Privacy Policy

What this policy covers

This policy applies to corisystem.org, the public marketing website for Cori System ("Cori," "we," "us," or "our"). It describes what we collect when you browse this site, read about our product, fill in the contact form, or book a demo.

It does not cover the Cori application itself at app.corisystem.org. Use of the application — including any protected health information handled there on behalf of our customers — is governed by the Cori application privacy policy, our customer agreements, and the Business Associate Agreements we sign with covered entities under HIPAA.

Information you give us

We collect what you type into our forms:

• Contact form — your name, organization, email address, your message, and which page or campaign you came from.
• Demo booking — your name, company, email address, phone number (if you provide one), any message, and the meeting time you select.
• Downloads and email requests — the email address you give us when you ask for a document or follow-up.

We use this to answer you, schedule the meeting you asked for, and follow up about Cori. Form submissions are delivered to our staff by email and may be retained in our email and scheduling systems.

Information collected automatically

Like most websites, our servers log basic technical details of each request: IP address, browser and device type ("user agent"), the page requested, the referring page, and the date and time. We and our advertising partners also record which pages you view on this site and whether you completed an action such as submitting a form.

Cookies, tags, and similar technologies

This site runs the following third-party tags. They may set cookies or read device identifiers in your browser:

• Google tag (gtag.js) for Google Ads — conversion ID AW-18472749485. Measures which ads lead to inquiries and supports remarketing, so you may later see Cori ads on Google properties and partner sites.
• Meta Pixel — IDs 954909300858750 and 648037405336817. Measures the results of our Facebook and Instagram advertising and supports remarketing on Meta platforms.
• Google Fonts — typefaces are loaded from Google's font servers, which receive your IP address as part of that request.
• Google Cloud Storage — our product videos are hosted on Google Cloud; playing one sends a request to Google's servers.

We also store a single item in your browser's local storage (cori_exit_seen) so that an offer we show on exit is not shown to you repeatedly. It contains no personal information.

Server-side conversion measurement

When you submit the contact form or book a demo, our server may send a "Lead" event to Meta's Conversions API so that the submission is counted against the ad you came from. That event includes your email address hashed with SHA-256 (not the address in readable form), your IP address, and your browser's user agent. It does not include your message.

How we use information

• To respond to inquiries and schedule demonstrations.
• To follow up with you about Cori and send information you requested.
• To measure and improve our advertising and the content of this site.
• To keep the site secure, diagnose problems, and prevent abuse.
• To meet our legal and contractual obligations.

How information is shared

We do not sell your personal information for money. We share it only as follows:

• Advertising and infrastructure providers — Google and Meta, as described above, plus the email and scheduling services that deliver your form submission to us. The advertising tags on this site involve disclosures that some state privacy laws classify as "sharing" or "targeted advertising"; see Your choices below for how to stop it.
• Legal and safety reasons — when we are required to by law, or to protect our rights, our users, or the public.
• Business transfers — if Cori is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

Your choices

• Block or delete cookies in your browser settings, or browse in a private window. The site works without them; only our advertising measurement is affected.
• Opt out of Google personalized ads at My Ad Center.
• Adjust Meta ad preferences in your Facebook or Instagram account settings.
• Use a browser opt-out signal. We honor Global Privacy Control (GPC) signals where state law requires it.
• Ask us directly. Email info@corisystem.org to access, correct, or delete the information you sent through this site, or to stop hearing from us. We will respond within the time your state's law allows, and we will not discriminate against you for asking.

If you are a Colorado, California, or other state-privacy-law resident, these rights include access, correction, deletion, portability, and opting out of targeted advertising. You may designate an authorized agent to act for you, and you may appeal a decision we make by replying to our response.

Retention and security

We keep inquiry and demo-request information for as long as needed to follow up with you and to keep records of our business communications, then delete it or retain it only as the law requires. We use industry-standard safeguards — encrypted connections (HTTPS), access controls, and hosting on Google Cloud — but no method of transmission or storage is completely secure.

Children

This site is directed to healthcare and behavioral health organizations, not to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

Links to other sites

Our pages link to third-party sites we do not control. Their privacy practices are their own; please read their policies.

Changes to this policy

We may update this policy as our site or our advertising changes. The revised version takes effect when posted, and we will update the "Last updated" date at the top of this page.

Contact us

Questions, requests, or complaints about privacy:
info@corisystem.org