Home › Privacy Policy
Privacy Policy
Inovalon Holdings, Inc. and our affiliates (including subsidiaries) (“Inovalon,” “we,” “our,” or “us”) are committed to protecting your privacy and personal information. This Privacy Policy sets forth how Inovalon collects, holds, uses, and discloses the information described in this Privacy Policy. Except as otherwise described below, this Privacy Policy applies to our online and offline personal information processing activities, including with respect to visitors of our website (www.inovalon.com) and other websites where this Privacy Policy is posted, individuals who access or use certain features of Inovalon’s services, individuals who subscribe to receive news, information, and marketing communications and materials from us, and individuals who communicate or otherwise interact or engage with us or the services available through our website.
The personal information that we collect and process may be disclosed to our agents and representatives to respond to inquiries, provide services, or as otherwise deemed appropriate. Data maintained by Inovalon will be stored and processed in the United States.
By using Inovalon’s website or submitting information to us, you acknowledge and agree to the terms of our Privacy Policy, our Terms of Use, and to our California Consumer Privacy Statement if you are a California resident.
The Inovalon website may contain links to other websites over which Inovalon has no control. Inovalon is not responsible for the privacy policies or practices of other websites you choose to access through such links or otherwise, and Inovalon encourages you to review the privacy policies of those other websites to understand how they collect, use, and share your information.
Purposes for Collecting and Processing Personal Information
Inovalon may collect and process personal information for the purposes of operating and improving our website and business operations, fostering a positive user experience, delivering and informing you on Inovalon’s products and services, and for internal quality control and training purposes. Inovalon may also use the information we collect for marketing, advertising, and promotional purposes, including to inform you of our products or services available from Inovalon or Inovalon’s affiliated companies, and to otherwise personalize your experience and our offerings.
We may also use information to communicate with you, provide troubleshooting and technical support, send administrative communications (e.g., changes to our terms, conditions, or policies), respond to your inquiries, fulfill your requests, and to otherwise run our day-to-day operations.
We may use the information we collect to protect Inovalon’s services, our business operations, our rights and those of our stakeholders and investors, to prevent and detect fraud, unauthorized activities, and access, and other misuse of our website and services, including where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our terms.
Inovalon may also use the information we collect to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request from law enforcement or a governmental authority, as well as to conduct financial, tax, and accounting audits, audits and assessments of our operations, including our privacy, security, and financial controls, for risk and compliance purposes, to maintain appropriate business records, and/or enforce our policies and procedures.
In addition, if we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may use the personal information we have collected in contemplation of the transaction and as necessary prior to the completion of such a transaction.
Disclosures of Personal Information
Inovalon may disclose the information we collect to our affiliates, our customers, and our vendors and service providers who perform functions on our behalf, such as IT and website hosting, payment processing, marketing and marketing research, email delivery, customer support, data storage, auditing, consulting, and legal functions.
We may also disclose device and browsing information, activities and usage information, and other similar information to third-party marketing and data analytics providers, and other companies who provide marketing, advertising, campaign management, or analytics services on our behalf. In addition, if you click on a link on our website to access a third-party social media network, we may share our URL with that network when you visit their website.
When you chat with us via the chat feature on our website, we and our chat feature provider may monitor and record your conversation with us and maintain communication records related to these conversations.
If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer personal information we have collected with or to the other company in accordance with applicable laws. We may also use and disclose certain personal information as necessary prior to the completion of such a transaction or other corporate transaction, such as a financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants.
We may also disclose information to third parties to the extent required by applicable law and legal obligations. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators, government entities, and law enforcement. Inovalon may disclose information where we believe doing so is necessary to protect Inovalon’s products and services, our rights and property, or the rights, property, and safety of others. We may disclose information (i) to prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the services, (ii) in situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) to enforce, detect, investigate, and take action in response to violations of our terms.
We may also disclose personal information in the good faith belief that disclosure is otherwise necessary or advisable, that is otherwise authorized or required by law, court order, or legal process, or other ways not described above that we will notify you of or that we will obtain your consent for.
