Privacy Policy

1. Scope

We act primarily as a Service Provider and Business Associate to healthcare providers. Our processing of patient data is governed by the agreements we have with our Clients (Clinics) and applicable law, including HIPAA.

2. Information We Collect

• Client Information: Contact and billing info for clinic administrators.
• Patient Information (PHI): On behalf of the Clinic, we collect name, phone number, appointment history, clinical inquiries, and insurance information.
• Communication Data: We record and transcribe calls and SMS messages processed by our AI to ensure clinical accuracy and provide records to the Clinic.

3. How We Use Information

• To automate inbound scheduling and patient triaging.
• To execute follow-up campaigns and appointment reminders.
• To provide AI overviews and aggregations.
• To improve our AI algorithms using de-identified, aggregated data.
• To comply with legal obligations and security requirements.

4. Data Sharing

We do not sell patient data. We share information only with:

• The Clinic: All data collected is provided back to the patient's healthcare provider.
• Sub-processors: Trusted third-party vendors (e.g., AWS for hosting, Twilio for telephony) who have signed BAAs and meet HIPAA security standards.
• Legal Necessity: When required by law or to protect the safety of any person.

5. Patient Rights

Patients wishing to access, correct, or delete their health records should contact their healthcare provider (the Clinic) directly. We will assist the Clinic in responding to such requests as required by our BAA.

6. Security

We utilize industry-standard encryption (AES-256 at rest and TLS 1.2+ in transit) to protect PHI. Our systems are designed to meet the rigorous security requirements of the HIPAA Security Rule.

7. Contact Us

For questions regarding this policy, please contact: Standard Interaction Inc Email: founders@standardinteraction.com