This Privacy Notice (the "Notice") describes the types of information that Marpai, Inc. ("Marpai", “we”, “us”, “our”) collects via our website: https://ir.marpaihealth.com (the “Website”).

The Notice also describes our practices for collecting, using, maintaining and processing this information, and the rights and options available to users of our Website with respect to their personal data.

PERSONAL DATA PROCESSED

We process information you provide us when you contact us with an inquiry or when you opt-in to receive investor email alerts

You can submit an inquiry through our online contact form or by calling, emailing or mailing us at the addresses provided in the Contacts page of the Website. When you contact us, you will be asked to provide information such as your name, your email address, and the content of your message. The mandatory fields for completion will be marked as such. You can also opt-in to receive investor email alerts through our online registration form. In order to register to receive investor email alerts, you will be asked to provide information such as your name, email address, and your position as well as the type of notifications you wish to receive.

Our online contact form function on the Website is protected by a third-party service provider, hCaptcha. hCaptcha’s privacy policy can be found here: https://www.hcaptcha.com/privacy and its terms of service can be found here: https://www.hcaptcha.com/terms.

You are not legally obligated to provide any of the above mentioned information; however, if you choose not to provide this information we may not be able to respond to your inquiry.

We also collect analytics information about your use of the Website.

When you use the Website, we record and collect certain information about your interaction with the Website, including the IP address from which you access the Website, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Website ("Analytics Information").

HOW YOUR PERSONAL DATA IS USED

To respond to and handle your inquiry and to deliver investor email alerts.

We will use the information you provide us to contact you about your inquiry and handle and respond to your inquiry and to provide you with the investor email alerts you have opted to receive.

We will use your Analytics Information for enhancing and developing our Website.

We will use the Analytics Information for development and enhancement of the Website. We will use the Analytics Information collected via our Website to improve the Website, our email communications and the products and services we offer to customers. We also use the Analytics Information to adapt the Website, their content, our services, and our email communications to users' preferences. Finally, we will use the Analytics Information to understand the market in which Marpai operates in and for managerial reporting and business planning.

COOKIES

What are cookies?

Cookies are text files, comprised of small amount of data, that are saved on your computer or other device (e.g. smartphone, tablet, etc.) when you use the internet and visit various website.

The information that the cookies maintain is read by the website you visit, during the session of your visit to the website (these are called ‘session’ cookies), and when you return to visit it again (these are called ‘persistent’ cookies). We also use techniques called web beacons and web pixels for purposes similar to the use of cookies.

Our Website allows you to manage your cookie preferences and to enable or disable all cookies (except for cookies that are considered strictly necessary, which always remain enabled). In order to manage your cookie preferences, we use the services of a third-party provider, Klaro. You can find Klaro’s privacy policy here: https://heyklaro.com/resources/privacy and it’s terms of use here: https://heyklaro.com/resources/terms.

WHO WILL PROCESS YOUR DATA

We will not share your information with third parties, except in the events listed below or when you provide us your explicit and informed consent. These are also the categories of third parties with whom Marpai has disclosed personal information in the preceding 12 months.

We will share your information with our service providers helping us operate the Website and our Business.

We will share your personal information with our service providers who assist us with the internal operations of our Business and the Website (including with hCaptcha and Klaro, as stated above, in accordance with their respective privacy policies. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes. We do not sell your personal information to third parties.

We will share your Information with competent authorities, if you abuse your right to use the Website, or violate any applicable law in connection with our Business.

If you have abused your rights to use the Website, or violated any applicable law, we may share your information with competent authorities and with third parties (such as legal counsels and advisors), for the purpose of handling of the violation or breach.

We will share your Information if we are legally required to do so.

If we are required to disclose your information by a judicial, governmental or regulatory authority.

We will share your Information with third-parties in any event of change in Marpai’s structure.

If the operation of the Website or the Business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share your information only as required to enable the structural change in the operation of the Website and the Business.

We do not sell your information.

We do not sell your information, nor have we done so in the past 12 months.

SECURITY AND DATA RETENTION

We retain your information for as long as we need it to operate the Website and our Business, and thereafter as needed for record-keeping matters.

We will retain your Information for the duration needed to support our ordinary business activities operating the Website. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims and enforce our agreements.

We implement measures to secure your information

We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, it is not guaranteed, and you cannot expect that the Website or our Business will be immune from information security risks.

ADDITIONAL INFORMATION FOR INDIVIDUALS IN CALIFORNIA

Below is a detailed description of the information we collect from visitors to our Website and the business or commercial purposes for which we use each category of personal information. This is also the information we have collected in the past 12 months.

Categories of Personal Information Specific Types of Personal Information Collected Business or commercial purposes pursuant to the CCPA Specific purposes
Identifiers Name, email address, telephone number, company, position. Providing customer service. To provide our products and services.

To verify your identity.

To communicate with you.

To improve our products and services and prevent fraud.
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual Information you provide when you interact with us.
Internet or other electronic network activity information Your browser type, operating system, IP address, domain name, number of times you visited the Website, dates you visited the website, date and time of an online request, the time required to download information you requested, error codes generated while your browser is in contact with our website and the amount of time you spent viewing the website. As well as information of the communications performed through our Website. Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, prosecuting those responsible for that activity.

Undertaking internal research for technological development and demonstration.

Undertaking activities to verify or maintain the quality of service and to improve, upgrade or enhance the service.

Debugging to identify and repair errors.

Your rights under the CCPA if you are a resident of California

Disclosure of personal information we collect about you.

You have the right to know: the categories of personal information we have collected about you; the categories of sources from which the personal information is collected; our business or commercial purpose for collecting personal information; the categories of third parties with whom we share personal information, if any; the specific pieces of personal information we have collected about you.

Right to deletion.

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

  • Delete your personal information from our records; and
  • Direct any service providers to delete your personal information from their records.

Please note that we may not delete your personal information if it is necessary to:

  • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
  • Debug to identify and repair errors that impair existing intended functionality;
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
  • Comply with the California Electronic Communications Privacy Act;
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
  • Comply with an existing legal obligation; or
  • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Protection against discrimination

You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:

  • Deny goods or services to you;
  • Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
  • Provide a different level or quality of goods or services to you; or
  • Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising your CCPA rights

If you would like to exercise any of your CCPA rights as described in this Privacy Policy, please email us at IR@marpaihealth.com.

We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you, by using a two or three points of data verification process, depending on the type of information you require.

MINORS

The Website is not directed to users under 18.

The Website is not directed to users under the age of 18. We do not knowingly collect information or data from children under the age of 18 or knowingly allow children under the age of 18 to use the Website.

CHANGES TO THIS PRIVACY NOTICE

Changes to this Privacy Notice.

From time to time, we may change this Notice. The latest version of the Notice will always be accessible at https://www.marpaihealth.com/privacy-policy.

Last Update: October 20, 2021.