Privacy Policy

1. The short version

MTR's products are built entirely from public data. The platform holds no protected health information, requires no connection to your systems, and does not process personal information about health plan members or patients.

The personal information MTR does hold is ordinary business contact information: who asked us for something, and how to reply.

2. What we collect

We collect the following, for the purposes stated:

• Contact details you submit through a demo request, contact form, forecast signup, or newsletter subscription: name, business email, organization, and anything you choose to write in a message field, together with your agreement to our terms and the revision you agreed to. Used to respond to you and, where you have asked for it, to send the material you requested.
• Business contact details for people at licensed client organizations, used to administer the licence and identify named readers.
• Client portal and product records, for licensed clients: named readers' identity, role, and study scope; a log of study opens and exports, retained for 24 months, used for licence administration and security; and questions submitted to MTR SIGMA together with the answers returned, logged as the AI Use Disclosure describes, to operate the service, diagnose faults, and measure quality.
• Website analytics, if and when enabled, in aggregate form: pages viewed, referring source, approximate region, and device type. Used to understand which material is useful. This policy will be updated before any analytics is enabled.
• Server logs necessary to operate and secure the site.

3. Cookies

This site currently sets no advertising cookies, no analytics cookies, and no tracking pixels. Any cookies present are strictly necessary to serve the site.

If that changes, this policy will be updated first, and any analytics we adopt will be configured to collect the minimum the previous section describes.

4. What we do not collect

MTR does not collect, receive, store, or process protected health information as defined by HIPAA. No client system integration is required to deliver any MTR product, and none is offered as a means of transferring member-level data.

MTR does not purchase personal information from data brokers for use in its products, does not build consumer profiles, and does not sell personal information.

5. The data behind the products

MTR intelligence is derived from publicly published sources, principally CMS files including landscape, crosswalk, plan benefit, enrollment, and Star Ratings publications, together with public geographic and demographic data.

Every dataset carries a recorded source, acquisition date, and licence terms, and every transformation is logged, so the lineage of any figure in a deliverable can be traced from the output back to the public source it came from.

6. How information is used

We use the business contact information described above to respond to enquiries, to provide and administer licensed products, to send material you have asked for, and to meet legal and accounting obligations. We do not use it for automated decision-making about individuals.

You can ask us to stop sending you material at any time, and any email we send includes a way to do so.

MTR offers its products in the United States, and this site is directed at a United States business audience. It is not directed at individuals in the European Economic Area, the United Kingdom, or other jurisdictions, and we do not target or monitor individuals there.

7. Sharing

We share personal information only with service providers that operate our site, email, and business systems, under contracts limiting their use of it, and where required by law or to protect legal rights. We do not sell it and do not share it for third-party advertising.

If MTR is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

8. Retention

Enquiry and signup information is retained while we are corresponding and for 24 months after the last contact, then deleted or anonymized. Records of your agreement to our terms, and the suppression list that keeps us from emailing people who have unsubscribed, are retained as long as they are needed to serve their purpose. Licence and billing records are retained for the term of the licence plus the period tax and corporate law require. Portal access logs are retained for 24 months.

9. Security

MTR maintains administrative, technical, and physical safeguards appropriate to the information it holds, including encryption in transit, access control scoped to named individuals, and logging of access to client deliverables. Encryption at rest is applied where our infrastructure providers support it. Because no PHI and no client system access are involved, the surface being protected is deliberately small.

If a security incident affects your personal information, we will notify you and the relevant authorities as applicable law requires.

10. Your choices

You may ask what business contact information we hold about you, ask us to correct it, ask us to delete it, or unsubscribe from anything we send. Write to legal@mtrgp.com. We will verify the request by corresponding with the email address it concerns, respond within 45 days, and tell you if we need longer. If we decline a request, we will say why, and you may appeal by replying to that answer; a different reviewer will decide the appeal.

Where the privacy law of your state or country applies to us and gives you further rights, we will honour them through the same process.

11. Children

This site and MTR's products are intended for business use. We do not knowingly collect personal information from anyone under 18.

12. Changes

This policy is effective as of the revision date shown at the top of the page, which also records the most recent update. We will update the policy before a material change in practice, not after it, and prior versions are available on request.

13. Contact

Privacy questions can be sent to legal@mtrgp.com. Licensed clients may also use the notice address given in their agreement.