Privacy Policy

Personal Identifiers: Name, practice address, email address, and phone number provided voluntarily through our site.

Protected Health Information (PHI): Patient medical records, treatment details, and insurance identifiers required for billing.

Technical Data: Automatically logged information such as IP addresses, browser types, and domain names used to monitor site performance.

Practice Information: Specialty type, practice size, and billing volume to tailor our RCM solutions.

Managing RCM: Processing transactions, submitting claims, and managing denial follow-ups.

Communication: Responding to inquiries and sending transactional or relationship-based updates.

Compliance: Meeting legal and regulatory standards set by CMS and the California Department of Health Care Services.

Site Improvement: Analyzing usage statistics to enhance the quality and security of our online platform.

End-to-End Encryption: We utilize SSL/TLS protocols to encrypt ePHI both at rest and during transmission.

Secure Access Controls: Implementation of strong authentication and role-based permissions ensures only authorized personnel access PHI.

Zero-Downtime EHR Integration: We maintain Secure EHR Access to your existing platforms (e.g., Epic, Cerner) without storing data on unencrypted local devices.

Physical Safeguards: Locked filing areas and restricted access zones to protect all physical records.

CCPA/CPRA Rights: You have the right to know what personal information is collected, request its deletion, and opt out of its sale or sharing.

CMIA Compliance: We adhere to the Confidentiality of Medical Information Act, which requires stricter authorization processes and audit trails than federal law in some cases.

Patient Access (PAHRA): We support the shorter timelines required under California law for responding to patient access requests.

Breach Notification: In the event of an unsecured PHI breach, affected individuals will be notified within 60 days of discovery as mandated by both federal and state law.