B2B2C PUBLIC PRIVACY POLICY

Effective Date: June 2026

This Privacy Policy explains how data is securely processed via the Practice Assistant interface deployed across our network of partner practices. We operate under strict data minimization principles to bridge the communication gap between individuals requesting care and human mental health systems.

1. Core Data Principles & Pass-Through Posture

We believe sensitive data belongs with your doctor, not in an administrative database. Our systems are engineered exclusively as a high-security, pass-through data courier. We do not aggregate consumer profiling databases, we do not monitor behavioral tracking cookies across external websites, and we enforce an absolute, non-negotiable prohibition against selling, leasing, or monetizing user information to data brokers, advertising networks, or third-party corporate entities.

2. Categories of Information Collected

During a voluntary administrative interaction, the assistant captures:

  • Identity Metadata: First and last name, direct telephone contact number.

  • Administrative Support Data: Stated health insurance provider name and standard policy identification number (if entered to assist scheduling triage).

  • Intake Text Context: Custom messages detailing the user’s operational inquiry or specific routing request.

3. Specialized HIPAA & Platform Security Architecture

Data moving through our configuration pipeline is insulated by enterprise-tier encryption infrastructure, implementing Transport Layer Security (TLS 1.3) protocols during communication movement and Advanced Encryption Standard (AES-256) layers at rest. All data captures execute within an enterprise, HIPAA-calibrated environment backed by fully executed Business Associate Agreements (BAAs).

4. Systemic Deletion Policy (“The Data Scrub”)

In accordance with strict healthcare operational standards, all consumer ePHI collected via the automated chat portal is systematically and permanently scrubbed from our active technical logging tables within a maximum threshold of thirty (30) days following verified transmission to the designated clinical practice. Data retention beyond this operational window is managed exclusively by the respective clinical entity under their internal medical records policy.

5. Tracking Pixels & Contextual Privacy Exclusions

Our intake interfaces operate as a clean zone. We explicitly do not implement third-party tracking pixels (such as the Meta Pixel or Google Tag tracking code) on our intake fields. While user journeys may begin via contextual search or external ad listings, your interactions with our automated system remain completely decoupled from commercial tracking engines.