Client Portal Privacy & Security Policy

Client Portal Privacy & Security Policy:

The Stone River Advisory LLC Client Portal provides authorized clients with private access to information and services associated with their relationship with Stone River Advisory.

The portal is designed as a private client environment—not a social or member-to-member community.

Protected Health Information

The Client Portal may contain Protected Health Information ("PHI") and electronic Protected Health Information ("ePHI").

Stone River Advisory maintains appropriate administrative, physical, and technical safeguards for ePHI in accordance with applicable HIPAA requirements.

Individual Accounts:

Each client should use only the account assigned or authorized for that client.

Clients must not:

• Share passwords or login credentials with unauthorized individuals

• Attempt to access another client's account

• Circumvent security controls

• Download information belonging to another client

• Use the portal for unlawful purposes

• Attempt to interfere with portal security or operation

Password Security:

Clients should use strong, unique passwords and maintain control of their login credentials.

Stone River Advisory will never ask clients to publicly disclose their password.

Shared Devices:

Clients should exercise particular caution when accessing the portal from:

• Public computers

• Shared family computers

• Employer-owned devices

• Public Wi-Fi

• Devices accessible to other individuals

Clients should sign out after each session when using a shared device.

Access Controls:

Stone River Advisory limits portal access according to authorized roles and legitimate purposes.

Client profiles and PHI are not intended to be publicly visible to other Stone River Advisory clients.

Unauthorized Access:

Clients should immediately notify Stone River Advisory if they:

• Lose a device containing Stone River information

• Believe their password has been compromised

• Discover unauthorized portal activity

• Receive information apparently belonging to another client

• Suspect another privacy or security issue

Portal Availability:

Temporary interruptions may occur because of maintenance, security measures, technology failures, or circumstances outside Stone River Advisory's reasonable control.

The portal should not be relied upon for emergencies.

Termination of Access:

Stone River Advisory may suspend or terminate portal access when necessary to protect information, investigate suspected misuse, respond to security concerns, or following termination of the applicable client relationship.