We collect information you provide when creating an account (name, email, organization), information generated by your use of the Service (API usage logs, intake payloads, session metadata), and technical information (IP address, user agent, request timestamps). We do not sell your data to third parties.
We use collected data to: (a) operate and improve the Service; (b) authenticate users and enforce quotas; (c) send transactional emails (account creation, billing receipts, security alerts); (d) comply with legal obligations; and (e) generate aggregated, de-identified analytics to improve the Service.
intakeScribe may process Protected Health Information (PHI) on behalf of covered entities. We operate as a Business Associate under HIPAA. PHI is processed only pursuant to a signed Business Associate Agreement (BAA). PHI is encrypted in transit and at rest. We do not use PHI for any purpose other than providing the contracted Service.
We engage the following subprocessors to deliver the Service:
Account data is retained for the duration of your subscription plus 90 days. PHI within intake payloads is retained for the period specified in your BAA. You may request deletion of your data by contacting support. Certain data may be retained longer where required by law or for legitimate dispute resolution purposes.
We implement industry-standard administrative, physical, and technical safeguards including TLS encryption in transit, AES-256 encryption at rest, access controls, audit logging, and regular security assessments. No system is perfectly secure; in the event of a breach affecting PHI we will notify affected parties as required by HIPAA.
Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal data. To exercise these rights, contact us at the address below. We will respond within 30 days. Requests related to PHI should follow the process outlined in your organization's HIPAA Notice of Privacy Practices.
Privacy questions should be directed to support@intakescribe.abhix-ai.com.