Privacy Policy

Last updated: March 6, 2026

1. Introduction

Leyoxa LLC ("Leyoxa", "we", "us", or "our") operates leyoxa.com and related products including Smilelink and Emergclinic. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and services. Because our products serve healthcare providers, we design our practices to align with the Health Insurance Portability and Accountability Act (HIPAA) and the Personal Health Information Protection Act (PHIPA).

2. Information We Collect

Information you provide directly: name, email address, phone number, clinic name, and any details you submit through our contact form or demo booking widget.

Usage data: pages visited, time on site, referring URL, and browser/device type collected via standard web analytics.

Protected Health Information (PHI): when Leyoxa processes PHI on behalf of a covered healthcare entity as a Business Associate, such processing is governed by a signed Business Associate Agreement (BAA) and is subject to HIPAA/PHIPA requirements.

3. How We Use Information

  • To respond to inquiries and schedule product demonstrations
  • To provide, operate, and improve our software products
  • To send transactional communications related to your account or demo request
  • To comply with applicable legal obligations

We do not sell personal information to third parties.

4. Sharing of Information

We may share information with trusted service providers who assist in operating our website and delivering our services (e.g., cloud infrastructure, scheduling tools), under contractual confidentiality obligations. We may disclose information when required by law or to protect the rights and safety of our users.

5. Data Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest, role-based access controls, and audit logging. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy or as required by applicable law. You may request deletion of your information by contacting us at [email protected].

7. Cookies

Our website uses essential cookies to enable navigation and analytics cookies to understand how visitors use the site. You can control cookie preferences through your browser settings.

8. HIPAA & PHIPA Compliance

When Leyoxa acts as a Business Associate for a covered entity, we execute a BAA and implement safeguards in accordance with HIPAA's Security Rule and Privacy Rule. For Ontario-based clinic partners, our practices align with PHIPA requirements for health information custodians and their agents.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal information we hold about you, or to object to or restrict certain processing. To exercise these rights, contact [email protected].

10. Third-Party Links

Our website may contain links to third-party sites (e.g., Calendly, LinkedIn). We are not responsible for the privacy practices of those sites.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of our services after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Leyoxa LLC
Toronto, Ontario, Canada
Email: [email protected]
Phone: +1 647-985-2468