CCACC INC dba O.P.O.S.S.U.M. Technology

PRIVACY POLICY v2.0

1. Purpose and Scope

This Privacy Policy explains how CCACC Inc DBA O.P.O.S.S.U.M. Technology collects, uses, discloses, and protects personal data. We comply with HIPAA, GDPR, CCPA, and the Texas Data Privacy and Security Act (TDPSA).

2. Information We Collect

We may collect contact details, account credentials, training and simulation data, technical information, and communications with support. We do not collect sensitive health data unless required under a HIPAA Business Associate Agreement.

3. How We Use Information

We use collected data to provide, manage, and improve our AI simulation services, authenticate users, customize training, and communicate updates. We do not sell or share personal data for marketing purposes.

4. AI Transparency and De-Identification

AI models within O.P.O.S.S.U.M. Technology operate on de-identified and aggregated datasets. Outputs are used for educational and operational support only, not employment decisions.

5. Data Retention

Data is retained only as long as necessary to provide services and comply with legal obligations. Clients may request deletion via privacy@getopossum.com.

6. Legal Basis for Processing

Our legal bases include contract performance, legitimate interests, compliance with law, and consent where required.

7. User Rights

Users have rights to access, correct, delete, or port their data and to opt out of automated processing or sharing. Requests can be made via privacy@getopossum.com.

8. Data Security and Incident Response

We employ encryption, secure infrastructure, and access controls. In case of breach, we will notify affected users promptly and take corrective action.

9. Third-Party Vendors and Data Transfers

We may use secure vendors for hosting and analytics. These vendors are required to maintain equivalent privacy protections.

10. HIPAA and Confidential Information

When acting as a Business Associate, CCACC Inc complies fully with HIPAA Privacy and Security Rules. PHI is handled only as permitted by law.

11. Children’s Privacy

Our services are not directed to children under 16, and we do not knowingly collect data from minors.

12. Data Subject Requests and Opt-Out

Users can opt out of communications or request deletion by emailing privacy@getopossum.com. We verify identity before fulfilling requests.

13. International Data Transfers

Data may be processed outside your jurisdiction. By using the Services, you consent to such transfers with adequate safeguards in place.

14. Changes to this Policy

We may update this Policy as laws or practices change. Updates will be posted at www.getopossum.com/privacy.

15. Contact Information

For questions, contact our Privacy Office at privacy@getopossum.com.

Train Smarter. Communicate Better. Perform Exceptionally.