Recorvis, LLC ("Recorvis," "we," "us," or "our") recognizes the importance of protecting the privacy of your personal information. This privacy notice ("Privacy Notice") governs the collection of your personal information received through our website ("Site"), https://recorvis.com/. Please read this Privacy Notice carefully, as it explains what personal information we process, how we use it, who we share it with, and your rights with respect to your personal information.

Please read this Privacy Notice carefully to understand our practices regarding our use of your personal information. By accessing our Site, you agree to this Privacy Notice. If you do not agree with this Privacy Notice, do not use our Site. This Privacy Notice may be updated, which will be reflected in the "Last Updated" date at the end of this Privacy Notice. You may have additional privacy rights that apply to this Privacy Notice depending on your US state of residence. For more information regarding these laws, please review the "U.S. State Privacy Rights" section below.

Important Note Regarding Client Data

Recorvis provides a B2B SaaS platform that enables VA claims consultants and service providers to manage their operations, including HIPAA-compliant CRM tools, medical records review services, and independent medical opinion coordination. Recorvis does not access, view, or handle Protected Health Information (PHI) or veteran personal information processed through our platform. Our clients (VA claims consultants and service providers) are solely responsible for their own HIPAA compliance and the handling of any veteran data they process using our tools. This Privacy Notice applies only to information we collect about our business customers and website visitors, not to PHI or veteran data managed by our clients through the platform.

Personal Information We Collect

Directly Provided

We collect personal information that you provide us directly, including when you:

• Contact us using the "Contact Us" form on our Site
• Send us an email
• Sign up for our services or create an account
• Request a demo or product information
• Subscribe to our newsletter or marketing communications

When you interact with our website (recorvis.com), we may collect information you provide directly, including:

• Contact Information: First and last name, email address, phone number, company name, job title
• Business Information: Type of VA claims consulting services you provide, size of your practice, current tools and systems you use
• Account Information: Username, password (encrypted), billing information, subscription preferences
• Inquiry Information: Reason for contact, specific questions about our services, feature requests
• Marketing Preferences: Communication preferences, areas of interest

This information enables us to provide tailored services, respond effectively to your inquiries, and improve our platform to better serve VA claims consultants.

Authorized Representatives

If you are an individual who wishes to designate an Authorized Representative to act on your behalf regarding your personal information, please note that we recognize and accommodate such arrangements. An Authorized Representative is someone whom you authorize to access, manage, or make decisions about your personal information.

If you choose to appoint an Authorized Representative, please provide us with written consent from both you and the Authorized Representative, detailing the scope of their authority.

We will work with Authorized Representatives within the bounds of applicable laws and regulations to fulfill their authorized requests. Please be aware that we may need to verify the identity of both the individual appointing the Authorized Representative and the Authorized Representative themselves to ensure the security and privacy of your personal information.

If you are an Authorized Representative seeking to manage the personal information of an individual, please contact us using the information provided in the "Contact Us" section of this Privacy Notice. We will guide you through the necessary procedures to verify your authority and facilitate your request.

Automatically Collected

We automatically log information about your use of our Site, including through cookies, web beacons, and similar technologies to help personalize content and analyze Site traffic. For example, we may collect the following personal information from you:

• IP address
• Type of web browser and operating system used to access the Site
• Time and duration of Site visits
• Information about the content and webpages you view
• Features you access on the Site
• Referring website addresses
• Pages viewed and links clicked

Provided by Third Parties

We may receive your personal information from other publicly and commercially available sources, as permitted by law. We may combine this personal information in the manner described in this Privacy Notice.

Categories of Personal Information Collected

We have collected the following categories of personal information from or about Site users within the last twelve (12) months:

Use and Retention of Your Personal Information

We collect and use personal information to manage your relationship with us and better serve you when you are using the Site by personalizing and improving your experience. We may use or disclose the personal information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information, including to respond to inquiries on our Site
• Provide you with information or services that you request from us
• Create and manage your account on our platform
• Process payments and billing
• Deliver platform services, including CRM access, records review coordination, and nexus letter fulfillment
• Provide customer support and technical assistance
• Send business insights and email marketing communications based on your preferences
• Conduct research and analysis to improve our platform and services
• To provide, support, personalize, and develop our Site and platform
• To help maintain the safety, security, and integrity of our Site and platform
• To respond to law enforcement requests or as required by applicable law, court order, or governmental regulations
• As described to you when collecting your personal information or as otherwise set forth pursuant to applicable law
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred

Sharing Your Information

To the extent consistent with applicable law, we may share your personal information in the following circumstances:

• With our subsidiaries and affiliates
• With affiliated and third-party service providers, such as companies that provide us technical support, payment processing, data hosting, customer support tools, and other services
• With other parties when required by law or as necessary to provide or protect our services, products, and other offerings. For example, we may need to disclose information with other parties to comply with the law or respond to legal process or a request for cooperation by a government entity or law enforcement; to prevent fraud or verify and enforce compliance with the policies and terms governing our services; and to protect the rights, property, or safety of us, or any of our respective affiliates, business partners, or employees
• In the event we sell or transfer all or a portion of a business or assets to a third party, such as in connection with a merger or in the event of a bankruptcy reorganization or liquidation
• When you or your company or organization consent to or request such sharing

We will not sell, trade, or rent your personal information to third parties, nor will we disclose your personal information to third parties for direct marketing purposes.

