Business and privacy contact
[Legal entity, business address, privacy contact, and complaint channel: configuration required.] The owner must determine its role for each activity, including whether it acts as a covered entity, business associate, or another type of health service.
Information we collect
Account identity, contact information, consent versions, appointment and billing references, and information you choose to provide for care. Payment card details are handled by the payment processor; the platform does not store card numbers or CVV.
How information is used
To manage accounts, verify eligibility, schedule care, administer billing and visit balances, provide authorized support, and maintain security and audit records. Clinical information is restricted to authorized care participants.
Sharing and vendors
Care providers may access the minimum information needed for an authorized encounter. Payment, hosting, email and video vendors require documented risk review and applicable agreements. Identifiable health information must not be sent to marketing pixels or ordinary analytics without an approved legal basis.
Retention and deletion
[Retention schedule, state recordkeeping requirements, backup retention, and deletion procedure: owner and counsel must configure.] Deletion requests are queued for review; records subject to mandatory retention are not immediately erased.
Security and incidents
The system uses role checks, opaque sessions, audit events, and transactional controls. Production requires encryption, secure backups, access reviews, incident response, vendor agreements, and risk assessments. No claim of HIPAA compliance or certification is made.
Your choices and rights
Use Privacy Settings to request deletion or change optional communications. Applicable federal and state rights, complaint procedures, identity verification and response deadlines must be reviewed before launch. Essential session cookies support account access; no advertising analytics are installed.