Privacy Policy

HIPAAFlow may collect:

• Account information
• Organization information
• Billing information
• Platform usage information
• Documents and templates created within the platform

HIPAAFlow may use information to:

• Provide and improve platform functionality
• Generate documents and workflows
• Manage subscriptions and billing
• Maintain platform security
• Improve user experience
• Provide customer support

Users should avoid uploading unnecessary Protected Health Information (PHI) unless explicitly supported by the platform and covered under an applicable Business Associate Agreement (BAA), if required. Users remain responsible for determining whether uploaded information is appropriate under applicable laws and regulations.

HIPAAFlow implements reasonable administrative, technical, and organizational safeguards designed to help protect user information. However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.

HIPAAFlow may use third-party providers for:

• Payment processing
• Hosting
• Analytics
• Authentication
• Infrastructure services

These providers may process information as necessary to provide their services.

Information may be retained as necessary to:

• Provide platform services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

HIPAAFlow may use cookies and similar technologies to improve platform functionality and analyze usage patterns.

Depending on jurisdiction, users may have rights related to:

• Access to information
• Correction of information
• Deletion requests
• Data portability

HIPAAFlow may update this Privacy Policy from time to time. Continued use of the platform constitutes acceptance of updated policies.

Privacy-related questions may be submitted through the HIPAAFlow platform or by emailing support@hipaaflow.com.