Privacy Policy

Effective: October 28, 2025

This Privacy Notice (the “Notice”) explains how Lunit Inc. and our subsidiaries (collectively, “Lunit,” “we,” “us,” or “our”) collect, use, and disclose personal information in connection with the Services.  

“Services” means, collectively, when you access our websites that link to this Privacy Notice and the capabilities and services provided on or through our websites; when you interact with us through marketing or business development activities (e.g., webinars, other events, and social media);  when you apply for a job to work with us; and, if you are a customer, when we provide you with technical support or other product-related services.

We may provide you with additional “just-in-time" disclosures or additional information about our data processing practices. Such notices may supplement this Notice, clarify our privacy practices in the circumstances described, or may provide you with additional choices about how Lunit processes your personal information.

We collect several types of information in connection with your access and use of the Services:

• When you provide us with personal information like your first and last name, organization, primary role, username email address and telephone number (e.g., when you submit the “Contact Us” form, email us, or register for an event or webinar).
• When you apply for a job with us on our job application portals, we and our vendors collect your personal information (your name, email address and telephone number) and professional Information (e.g., resume, job history).
• When we provide you with technical support or product-related services (e.g., your first and last name, title, organization, primary role, email address, and telephone number).
• When you use the Services electronically, we automatically receive some technical information about the hardware and software that is being used.
• When you visit our websites, we may collect sensitive personal data such as account log-in information. We and our vendors use various technologies (such as cookies, pixels, scripts, and device identifiers) to understand how well our online advertising works, to distinguish between human users and bots, to enhance security and prevent spam, and to deliver more targeted online advertising and marketing campaigns. You can find out more about cookies, our partners, and how to opt out of tracking by visiting our Cookie Policy. We may disclose your internet or other similar network activity, identifiers and location information, and inferences about your interests to third parties, including advertising networks, data analytics providers, social networks and advertising partners. For purposes of the California Consumer Privacy Act and the California Privacy Rights Act (together, the "CCPA"), effective as of January 1, 2023, the above describes the Categories of Personal Information “Sold” and “Shared.” When you use the Services electronically, our servers will record internet activity data, such as browsing records, information about the browser or operating system you are using, and unique device identifiers, log information about your usage of the Services and information that is sent by your browser or device. Log information can include things like the IP address of your device, geolocation, information about the browser, or operating system you are using, unique device identifiers, pages that you navigate to, and other ways you interact with the Services.

We may use the information we collect to:

• Provide and manage our Services;
• Support your use of our Services;
• Communicate with you about our Products and Services;
• Perform any other contractual obligations we have with you;
• Evaluate your qualifications for employment with us;
• Manage your session history and perform analytics; or
• Carry out our other legitimate business interests, such as ensuring the quality and security of our Services, manage your marketing preferences and provide marketing information (e.g., newsletters, announcements, and event invitations), understanding how you interact with our Services, and complying with our legal obligations.

We will use your personal information for the original purposes for which we collected it, including when we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the use for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

We may share your personal information in the following circumstances:

• With our service providers (such as third-party distributors, vendors, and other service providers), who may use the information to develop and improve our Services, contact you in connection with the performance, operation, and support of our Services, performing analytics, marketing or consulting services, respond to your requests or as otherwise appropriate in connection with a legitimate business need.
• We also share information under the following principles:
  • With your consent or at your direction: We will share your information when we have your prior consent to do so or it is done at your direction.
  • For external processing or service provision: We sometimes share information with third parties to process information on our behalf or to otherwise provide certain services.
  • For legal purposes: We may share your information when we believe that the disclosure is reasonably necessary to (a) comply with applicable laws, regulations, legal process, or requests from law enforcement or regulatory authorities, (b) prevent, detect, or otherwise handle fraud, security, or technical issues, and (c) protect the safety, rights, or property of any person, the public, or Volpara.
  • On a non-personal or aggregate basis: We may share information that has been aggregated and de-identified with others for their own uses, in accordance with applicable laws and regulations.
  • For business purposes: We may share your information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company. We may also share your information between and among us, and our current and future affiliates and subsidiaries. Such information includes your name, username, email address, address, title, email and telephone number, geolocation data, such as your IP address; internet activity data, such as browsing records, information about the browser or operating system you are using, and unique device identifiers; and sensitive personal data such as account log-in information.

