If you are a resident of the State of California, Connecticut, Colorado, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah or Virginia, this Additional US State Privacy Notice may apply to you. This Privacy Notice for California, Connecticut, Colorado, Oregon, Texas, Utah or Virginia residents is intended to describe your rights under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA), the Connecticut Data Privacy Act (CDPA), the Colorado Privacy Act (CPA), the Delaware Personal Data Privacy Act (DPDPA) , the Iowa Consumer Data Protection Act (ICDPA), Montana Consumer Data Privacy Act (MTCDPA), the Nebraska Data Privacy Act (NDPA), the New Hampshire Privacy Act (NHPA) , the New Jersey Data Protection Act (NJDPA), the Oregon Consumer Privacy Act (OCPA), Montana Consumer Data Privacy Act, the Texas Data Privacy and Security Act (TDPSA), the Utah Consumer Privacy Act (UCPA) and the Virginia Consumer Data Protection Act (VCDPA)  and describes our data collection practices.

Collection of Personal Information

Though your interaction with our Sites and Services, we may collect your personal information, which means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Some information the Company processes may be exempt from the CCPA/CPRA, CDPA, CPA, DPDPA, ICDPA, MTCDPA , NDPA, NHPA, NJDPA, OCPA, TDPSA, UCPA and VCDPA such as:

• Medical information governed by the Confidentiality of Medical Information Act (“CMIA”) and protected health information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”);

• Publicly available information or lawfully obtained, truthful information that is a matter of public concern; and

• De-identified or aggregated consumer information.

Certain information we collect may be considered Sensitive Personal Information under the CCPA/CPRA, CDPA, CPA, DPDPA, ICDPA, MTCDPA , NDPA, NHPA, NJDPA, OCPA, TDPSA, UCPA and VCDPA. We use such information only for lawful purposes in compliance with applicable privacy laws, such as to perform our Services, to resist malicious, deceptive, fraudulent, or illegal actions, or for equal employment purposes. We do not use such information to infer characteristics about individuals. Where required by law, we will obtain your consent prior to processing such information.

Categories of Personal Information We May Collect

Identifiers, such as:

Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), including:

Name, signature, mailing address, telephone number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

Protected classification characteristics under state or federal law:

Other than for employees, job applicants, or as described in a separately provided privacy notice, we do not collect information that would qualify as protected classification characteristics under state or federal law.

Commercial information

When you engage in transactions with us, we create records of transactions. We may use this information to measure the effectiveness of our services and to provide you with targeted information, advertisements, and offers.

Internet or other similar network activity, including:

Browsing history, search history, Internet domain, the domain of your Internet service provider, the date and time that you access the site, the Internet address of the website from which you linked directly to the site, and the pages you visit on our Sites.

Geolocation data:

We may collect geolocation data (e.g., IP address), which is information derived from an electronic device that can reveal the location of that device and the individual using it. Devices that capture geolocation data include mobile phones, laptops, tablets, wearable devices, and vehicle receivers or data recorders, among others.

Audio, electronic, visual, or similar information:

We may collect audiovisual information from on- site security cameras.

Professional or employment-related information

Business contact information, including company name and job title.

Categories of Sources from Which Personal Information is Collected

The categories of sources from which we collect personal information are described more fully under “Information We Collect” and include directly from you via our Sites and Services, from your communications with us, when you visit our offices or facilities, social media, automatically via cookies and similar technologies, and from other third parties as described above.

Business or Commercial Purpose for Collecting and Disclosing Personal Information

We use personal information for the business or commercial purposes disclosed under “How We Use Your Information.” We may disclose personal information to the parties described in the section titled “How We Disclose Your Information.”

Sale and Sharing of Personal Information

We do not currently “sell” or “share” personal information as those terms are defined under the CCPA/CPRA. If we are deemed to “sell” or “share” personal information in the future, such as through the use of cookies or other online technologies, we will update this notice and provide a link permitting users to opt-out of such practices.

CCPA/CPRA, CDPA, CPA, DPDPA, ICDPA, MTCDPA, NDPA, NHPA, NJDPA, OCPA, TDPSA, UCPA and VCDPA CONSUMER RIGHTS

California, Connecticut, Colorado, Montana, Oregon, Texas, Utah or Virginia residents have certain consumer rights. These rights include:

• The right to confirm whether we are processing your personal information, to know about the categories of personal information we collect, and to access the specific pieces of personal information we collect and obtain it in a portable format;

• The right to delete personal information;

• The right to correct inaccurate personal information that we may maintain about you;

• The right to opt-out of the “sale” or “sharing” of personal information, as those terms are defined under the CCPA, as well as certain “targeted advertising” as defined under the CCPA/CPRA, CDPA, CPA, DPDPA, ICDPA, MTCDPA , NDPA, NHPA, NJDPA, OCPA, TDPSA, UCPA and VCDPA;

• The right to opt-out of certain forms of profiling or automated processing in furtherance of decisions that produce legal or similarly significant effects; and

• The right to limit certain uses of sensitive personal information.

These rights are not absolute and subject to certain exceptions.  We reserve all of our rights available to us at law in this regard.  We will not discriminate against you for exercising any of these rights, for example, by charging a different price or denying goods or services. However, we may charge a different price or rate or provide a different level or quality of goods or services when that difference is reasonably related to the value of the data. In addition, in the event that we decline to take action on a request related to your personal information, you may have the right to appeal that decision by using the contact information below.

In most circumstances, the Company collects, uses, and stores personal information as a service provider on behalf of our own customers. We typically serve our customers in the capacity of a covered entity or business associate pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the privacy, security, and breach notification rules issued pursuant to HIPAA. Under these circumstances, there may be instances in which the Company is not obligated or permitted to fulfill your request and may refer you to your payer, provider, or employer.

How to Exercise Your Consumer Rights

If you wish to exercise any of the abovementioned consumer rights, please email compliance-ethics-privacy@lyric.ai with the phrase “Consumer Rights” in the subject line. You may also call 610-205-5500 or use this Consumer Rights Request Form. We will review your requests and respond accordingly. Additionally, if we retain your personal information only in de-identified form, we will not attempt to re-identify your data in response to a Consumer Rights request.

If you make a request related to personal information about you, you may be required to supply a valid means of identification as a security precaution. If you make a Consumer Rights request through an authorized agent, we will require written proof that the agent is authorized to act on your behalf. We will process your request within the time provided by applicable law.

Other California Privacy Rights - Shine the Light

California Civil Code sections 1798.83-1798.84 provide California residents the right to ask us for a notice describing the categories of personal information we share with third parties or among our affiliated companies for their direct marketing purposes. Upon request, we will identify the categories of information shared and will include a list of the names and addresses of third parties and affiliates with which it has been shared. If you are a California resident and would like a copy of this notice, please submit a written request and allow 30 days for a response.

How to Contact Us

If you have questions, requests, or complaints related to your privacy, please contact compliance-ethics-privacy@lyric.ai. You may also contact us by phone 610-205-5500 or by mail addressed to:

Lyric
3803 West Chester Pike
Suite 105 
Newtown Square, PA 19073

Changes to This Privacy Notice

This Privacy Notice is subject to change at any time and the “Effective Date” at the top of this page indicates when this Privacy Notice was last revised. It is your obligation to review the Privacy Notice from time to time. By using our Sites and Services, you represent that you read, understand, and accept the terms of this Privacy Notice. Your continued use of our Sites and Services following the posting of changes to terms contained in this Privacy Notice will mean you understand and accept those changes. If you do not agree with any of the terms of the Privacy Notice, you must discontinue use of our Sites and Services.