Privacy Policy

Scope of this policy

This policy covers the Synchrony Surgical marketing website at synchrony-surgical.com: the pages you are reading now and the demo request form on them. It describes what we collect from visitors to this website, why we collect it, and who else sees it.

It does not cover the Synchrony Surgical product used inside hospitals and surgery centers. Data handled within the product, including surgical schedules, case metrics, and staff records, is governed by the written agreement between AxS Healthcare, Inc. and each customer organization, not by this website policy. It also does not cover the administrative application that the “Login” link points to, which is part of the product and sits on a separate site.

Who we are

This website is operated by AxS Healthcare, Inc. (“AxS”, “we”, “us”), a California corporation and the company behind Synchrony Surgical, a perioperative performance management product for hospitals and surgery centers. AxS is at 1901 W. Lugonia Ave, Suite 340, Redlands, CA 92374, and is the company responsible for the information described in this policy. Synchrony Surgical is our product name, and “we” in this policy always means AxS Healthcare, Inc. rather than the product.

If you have a question about this policy or about information we hold, contact us at info@synchrony-surgical.com.

This site is not for patient information

Please do not send us patient information through this website. The demo request form asks for your name, your work email address, and the organization you work at, and it has no free-text field for anything else. Nothing on this site is intended to receive protected health information as HIPAA defines it, and ordinary email is not a secure channel for it.

If you need to discuss patient data with us, we will arrange an appropriate channel under a written agreement first. How the Synchrony Surgical product itself handles clinical data is described on our Security page.

What we collect

We collect information on this website in three ways: what you type into the demo request form, what your browser sends automatically when you ask for a page, and what our analytics and spam-protection tools observe.

Information you give us on a form

There is one form on this site: the demo request form, which appears on the home page and on the demo page. It asks for three things, your full name, your work email address, and the hospital or surgery center you work at, and it records which of the two pages you submitted from so we know where the request came from. Those are the only fields. We do not ask for a phone number, a job title, or a mailing address, and there is no free-text box. Our contact page carries no form at all; it lists an email address you can write to directly.

Information collected automatically when you visit

Like every website, this one receives technical information with each request: your IP address, your browser and operating system, the page you asked for, the page that referred you, and the date and time. Our hosting provider records this in its server logs, which we use to keep the site running and available and to investigate abuse.

We use your IP address for two further purposes, both short-lived:

To limit how often the demo request form can be submitted from one address, currently no more than five submissions in ten minutes. Your address is held in a temporary counter for the length of that window and is not kept after it.

To judge whether a request is automated. Our firewall reads your address as part of inspecting the request, before it reaches the website. This happens inside our hosting provider, so your address is not passed to anyone else for this.

Analytics collected automatically

We use PostHog, a product analytics service, to understand how visitors use the site. PostHog records page views, clicks and other interactions with the page, repeated frustrated clicking, clicks on elements that are not clickable, and when you leave a page. It also derives an approximate location, at the level of country, region, and city, from your IP address. This helps us see which content is useful and where the site is confusing, so we can improve it.

Session recording, which is a replay of how a visit moved through the pages, is turned off. That is a deliberate choice rather than a default, and we do not use it anywhere on this site. Analytics also run only on the live production website: preview and development builds of the site send nothing to PostHog at all.

When you submit the demo request form we record one further event, a count of the submission and which page it came from. It carries none of the details you typed.

Spam protection on our form

The demo request form is protected by AWS WAF, a web application firewall run by Amazon Web Services, our hosting provider. It inspects requests before they reach the website, using your IP address, the headers your browser sends, and the rate at which requests arrive, and it turns away traffic it identifies as automated. It is not configured to ask your browser to complete a challenge, so it sets no cookie and asks nothing of you.

Because this runs inside the same service that hosts the site, no separate company receives your information for this purpose.

Why we use it

To respond to demo requests, and to follow up about a possible assessment.

To understand how the website is used and to improve its content and layout.

To protect the site and the demo request form from spam and automated abuse.

To keep the site running, secure, and available, and to investigate technical problems.

To meet our legal obligations and to enforce our Terms of Service.