Controlling and Exercising Your Privacy Rights
Depending on your jurisdiction, you may also have certain legal rights in relation to the processing of your personal information. These rights may include, but are not limited to, the right to know, access, correct, or delete your personal information and the right to opt-out of the “sale” or “sharing” of your personal information. To exercise any of these rights, you may click the “Opt out of sale of personal data and targeted advertising” link at the bottom of our website. You may also contact us by email at Privacy@inovalon.com. To help protect your privacy and maintain security, Inovalon will take steps to verify your identity by matching the information provided by you with the information we have in our records before complying with your request. In some cases, we may require you to provide additional information to help us identify you or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request, and if so, will explain the basis for the denial. You may designate an authorized agent to make a request on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may require you to verify the identity and authority of the authorized agent. Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. Your request must be verifiable before Inovalon can fulfill such request. Inovalon cannot respond to your request or provide you with personal information if we cannot verify your identity or authority.
In addition, if we detect that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control” or “GPC” signal, we will opt that browser or device out of cookies that result in a “sale” or “sharing” of your personal information. If you come to our website or use our services from a different device or from a different browser on the same device, you will need to opt out, or use an opt-out preference signal, for that browser and/or device as well.
While Inovalon strives in good faith to provide individuals with access to their personal information, there may be instances where access cannot be granted. These situations may include, but are not limited to: information protected by legal privilege, data that would infringe on the privacy or rights of others, cases where the cost or effort of providing access is disproportionate to the privacy risk involved, or information deemed commercially proprietary. In cases where access is restricted, Inovalon will provide a clear explanation of the decision and offer a point of contact for any further questions or concerns.
Information Security
Inovalon maintains physical, electronic, and administrative security standards and procedures designed to safeguard our data and systems. Inovalon’s security professionals periodically monitor and test Inovalon’s web interface and implement technology updates in an effort to block unauthorized intrusion. Please be aware that despite our efforts, no data security measures can guarantee security.
We have made information security and data privacy foundational principles of our business operations and recognize the importance of ensuring such for citizens of the European Union. We are further committed to General Data Protection Regulation (GDPR) compliance in the event of any relevant activities.
California Consumer Privacy Statement: Disclosures for California Residents
The California Consumer Privacy Act of 2018 (the “2018 Act”), as amended, including by the California Privacy Rights Act of 2020 (“CPRA”), provides California residents or consumers with specific rights regarding their personal information. This California Consumer Privacy Statement sets forth our privacy practices as required by the 2018 Act and CPRA (hereafter, collectively the “CCPA”) as to information we collect from users of our website. Among other information, this section includes: the categories of personal information we collect, the purposes for which the categories are collected, whether such categories are sold or shared and how to opt out, and how long we retain personal information. This section also describes California residents’ CCPA rights and explains how to exercise those rights.
Below we describe the categories of personal information we may collect about you (and may have collected in the prior 12 months), as defined by the CCPA, as well as the purposes for using that information, and the categories of third parties to whom we may disclose the information.
Notice of Collection and Use of Personal Information
If you use Inovalon’s website or are an employee of Inovalon or our affiliate, or if we collect your personal information as part of our ongoing business-to-business outreach efforts, we may collect the following categories of personal information about you:
- Identifiers. Inovalon may collect identifiers such as your name, address, telephone number, social security number, email or IP address, and other similar identifiers.
- Sensitive Personal Information (Cal. Civ. Code § 1798.80). Inovalon collects “sensitive personal information,” such as signature, insurance policy number, education, bank account number and other financial information, medical information, and health insurance information from our employees and job applicants for Human Resources-related purposes, including the provision of an employee-sponsored health plan. We do not collect such information from users of our website or from employees of our ongoing or prospective business partners.
- Protected Classifications. Inovalon does not collect any protected classifications, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, medical history, ancestry, genetic information, disability, citizenship status, or military and veteran status from users of our website.
- Commercial Information. Inovalon may collect commercial information, including information related to the employer on whose behalf you are using our website, or the potential Inovalon services you inquire about.
