Privacy Policy

Last updated: October 14, 2026

This Privacy Policy describes how Hammerbeam Software (“Hammerbeam,” “we,” “us” or “our”) collects, uses and protects personal information in connection with the Pico platform, website and related services (the “Service”). By using the Service you agree to the practices described here.

1. Information we collect

Account information — name, email address, role and credentials for authorized users of the Service.
Records submitted by participating organizations — information that organizations enter into the Service in the course of managing their operations, which may include patient information they are authorized to hold.
Usage and technical information — log data such as IP addresses, timestamps, authentication events and actions taken in the Service, collected for security and auditing.
Communications — messages you send us, such as support requests.

2. How we use information

to provide, maintain and secure the Service;
to authenticate users and send operational email such as sign-in codes, invitations and password resets;
to respond to support requests;
to monitor for misuse and maintain audit records;
to improve the Service.

We do not sell personal information, and we do not use it for third-party advertising.

3. Sharing

We share information only with service providers that help us operate the Service (for example, cloud hosting and transactional email delivery), under obligations appropriate to that role; within a participating organization, with that organization’s authorized users according to their access levels; and where required by law or to protect the rights, safety and security of the Service and its users.

4. Security

We protect information using measures appropriate to the Service, including encrypted connections, hashed credentials, role-based access controls and authentication audit trails. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Retention

We retain information for as long as needed to provide the Service, meet legal obligations and maintain required records. Organizations may request deletion of their data, subject to legal and contractual retention requirements.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct or delete personal information we hold about you. Authorized users can view and update account details within the Service; for other requests, contact us at support@bypico.com. If your information was submitted by a participating organization, we may direct your request to that organization as the party responsible for those records.

7. Children

The Service is intended for use by authorized adult users of participating organizations. We do not knowingly collect personal information directly from children; records concerning minors are submitted and controlled by participating organizations under their own obligations.

8. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision, and material changes will be communicated through the Service or by email.

9. Contact

Questions about this Privacy Policy should be directed to support@bypico.com.