/managing your account and providing Services as requested. We store personal information for as long as necessary to fulfill the purposes for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce agreements, and comply with laws.

4.1 Use and Purposes

We use personal data we collect or receive for internal purposes, including:

Administering your account and responding to requests
Informing you about products/services and personalizing your online experience
Delivering the Services you enroll in or apply for (processing applications, completing transactions), and providing a more effective experience (including research/development and new features)
Reviewing Service usage/operations and analyzing relevant data
Maintaining, improving, and administering the Services; operating our business
Notifying you of information, updates, or special offers; contacting you
Analyzing usage to understand and improve the Services; customizing content
Preventing prohibited/illegal activities; enforcing our Terms of Service
Recognizing you on return visits to personalize your experience
Protecting the security/integrity of the Sites and our business
Network and information security; fraud prevention; detecting security incidents
Measuring interest and engagement; improving/upgrading/enhancing the Services
Ensuring internal quality control and safety
Authenticating/verifying identities, including requests to exercise rights
Auditing interactions, transactions, and other compliance activities
Complying with legal obligations
Rating, evaluation, and risk management purposes; deciding whether to offer a Service
Enhancing accuracy of information we hold about you
Activities necessary or appropriate related to our Services and business, or permitted by law
Providing access to areas, functionalities, and features of the Services
Answering customer/technical support requests; communicating about your account and policy changes
Processing job applications; allowing event registration
Health benefits payments: obtaining payment for coverage, paying claims, or assisting another health plan/provider in its payment activities (e.g., coverage determinations, administering claims, coordinating benefits)

We do not sell personal information and do not share it for third-party direct marketing. We may share aggregated, non-identifiable information. We may disclose information:

To related companies and service providers (including marketing/advertising partners) to perform business, marketing, professional, or technical support.
If we believe there has been a violation of Site Terms of Use or our/third-party rights.
In legal claims, government inquiries/actions, or as required by law.
As otherwise permitted by our Terms of Service.
In a merger, acquisition, or sale of assets (your personal information may be transferred).
With business partners to provide a product/service you’ve requested or jointly offered.
To third-party vendors/service providers (e.g., billing, payment processing, customer service, email deployment, analytics, performance monitoring, hosting, data processing). We endeavor to contractually restrict their use to services provided to us.
If you voluntarily submit personal information to public forums on the Sites, it becomes public and may be collected/used by others.
If you access third-party services (e.g., Facebook/Google/Twitter) through the Services, those services may collect information about you per their policies.

5. Certain Privacy Rights

If you wish to exercise any privacy rights, please contact us. Depending on your jurisdiction, rights may include:

Access to and a copy of your personal information
Information about our privacy protections and certain disclosures
Correction/amendment of inaccurate information
Requests to restrict/refuse certain disclosures
Requests to delete your personal information

6. Links to Other Internet Sites

The Services may link to third-party sites. We do not warrant, endorse, or control third-party products, services, content, or practices. Each site has its own privacy and security policies. We are not responsible for activities and practices on those websites.

7. Cookies and Clear GIFs

The Site may use cookies and clear GIFs to make your online experience more convenient. We may use data from these tools to:

Allow sign-in without re-entering credentials
Enhance/personalize your experience
Monitor Service usage
Manage the Services
Improve the Services

To sign in and securely use the portal, enable cookies. If you reject/delete cookies, some Services may not function correctly. We may combine information collected via cookies, web beacons, pixels, or other tools with information collected from you or other sources.

We may use third-party web analytics services to track and analyze anonymous usage and volume statistics to administer/improve performance and report traffic. These services may use cookies, clear GIFs, and similar technologies.

8. Visitors from Outside the United States — Cross-Border Transfer

The Services are hosted and operated in the United States. If you visit from outside the U.S., your information may be transferred to, stored, and processed in the U.S. in accordance with this Policy. U.S. laws may differ from those in your country, and information may be available to government authorities under lawful orders. By using the Services and/or providing personal information, you consent to this transfer.

9. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time in our sole discretion. If there are material changes, we will notify you as required by applicable law. Continued use of our Services after the new Privacy Policy takes effect constitutes acceptance of the updated Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we collect and use personal information, email us at hello@getstream.co. Certain requests regarding your personal data must be in writing, and we may need to verify inquiries.