Last updated: July 14, 2026
Clinical Asset Index ("CAI") is operated by V.O.S Supply Group LLC, a Texas limited liability company, which is the controller of personal information described in this policy ("we" or "us"). CAI is a market-intelligence tool. We collect the minimum needed to operate it. We do not sell, share, or rent your personal information. We do not use third-party advertising trackers. We do not require an account to browse.
Pageviews (anonymous): CAI logs each page you view (path + referrer + coarse mobile/desktop from User-Agent) plus a random session id stored only in sessionStorage on your browser tab. The session id resets when you close the tab and contains no PII. We use this to understand which pages get traffic. No cookies are used for tracking.
Standard server logs: Timestamp, IP address, requested URL, user-agent, and referrer for operational and security purposes. Logs are rotated.
Tool events (anonymous): When you use a tool (Iris assistant, the listing kit, the verifier, the negotiator, etc.) we log the event type and the source page so we can fix bugs and improve flows. We do not log message content unless you have signed in and explicitly chose to save a conversation.
Email + lead data (only when you give it): If you submit a dealer lead, request a listing-price alert, or sign up for a digest, we store the email you provide and the device/listing context you sent. We use it to fulfil that request and nothing else. You may request deletion at any time.
Account & saved items (only when you sign in): A username, a salted password hash, and the list of devices/deals/listings you have saved. Saved items are private to your account.
Google Analytics 4 (G-48SEH9CXXZ): measures pageviews, traffic sources (e.g. Google, direct, referrers), device class, and approximate location at the country/region level. Used solely to understand which pages get traffic and how visitors move through the site.
Microsoft Clarity (project wzu8wlgeqe): records anonymized session recordings + heatmaps of how visitors interact with the site (clicks, scrolls, rage clicks). Recordings automatically mask form fields and other sensitive inputs. We use them to identify usability problems and improve flows.
Both tags load non-blocking (deferred until after the page is interactive) so they do not affect page speed. Neither is used for advertising or cross-site tracking. We do not sell or share this data; it is used internally to improve the site. If you prefer to opt out, browser-level privacy controls (DNT, content blockers, the Clarity opt-out URL) are respected.
Anonymous funnel analytics: To understand which pages get traffic, what visitors search for, where they click, and where they leave, CAI records anonymous behavioral events (page views, searches, device views, deal-panel opens, outbound clicks to a marketplace, dwell time, scroll depth). These are tied only to the random per-tab session id described above — never to your identity, an account, your full IP address, or any device fingerprint, and never across other websites. Search terms are equipment-model strings, normalized and length-capped; we do not associate them with a person.
Coarse region (privacy-first): To show approximate visitor geography (country / region), CAI looks up your IP address against a local, offline geo database at the moment of the request and stores only the derived country/region strings. Your raw IP address is never written to the analytics store — it is used in-memory for the lookup and discarded. No third-party geo service is called, and city-level precision is not retained.
Do-Not-Track & Global Privacy Control: If your browser sends a Do-Not-Track (DNT) signal or has Global Privacy Control (GPC) enabled, CAI sends no analytics events at all.
Retention: Raw behavioral events are kept briefly (about 90 days), then rolled into anonymous daily aggregates and the raw rows are deleted. The aggregates contain only counts and rates (e.g. “N searches for X”, “click-out rate by source”) — no session-level data — and are used internally to prioritize what we build next. They are never shared outside the company.
No PHI (protected health information). No PII beyond what you voluntarily type into a form (email, optional message). No third-party advertising trackers, no Facebook/Adsense pixels, no fingerprinting libraries. (We do use the analytics described in section 3.)
These tools accept a URL or an image upload. URLs and images are used solely to extract equipment and pricing information. We do not retain uploaded images after extraction is complete. Do not upload anything containing PHI, PII, financial details, or social security numbers.
CAI uses Anthropic Claude and OpenAI for vision extraction, the Iris assistant, marketing drafts, and listing-kit generation. Your queries and uploaded images are sent to those providers for processing. Their data-handling policies apply to that processing. We do not send anything you have not entered.
CAI uses minimal session cookies for sign-in (so you stay logged in across pages) and remembers UI preferences (filter state) in localStorage on your browser. We do not use advertising or cross-site tracking cookies.
CAI is not directed at children under 13 and we do not knowingly collect data from them.
Submit corrections or data-removal requests via /corrections. For account deletion or email-removal, contact us via the same page.
Every listing displayed by CAI links back to its primary public source (eBay, GovDeals, DOTmed, etc.). Those third-party sites have their own privacy policies that govern data you provide them.
We may update this policy; the "Last updated" date will reflect the most recent change.
This policy and any dispute relating to it are governed by the laws of the State of Texas, without regard to its conflict-of-laws rules, with exclusive venue in the state and federal courts located in Harris County, Texas.
Privacy questions and data requests may be directed to V.O.S Supply Group LLC at tyler@clinicalassetindex.com, or via /corrections.