Cookies and similar technologies

One thing on this site sets a cookie:

PostHog sets a cookie so it can recognize a returning visit and tie together the pages seen in one session. It is set by this site rather than by a third-party domain.

There are no advertising cookies on this site, no social media pixels, and no cross-site tracking. The site loads no advertising or marketing tags, and its fonts are served from this site rather than fetched from a font provider, so opening a page here does not announce your visit to anyone this policy does not name.

Who receives your information

When you submit the demo request form, the details are emailed to the Synchrony Surgical team so we can respond. The message carries your address as its reply-to address, so a reply goes straight back to you. Nothing you submit is written to a database on this website: the email in our inbox is the record.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only to the service providers below, who process it on our behalf, under contract, and only for the purposes we set:

Amazon Web Services: website hosting and delivery, spam protection, the rate limit on the demo request form, and sending the notification email that form generates. It receives every page request, including your IP address, and keeps the server logs described above.

PostHog: product analytics. Session recording is off.

Google Workspace: the email inbox those notifications are delivered to, where they are held for the period described below.

Everything described in this policy is processed and stored in the United States, in Amazon Web Services data centers. If you visit this site from outside the United States, your information is transferred here.

We may also disclose information where the law requires it, where it is needed to protect our rights, safety, or property, or in connection with a merger, acquisition, or sale of assets, in which case we will say so here.

How long we keep it

We keep the information described above only as long as it is needed for the purposes set out in this policy, or longer where the law requires it:

Demo requests: 24 months from our last contact with you, then deleted from the inbox.

Analytics data: 12 months.

Rate-limit records: about ten minutes, the length of the window they count.

Server logs: kept by our hosting provider under its own retention schedule.

Your rights and choices

You can ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. Email info@synchrony-surgical.com and we will respond. We may need enough information to confirm who you are before we act, and anything you send us for that purpose is used only to answer your request.

You also have these choices:

To stop hearing from us, reply to any email we send or write to info@synchrony-surgical.com, and we will stop.

To limit analytics, most browsers let you block or delete cookies, and content blockers prevent our analytics from loading at all. The site works without them.

We do not currently respond to browser “Do Not Track” signals, because no common standard for them has been agreed.

Your California privacy rights

This section applies to California residents and uses the terms of the California Consumer Privacy Act as amended by the California Privacy Rights Act.

In the past twelve months we have collected these categories of personal information from visitors to this website:

Identifiers: your name, your work email address, your IP address, and cookie identifiers.

Professional or employment-related information: the hospital or surgery center you work at.

Internet or other electronic network activity: the pages you viewed, your clicks on them, and the page that referred you.

Geolocation data: an approximate location derived from your IP address, no more precise than a city.

We collect it from you directly when you submit the form, automatically from your browser when you request a page, and from the service providers named above. We use it for the purposes listed under “Why we use it” and disclose it for those business purposes to those providers.

We do not collect sensitive personal information as the CCPA defines it. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not knowingly collect or sell the personal information of anyone under 16. Because we neither sell nor share, an opt-out preference signal such as Global Privacy Control has nothing on this site to opt out of.

California residents may request to know what personal information we have collected and a copy of it, request that we correct it, and request that we delete it. You may make a request through an authorized agent. We will not discriminate against you for making one: nothing on this site is priced or withheld on that basis. To make a request, email info@synchrony-surgical.com. We will confirm we received it within 10 business days and respond within 45 days, extending once by a further 45 days where we need to and telling you why.

How we protect information

This site is served over an encrypted connection. It keeps no visitor records of its own: there is no database behind it, no account to sign in to, and no stored copy of anything you submit. Demo requests live in an email inbox that only the people who answer them can reach. How the Synchrony Surgical product handles data inside a hospital is described on our Security page.

No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.

Children

This website is directed at hospitals, surgery centers, and the professionals who run them. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us at info@synchrony-surgical.com and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of the page. Material changes will be reflected here before they take effect.

Contact us

Questions about this policy, or a request about your information, can be sent to info@synchrony-surgical.com, or by mail to AxS Healthcare, Inc., 1901 W. Lugonia Ave, Suite 340, Redlands, CA 92374.