Precision-Clinical-Appeals-Privacy-policy

Privacy Policy Effective Date: 30 April 2026 Company Name: Precision Clinical Appeals (“Company”, “we”, “us”, or “our”) Website: https://PrecisionClinicalAppeals.com

1. Introduction At Precision Clinical Appeals, we understand that the foundation of clinical consulting is absolute confidentiality. This Privacy Policy outlines how we collect, use, protect, and handle the data of our website visitors, prospective clients, and active partners.

Because we operate in the healthcare sector, we maintain a strict boundary between general website visitor information and Protected Health Information (PHI).

2. Information We Collect We collect information in two distinct categories:

A. Website Visitor & Lead Information (General Data) When you visit our website or request a free case review, we collect minimal business contact information to facilitate communication. This includes:

Your Name

Your Clinic or Practice Name

Your Direct Email Address

Standard web analytics (e.g., IP address, browser type, pages visited) collected via cookies to improve our site’s performance.

B. Client Service Information (Protected Health Information - PHI) If you become a client or participate in our “Risk-Free Trial,” you will submit medical records, insurance denial letters, and clinical notes. This data is NEVER collected directly through our public-facing website. All PHI is submitted exclusively through an end-to-end encrypted, dedicated secure vault. The handling, storage, and processing of PHI are governed entirely by our Business Associate Agreement (BAA), in strict adherence to the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act.

3. How We Use Your Information We do not sell, rent, or lease your data to third parties. We use your information solely for the following purposes:

To Provide Services: To cross-reference clinical notes against insurance policies and draft comprehensive appeal letters.

To Communicate: To send you secure vault links, service updates, and relevant insights regarding revenue cycle management.

To Improve Operations: To securely process documents using our proprietary AI workflows, which are heavily restricted to prevent your data from being used to train open-source models.

4. Artificial Intelligence (AI) and Data Processing We utilize advanced Artificial Intelligence (AI) to accelerate the drafting of clinical appeals. We ensure that:

Any AI processor utilized acts as a sub-processor under a strict BAA.

Your submitted clinical data is processed in a closed-loop environment.

Zero-Training Policy: Your clinic’s data and patient PHI are explicitly opted out of being used to train the AI provider’s base models. Once the appeal generation is complete, the temporary processing data is wiped.

5. How We Protect Your Data We employ military-grade security protocols to ensure your data remains uncompromised:

End-to-End Encryption: All clinical data transfers happen within zero-access, end-to-end encrypted architecture.

Access Controls: Only authorized personnel (including our Board-Certified medical reviewers) have access to your specific client vault.

Data Isolation: Every clinic is assigned a siloed, distinct secure vault to prevent cross-contamination of records.

6. Third-Party Service Providers We may share your general business information (not PHI) with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

Any third party that handles PHI (such as our secure cloud storage provider) is legally bound by a HIPAA-compliant Business Associate Agreement (BAA).

7. Data Retention and Deletion** We retain your general business contact information for as long as your account is active or as needed to provide you services.

For PHI and clinical records: Once an appeal has been successfully adjudicated, or upon the termination of our consulting relationship, all patient records and files are permanently and securely deleted from our vaults in accordance with HIPAA data destruction standards, unless otherwise mandated by law.

8. Your Rights Depending on your jurisdiction, you have the right to:

Request access to the personal business data we hold about you.

Request corrections to any inaccurate data.

Request the deletion of your personal contact data from our marketing lists.

Note: Requests regarding patient PHI must be handled according to the terms of our Business Associate Agreement and HIPAA regulations.

9. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. We will notify active clients of any significant material changes via email.

10. Contact Us If you have any questions regarding this Privacy Policy, our data security practices, or wish to review our standard Business Associate Agreement (BAA), please contact us at:

Email: drtdshelton@proton.me