Privacy Policy
Effective date: August 8, 2026
Short version. This website collects almost nothing. It sets no cookies, runs no analytics, and has no tracking. The only personal information we receive from it is what you choose to put in an email to us.
If you are a patient or employee whose records are kept in OccuChart by your employer or an occupational-health provider, this policy does not govern those records — see Section 3.
1. Who we are
This website, occuchart.com, is operated by Sigma Sage Consulting LLC, a Georgia limited liability company based in Marietta, Georgia ("Sigma Sage," "we," "us," or "our"). This policy explains what we do with personal information in connection with this website and our business generally.
2. Information we collect
Information you send us
The only way to submit information through this site is to email us using one of the addresses listed on it. When you do, we receive whatever you include — typically your name, email address, organization, and the contents of your message.
Information collected automatically
Our web host records standard server logs when a page is requested, which may include your IP address, browser type, the page requested, and a timestamp. These logs are used to operate and secure the site, and are not used to build a profile of you.
Business contact and billing information
If your organization becomes a client, we hold ordinary business-contact and billing information — names, work email addresses, phone numbers, billing addresses, and payment details necessary to invoice you. Payment card and bank details are handled by our payment processor and are not stored on our systems.
3. Protected health information is handled differently
This is the most important distinction in this policy.
The OccuChart platform stores protected health information (PHI) belonging to our client organizations — occupational-health providers and employers. We process that information solely on their behalf and under their instructions, as a Business Associate under HIPAA, pursuant to a signed Business Associate Agreement. We do not own that data, and we do not use it for our own purposes, sell it, or use it for marketing.
If you are an employee or patient and want to access, correct, or ask questions about your health records, please contact your employer or the occupational-health provider who treated you. They control those records and their own notice of privacy practices governs them. We cannot release, alter, or discuss an individual's records without the instruction of the client organization that controls them.
PHI is not collected through this website.
4. How we use information
- To respond to your inquiry or demo request.
- To provide, support, secure, and improve our services under our agreements with clients.
- To invoice clients and collect payment.
- To operate and protect this website, including detecting and preventing abuse.
- To comply with legal, tax, and regulatory obligations.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not send marketing email to people who have not contacted us.
5. Cookies and tracking
This website sets no cookies. It contains no analytics, no advertising pixels, no social media trackers, and no third-party embeds. There is nothing to opt out of.
The OccuChart application at app.occuchart.com is a separate, authenticated system and uses only the cookies and local storage necessary to keep a signed-in user's session working. It does not track users for advertising.
6. Service providers
We use a small number of vendors to run the business. Each is bound by contract, and those with access to PHI operate under a HIPAA Business Associate Agreement.
| Provider | Purpose | PHI? |
|---|---|---|
| Google Cloud / Firebase | Application hosting, database, authentication | Yes — under a signed BAA |
| Render | Web application hosting | Serves the application interface |
| Hostinger | Website hosting, domain, and business email | No |
| Stripe | Client invoicing and payment processing | No — business billing data only |
We may also disclose information where required by law, to enforce our agreements, or to protect the rights and safety of our clients, our users, or ourselves.
7. Security
We encrypt data in transit (TLS 1.2 or higher) and at rest (AES-256), enforce role- and site-based access controls on the server side, log access, offer multi-factor authentication, and maintain backups with point-in-time recovery. No system is perfectly secure, but we treat this as a core obligation rather than a feature.
If you believe you have found a security vulnerability, please email sigma@occuchart.com before disclosing it publicly.
8. Retention
We keep website inquiries and business-contact information only as long as needed for the purpose it was provided, and for our own record-keeping and legal obligations. Client data in the OccuChart platform, including PHI, is retained and returned or destroyed according to the terms of the applicable client agreement and Business Associate Agreement, and applicable law.
9. Your choices and rights
You can ask us to tell you what personal information we hold about you, to correct it, or to delete it, by emailing sigma@occuchart.com. We will respond within the time allowed by applicable law.
Depending on where you live, you may have additional statutory privacy rights. Where such a law applies to us, we will honor the rights it grants you. Please note that requests concerning health records held in OccuChart must go to the client organization that controls them (see Section 3) — we are not permitted to act on those directly.
10. Children
This website and the OccuChart platform are intended for businesses and their adult workforce. We do not knowingly collect personal information from children under 13 through this website. If you believe a child has provided us information, contact us and we will delete it.
11. International visitors
We operate in the United States, and information we hold is processed and stored there. We do not currently offer our services outside the United States.
12. Changes to this policy
If we change this policy, we will post the revised version here and update the effective date above. Material changes affecting client data will also be communicated under the applicable agreement.
13. Contact
Sigma Sage Consulting LLC
Based in Marietta, Georgia, United States
sigma@occuchart.com