1. Some web browsers have “do-not-track” features that tell websites that you do not want to have your online activities tracked. Our website does not currently recognize or respond to automated browser signals, which may include “do-not-track” instructions. You can learn more about how to opt out of tracking features in our Cookie Policy.

We employ administrative, physical, and technical measures, including reCAPTCHA, designed to safeguard and protect information under our control from unauthorized access, use, and disclosure.

Although our websites may link to third-party websites, software, or services, this Notice applies only to our Services.  Please refer to the privacy policies on any third-party websites, software, or services to learn how they collect, use, and disclose your personal information. 

1. We share your personal information within our company, which may involve transferring personal information to other countries. We ensure your personal data is protected by requiring all Lunit affiliates to follow the same rules when processing personal information. Whenever we transfer your personal information within our company, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

   • The transfer of personal information is to a country that has been deemed to provide an adequate level of protection for personal data by the appropriate authorities; or
   • Where we use certain service providers, we may use specific contracts approved by the appropriate authorities which give personal data the same protection it has in the country of origin.

   Please contact us at jilee@lunit.io if you want further information on the specific mechanism used by us when transferring your personal information.

Depending on where you reside, including the European Economic Area, the United Kingdom, Switzerland, California and certain other states in the United States, you have certain rights with respect to the personal information that we have about you. For residents of South Korea, additional privacy terms and rights specific to Korean data protection laws are available here. These rights are not absolute and only apply in certain circumstances. This means we may be unable (for example, due to legal requirements) or not obligated to satisfy your request.

You may have rights to make choices about the personal information we collect, use and share. We take steps to help ensure that your personal information is accurate, complete and current.

Under the privacy or data protection laws in your state or country of residence, you may have the following rights in respect of your personal information within Lunit's control: the right to request access, correction, revision, or deletion of your personal information. In some circumstances we will not be able to delete your personal information without also deleting your user account, or we may be required to still retain some of your personal information to satisfy our legal or contractual obligations or to satisfy our business needs (where permitted by applicable laws).

In certain countries, you may also have additional rights to data portability, to opt out of sale or sharing of your personal information, to limit the use of your sensitive personal information, to object to the use of your personal information, or to request compensation for damages for any harms caused by the unlawful processing of your personal information. The rights set out above do not limit any other rights that you may have under privacy or data protection laws in your state or country of residence.

De-Identified Data

We may use de-identified data in some instances. We either maintain such data without attempting to re-identify it or treat such data as personal data subject to applicable law.

Exercising Your Rights

For more information about how we handle your information and so that we can meet our obligations to you, contact us at jilee@lunit.io. Lunit will not treat you differently for making such requests.

To help protect your privacy and security, we will take reasonable steps to verify your identity before providing requestors access to your details or correcting, amending or deleting your records. Any identification information provided to us will only be processed in accordance with, and to the extent permitted, by applicable laws.

In instances where you have consented to the processing of your personal information, you have the right to withdraw that consent at any time. You can unsubscribe from promotional or marketing communications via the unsubscribe links within the communications or by contacting us at [·].

Although we hope that we can answer any questions you may have about the way we process your personal information, if you do have unresolved concerns, you also have the right to complain to the relevant data protection authority in your state or country.

Do Not Sell My Personal Information

To the extent Lunit “sells” or “shares” your personal information under the meaning of certain privacy laws, use the "Do Not Sell My Personal Information" link on our website, allowing you to opt-out of the sale of your personal information, or contact us at jilee@lunit.io.

Automated Decision-Making

Lunit does not use automated decision-making technology.

When you contact Volpara Support by using our WhatsApp phone number, you opt into and agree to receive messages from Volpara Support on WhatsApp for case updates, troubleshooting, install coordination, and service notifications. Message frequency varies.

Opt-out: Reply STOP at any time to stop WhatsApp messages. Reply HELP for assistance.

Data charges may apply.

Questions? Contact Volpara Support at 800-305-3865 or support@volparahealth.com.

You may have the option to consent to video and audio recording during a Microsoft Teams meeting with Lunit. By participating in recorded Microsoft Teams meetings with Lunit, you acknowledge and agree not to share, discuss, or display any protected health information (“PHI”) or other confidential patient information during recorded meetings. If PHI is inadvertently disclosed during a recording, you must immediately notify Lunit so appropriate remedial measures can be taken. Lunit will store recordings securely in accordance with applicable laws. You may withdraw consent to recording at any time by requesting that recording be stopped.

Questions or comments about our Privacy Notice? Contact us at jilee@lunit.io.