1. What our services are for
JV Clinical Technologies (“we”) provides software tools for behavioral health professionals. This policy covers our website and our tools, including Appeal Builder, which helps professionals analyze insurance denials and draft appeal letters using documents that the professional has properly de-identified before use. Our current tools are not designed to receive protected health information (PHI). Users must not submit information that identifies a patient.
2. Information we collect and store
- Account information: email address, password (stored by our authentication provider, never by us in readable form), practice or organization name and your role, and two-factor settings.
- Subscription and billing references: each tool's plan, status and monthly usage, and Stripe customer and subscription identifiers. Card details are collected and stored by Stripe, not by us.
- Usage counts: when work (such as an appeal) is started and completed, letters counted against your plan, and rate-limit counters.
- Minimal operational and security events, such as error types and timing, without document content.
3. Document content
Files you select are read by your own web browser. Original files, file names and file properties are not uploaded. Only the extracted text you review and approve is sent to our server, which forwards it to our AI service provider to produce your analysis and letter. We do not save document text, analyses, or letters in our database, logs, analytics, error reports, payment records or email. Content exists in your browser session until you close the page or clear it.
4. Service providers
- Vercel: website and application hosting.
- Supabase: user authentication and the account database.
- Stripe: payments, subscriptions and the billing portal.
- Anthropic: AI processing of reviewed document text under commercial API terms. For the regulation lookup, only the state, plan type, service, payer name and short denial topics are sent to Anthropic's web search, never document text. Retention of submitted content is governed by those terms. [OWNER: confirm current retention terms and any zero-data-retention arrangement before launch.]
We do not sell personal information and do not use advertising pixels, session replay or third-party analytics in the application.
5. If identifying information is submitted by mistake
If you believe you submitted identifying patient information, use the in-app report option and contact support@jvclinical.com. We will stop further processing where feasible, restrict access, delete affected information where it exists in our systems, record a minimal incident event, and obtain professional advice on any obligations. Deletion does not by itself resolve legal or contractual obligations that may apply to you or to us.
6. Security
We use encrypted connections (HTTPS), managed authentication with optional two-factor sign-in, database access rules that separate each account, and limited logging. No system is perfectly secure.
7. Retention and deletion
Account and billing records are kept while your account is active and as required for tax and accounting. You may request deletion of your account by contacting support@jvclinical.com. [OWNER: set retention periods with counsel.]
8. Your choices and rights
[OWNER: add state privacy law disclosures as advised by counsel, for example California, Colorado, Virginia and other applicable states.]
9. Contact
JV Clinical Technologies, [ADDRESS]. Email: support@jvclinical.com.