Links to Other Websites and Third Parties

The Site may contain links or references to third-party owned or operated websites or online services. We are not responsible for the collection of personal information or the security or privacy of such information on any such third-party websites. Likewise, we are not responsible for the collection, use, and disclosure policies and practices (including the data security practices) of any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any personal information you disclose to such other organizations through or in connection with our social media pages, any mobile sites, applications, widgets, and other mobile interactive features.

Cookies, Web Beacons, and Similar Technologies

The Site, as well as certain third parties that provide content and other functionality on the Site, use a variety of technologies to learn more about how people use the Site. This section provides more information about some of those technologies and how they work.

Cookies

Cookies are small text files used to store information about users on the users' own computer. Cookies may be used to recognize you as the same user across different visits to the Site. Knowing how a user is using the Site through cookies enables us to tailor our Site to more effectively meet visitors' needs. It also enables us to improve the quality of your visit by making sure that the Site is properly formatted for your computer and web browser. Some Internet browsers can be configured to warn you each time a cookie is being sent or to refuse cookies completely. Refer to your browser help menu for more information.

Third-Party Service Providers

You can manage cookie tracking directly through the third-party service providers that we use. While our specific service providers may vary, we typically use services in the following categories:

For specific information about the third-party services we currently use and their privacy policies, please contact us at support@recorvis.com.

Other Local Storage

Local Shared Objects (also referred to as "Flash cookies") and HTML5 local storage are similar to cookies in that they are stored on your computer and can be used to store certain information about your activities and preferences. These objects are stored in different parts of your computer from ordinary browser cookies, however. Many Internet browsers allow you to disable HTML5 local storage or delete information contained in HTML5 local storage using browser controls.

Web Beacons

Web beacons can be embedded in web pages, videos, or emails, and can allow a web server to read certain types of information from your browser, check whether you have viewed a particular web page or email message, and determine, among other things, the time and date on which you viewed the Web beacon, the IP address of your computer, and the URL of the web page from which the Web beacon was viewed.

Do Not Track Signal

Some web browsers may transmit "do-not-track" signals to the Site with which a user communicates. We do not currently take action in response to those signals. If an industry standard on responding to such signals is established and accepted, we may reassess how to respond to those signals.

Data Security

We take reasonable efforts to protect your personal information by using administrative, technological, and physical safeguards designed to protect the personal information that we maintain against accidental loss or unauthorized access or use. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data privacy and security
• Incident response procedures

However, because no information system can be 100% secure, we cannot guarantee the absolute security of your personal information.

U.S. State Privacy Rights

Applicable law may provide you with specific rights regarding your personal information. This section describes those potentially applicable rights and explains how you may exercise those rights.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information
• Access and delete certain personal information
• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah)
• Data portability
• Opt-out of personal information processing for:
• Targeted advertising (excluding Iowa)
• Sales
• Profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah)
• Either limit (opt-out of) or require consent to process sensitive personal information

The exact scope of these rights may vary by state. To exercise your U.S. state privacy rights, please submit your request by contacting us via email at support@recorvis.com.

To appeal a decision regarding a consumer rights request, please email support@recorvis.com with the subject line "Consumer Rights Appeal."

Nevada Privacy Rights

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Nevada residents have the right to opt out of the sale of their personal information. To exercise this right, please contact us at support@recorvis.com with "Nevada Opt-Out Request" in the subject line.

We will respond to your request within 60 days, as required by Nevada law. Please note that we do not currently sell data triggering that statute's opt-out requirements.

California "Shine the Light" Law

California's "Shine the Light" law (Civil Code Section § 1798.83) permits California residents who use our site to request information regarding the disclosure of their personal information to third parties for direct marketing purposes. To make such a request, please send an email to support@recorvis.com with "California Shine the Light Request" in the subject line.

Right to Know and Data Portability

You may have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months (the "right to know"). Once we receive your request and confirm your identity, we will disclose to you:

• The categories of personal information we collected about you
• The categories of sources for the personal information we collected about you
• Our business or commercial purpose for collecting or selling that personal information
• The categories of third parties with whom we share that personal information
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• Sales, identifying the personal information categories that each category of recipient purchased; and
• Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained
• The specific pieces of personal information we collected about you (also called a data portability request)

Right to Delete

You may have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
• Debug products to identify and repair errors that impair existing intended functionality
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
• Comply with applicable law
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us
• Comply with a legal obligation
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it

Pursuant to applicable law, we will delete, or we may deidentify, personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Exercising Your Rights

To exercise your applicable rights to know or delete described above, please email us at support@recorvis.com. Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You may only submit a request to know twice within a twelve (12)-month period.

Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Under applicable law, you may also have a right to take legal action in relation to any breach of your rights regarding the processing of the personal information. We will not discriminate against you for exercising any of your applicable legal rights.

Consent to Use and Transfer Personal Information

Please note that if you submit personal information through the Site you will send it to us in the U.S. We will collect, process, and transfer your personal information in accordance with this Privacy Notice, but which may not be in accordance with the laws of the jurisdiction in which you reside outside of the U.S.

Children's Personal Information

We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our Site is directed toward children. If you learn that a child has provided us with personal information, please notify us immediately at support@recorvis.com.

Changes to this Privacy Notice

Due to changes in technology, legal requirements, or our Site, we may revise this Privacy Notice from time to time. We will notify you of changes by posting changes on this webpage or by other appropriate means. Any changes will become effective when we post the revised Privacy Notice on the Site. Your use of the Site following these changes means that you accept the revised Privacy Notice. We suggest that you bookmark this page so that you may check periodically to see if any changes have been made.

Questions and Contact Information

If you have any questions about this Privacy Notice or our handling of personal information, please contact us at:

Email: support@recorvis.com

Last Updated: November 12, 2025