- Purchase Information. Inovalon may collect information on whether your use of our website led to the purchase by you or your employer of any of our services, and if so, which services.
- Internet and Other Electronic Network Activity Information. Inovalon may collect website activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with our website. We may also collect, and our service providers may store, records and transcripts of your interactions with our chat feature.
- Geolocation Data. Inovalon does not collect information about where the device from which you provide information is located.
- Audio, Electronic, Visual, Thermal, Olfactory, or Similar Sensory Information. Inovalon may record the audio of marketing calls that we place or that we receive. Call recordings will begin with a recorded announcement. We do not collect audio, electronic, visual, and similar information through our website.
- Biometric Information. Inovalon does not collect biometric information through our website.
- Employment Information. If you use Inovalon’s website or if you are an employee of a vendor, we may collect information about your employer, your job description and/or duties, or other information that would help us educate you on Inovalon’s services or to receive services from your employer.
We may use the categories of personal information listed above for the purposes described in this Privacy Policy. In addition, we may use these categories of personal information for certain business purposes specified in the CCPA, and we may disclose the personal information, as described in this table:
| Purposes | Categories of Personal Information | Third-Party and Other Recipient Disclosures |
| Responding to your queries or other outreach, including customer service. | Identifiers; Commercial Information; Internet and Other Electronic Network Activity Information; and Audio, Electronic, Visual, Thermal, Olfactory, or Similar Sensory Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; social networks; and others as required by law. |
| Auditing related to a current interaction with you and concurrent transactions. | Identifiers; Commercial Information; Internet and Other Electronic Network Activity Information; and Audio, Electronic, Visual, Thermal, Olfactory, or Similar Sensory Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; social networks; and others as required by law. |
| Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. | Identifiers; Commercial Information; and Internet and Other Electronic Network Activity Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; and others as required by law. |
| Debugging to identify and repair errors that impair existing intended functionality. | Identifiers; Commercial Information; and Internet and Other Electronic Network Activity Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; and others as required by law. |
| Undertaking internal research for technological or other website or product development and demonstration. | Identifiers; Commercial Information; Internet and Other Electronic Network Activity Information; and Audio, Electronic, Visual, Thermal, Olfactory, or Similar Sensory Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; data brokers; advertising networks; and others as required by law. |
| Hiring, payroll, and other Human Resources-related functions. | Identifiers; Commercial Information; Sensitive Personal Information Subject to Cal. Civ. Code § 1798.80; and Internet and Other Electronic Network Activity Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; and others as required by law. |
| Business-to-business outreach. | Identifiers; Commercial Information; Internet and Other Electronic Network Activity Information; and Audio, Electronic, Visual, Thermal, Olfactory, or Similar Sensory Information. | Affiliates; service providers and vendors; advisors and agents; data analytics providers; data brokers; advertising networks; and others as required by law. |
Sales and Sharing of Personal Information
The CCPA defines “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-context behavioral advertising. Under the CCPA, therefore, we may be deemed to “sell” or “share” the following categories of personal information with third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising: identifiers, online information, and commercial information. We do not knowingly “sell” or “share” sensitive personal information, nor do we knowingly “sell” or “share” personal information about individuals we know are under age sixteen (16). If you prefer that we do not share your personal information with these third parties, you may opt out of such sharing at no cost by following the instructions under “Controlling and Exercising Your Privacy Rights” below.
Past 12 Months’ Activity
In the past 12 months, Inovalon has used personal information collected through our website or otherwise to respond to user outreach, to initiate or respond to customer outreach, to outreach to potential customers, or to provide Human Resources-related services for our employees and job-applicants. We have not sold any such personal information. Inovalon may have provided some personal information to a third-party service provider that we utilize to store such website contact information and to assist with our outreach, response, and Human Resources-related efforts.
Sources of Personal Information
We may collect personal information from the following categories of sources: directly or indirectly from you; affiliates; customers; vendors and service providers; social networks; and marketing and data analytics providers.
