Privacy Policy

Last Updated: August 21, 2025

Introduction

Paratus Health, Inc. (“Paratus Health,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through this Privacy Policy and Terms of Use.

Paratus Health provides AI-powered solutions for healthcare organizations, including automated front desk voice agents, patient intake workflows, and clinical documentation tools (“Services”). This Privacy Policy explains the types of information we may collect, how we use and protect that information, and your rights regarding your data.

By using our Services, you agree to this Privacy Policy and Terms of Use.

Data We Collect

We may collect the following categories of information from patients, providers, and users of our Services:

• Personal Information: Name, date of birth, home address, phone number, email.
• Healthcare Information: Insurance details, eligibility verification results, visit notes, lab results, medications, orders, allergies, and other information contained in your provider’s EHR.
• Payment Information: Payment method, billing address.
• Professional Information (for providers/clinic staff): Job title, employer, work email, work phone.
• Device/Usage Data: IP address, browser type, operating system, pages visited, and general usage patterns.

We minimize the amount of data collected wherever possible.

How We Use Your Information

We use your information to:

1. Deliver and improve our Services.
2. Verify insurance eligibility and calculate co-pays.
3. Facilitate appointment scheduling and reminders.
4. Enable AI-powered intake and scribe features for clinicians.
5. Provide customer support and respond to inquiries.
6. Comply with applicable legal, regulatory, and security requirements.

We do not sell personal information. Data is shared only with trusted service providers (e.g., EHR partners, telephony providers, payment processors) to facilitate Services.

SMS Terms & Conditions

In compliance with RingCentral and applicable regulations, Paratus Health provides the following SMS disclosures:

1. SMS Consent & Privacy

Phone numbers collected for SMS communication will not be shared with third parties for marketing purposes.

2. Types of SMS Messages

With your consent, you may receive messages such as:

• Appointment reminders
• Intake or follow-up messages
• Insurance or billing notifications
• Promotions or offers (if applicable)

Example:

“Hello, this is a reminder of your upcoming appointment with Dr. [Name] at [Location] on [Date] at [Time]. Reply STOP to opt out.”

3. Message Frequency

Message frequency may vary. For example, you may receive up to 2 messages per week regarding appointments or billing.

4. Fees

Standard message and data rates may apply, depending on your carrier.

5. Opt-In

You may opt in by:

• Giving verbal consent during a conversation.
• Submitting an online or paper form.

6. Opt-Out

You may opt out at any time by replying “STOP” to any SMS.

7. Help

Reply “HELP” for assistance, or contact us at: support@paratushealth.com.

8. Disclosures

• Message and data rates may apply.
• Opt out at any time by texting “STOP.”
• Message frequency may vary.

Sharing Information with Third Parties

Your personal information may be stored with or processed by trusted third-party vendors, including but not limited to:

• EHR Providers (e.g., Athenahealth, Elation)
• Cloud Infrastructure (e.g., Google Cloud, AWS, OpenAI APIs for processing)

We do not share data with unauthorized parties.

Data Security

We use strict tenant-level data isolation combined with role-based access controls to ensure that clinic data remains separate and secure. Patient/member data cannot be accessed across organizations, and staff within a clinic only see what their role permits.

All sensitive information is encrypted in transit (SSL/TLS) and at rest.

HIPAA Compliance

Paratus Health complies with the Health Insurance Portability and Accountability Act (“HIPAA”). Protected Health Information (“PHI”) is handled under strict safeguards, and Business Associate Agreements (BAAs) are signed with all covered entities and service providers.

International Data Transfers

Data may be stored or processed in the United States. By using our Services, you consent to such transfers, subject to applicable data protection safeguards (e.g., standard contractual clauses under GDPR).

Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your data.
• Restrict or object to data processing.
• Request data portability.
• Opt out of marketing communications.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosures, deletion, and opt-out of “sale” of data (though Paratus Health does not sell personal information).

Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect data from them.

Changes to This Policy

We may update this Privacy Policy periodically. Updates will be reflected with a “Last Updated” date. Continued use of Services after changes indicates acceptance.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Paratus Health, Inc.

contact@paratushealth.com