Privacy Policy

Last updated: March 25, 2024

1. Information We Collect

We collect personal information that you provide to us, such as your name, email address, and billing information, when you sign up for our services or contact us. We also collect information about your use of our services, such as the types of documents you upload and the features you use. In addition, we may collect patient data that you upload to our platform for the purpose of medical coding, subject to the terms outlined in our HIPAA Compliance section.

2. How We Use Your Information

We use the information we collect to provide and improve our services, communicate with you, and personalize your experience. We may also use the information for research and analytics purposes to better understand how our services are used and to develop new features and improvements. Patient data is used solely for the purpose of providing medical coding services and is not used for any other purpose without your explicit consent.

3. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information or patient data to third parties without your consent, except as described in this Privacy Policy. We may share your information with trusted third-party service providers who assist us in operating our services, conducting our business, or providing services to you, such as payment processing and customer support. These service providers are obligated to maintain the confidentiality and security of the information and are prohibited from using it for any other purpose.

4. HIPAA Compliance

As a platform that handles patient data, we are committed to maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA). We have implemented appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and security of protected health information (PHI). We will only use and disclose patient data as necessary to provide our services, as required by law, or as authorized by you or the applicable patient. In the event of a data breach involving patient data, we will promptly notify you and take appropriate measures to mitigate any potential harm and comply with applicable breach notification requirements under HIPAA.

5. Data Security

We take reasonable measures to protect your personal information and patient data from unauthorized access, use, or disclosure. We employ industry-standard security measures, such as encryption and access controls, to safeguard your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We will retain your personal information and patient data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will securely delete or anonymize it in accordance with applicable laws and regulations.

7. Your Rights

You have the right to access, correct, or delete your personal information and patient data that we hold, subject to certain limitations under applicable law. You may also have the right to object to or restrict the processing of your information. To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of the Privacy Policy. It is your responsibility to review the Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions, concerns, or requests regarding our Privacy Policy or the handling of your personal information and patient data, please contact us at tylergibbs@backworkai.com