Sensitive Personal Information
Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive” personal information beyond the purposes authorized by the CCPA or applicable privacy law.
Retention Periods
We retain your personal information only for as long as necessary to fulfill the purpose for which it was collected.
Privacy Choices
If you are a California resident, subject to certain conditions and exceptions, you have certain choices regarding our use and disclosure of your personal information, as described below:
- Right to Know. The right to request, twice in a 12-month period, to have Inovalon disclose to you (i) the categories or personal information we collected about you; (ii) the categories of sources from which the personal information is collected; (iii) our business or commercial purposes for collecting, selling, or sharing personal information; (iv) the categories of third parties to whom we have disclosed personal information; and (v) a copy of the specific pieces of personal information we have collected about you.
- Right to Correct. The right to request that Inovalon correct or amend information about you that is inaccurate.
- Right to Delete. The right to request that Inovalon delete certain personal information we have collected from you. Your request to delete your personal information may be denied if it is necessary for us to retain your information under one or more of the exceptions listed in the CCPA.
- Right to Opt-Out of Sale and Sharing. The right to opt-out of the “sale” or “sharing” of your personal information, as those terms are defined under the CCPA.
- Right to Limit Use and Disclosure. You have the right to limit use and disclosure of your “sensitive” personal information. We do not use or disclose “sensitive” personal information beyond the purposes authorized by the CCPA; thus, this right is not available to you.
- Right to Non-Discrimination. You have the right not to be subjected to discriminatory treatment for exercising any of the rights described in this section.
Controlling and Exercising Your Privacy Rights
- Right to Know, Correct, and Delete. California residents may submit a request to know, correct, or delete their personal information that we collect from you by emailing us at Privacy@inovalon.com. To help protect your privacy and maintain security, Inovalon will take steps to verify your identity by matching the information provided by you with the information we have in our records before complying with your request. In some cases, we may require you to provide additional information to help us identify you or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request, and if so, will explain the basis for the denial. You may designate an authorized agent to make a request on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may require you to verify the identity and authority of the authorized agent. Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. Your request must be verifiable before Inovalon can fulfill such request. Inovalon cannot respond to your request or provide you with personal information if we cannot verify your identity or authority. Once we receive and confirm your verifiable consumer request, we will disclose to you the personal information we collected about you, correct your personal information in our records with the updated information that you provide to us, or delete your personal information from our records (unless an exception applies).
-
Right to Opt-Out of Sales and Sharing: To exercise your right to opt-out of the “sale” or “sharing” of your personal information, including targeted advertising, you may click the “Do Not Sell or Share My Personal Information” link at the bottom of our website. We will apply your opt-out based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. If you come to our website or use our services from a different device or from a different browser on the same device, you will need to opt out for that browser and/or device as well.In addition, if we detect that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control” or “GPC” signal, we will opt that browser or device out of cookies that result in a “sale” or “sharing” of your personal information. If you come to our website or use our services from a different device or from a different browser on the same device, you will need to opt out, or use an opt-out preference signal, for that browser and/or device as well.You may also make a request by contacting us by email at Privacy@inovalon.com.
- Shine the Light Request: California residents have the right to request that Inovalon provides you with: (1) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (2) the identity of those third parties. To make a request, please contact us by email at Privacy@inovalon.com.
This California Consumer Privacy Statement is available in alternative formats upon request. To request this California Consumer Privacy Statement in an alternative format, please email us at Privacy@inovalon.com.
Changes
Inovalon may amend this Privacy Policy from time to time and therefore encourages you to review it periodically. If Inovalon decides to amend the Privacy Policy, Inovalon will post the updated Privacy Policy on this website and in other locations Inovalon may deem appropriate. Your continued use of our website after modifications are posted constitutes your consent to the privacy practices described herein.
Contact Information
If you need to contact Inovalon about any aspect of this Privacy Policy, please see below:
Via Mail Delivery:
Inovalon
4321 Collington Road
Bowie, Maryland 20716
Attn: Legal Department
Via Email: Privacy@inovalon.com
This Privacy Policy was last updated on October 21, 2025.
