Privacy Policy

Last updated: October 28, 2026

Template notice: this is placeholder policy text for a demo application using synthetic data only. It is not legal advice. Before handling any real patient information, have this reviewed by counsel and, if applicable, supplemented with a HIPAA Notice of Privacy Practices and Business Associate Agreements with each customer.

1. Information we collect

We collect account information you provide (name, email, organization) and information generated through your use of the service, including claims data, notes, flag resolutions, and audit trail entries created by your team.

2. How we use information

We use collected information to operate and improve the service, provide denial-risk predictions and analytics, maintain audit trails, provide customer support, and communicate service-related notices.

3. Protected health information

If your organization submits real patient data, that data may constitute protected health information (PHI) under HIPAA. We process such data solely to provide the service and do not use it for any purpose outside your instructions. A signed Business Associate Agreement (BAA) governs our handling of PHI where applicable.

4. Data sharing

We do not sell personal information. We share data only with subprocessors necessary to run the service (e.g., hosting and database providers), under contractual confidentiality obligations, or as required by law.

5. Data retention & security

We retain data for as long as your account is active or as needed to provide the service, and apply administrative, technical, and physical safeguards designed to protect it. No method of transmission or storage is 100% secure.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. Contact us to make a request.

7. Contact

Questions about this policy can be sent to privacy@medicalbillingsentry.example.