Privacy Policy

1. Introduction

Paratus Health, Inc. (“Paratus,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our services. We are HIPAA-compliant and handle all protected health information (“PHI”) in accordance with applicable law.

2. Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and practice details provided when you request a demo or contact us.
• Usage Data: Browser type, IP address, pages visited, and time spent on our website.
• Protected Health Information (PHI): When you use our prior authorization services, we may process PHI on behalf of your medical practice as a Business Associate under HIPAA.
• Business Information: Practice name, EHR system, and billing details necessary to provide our services.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our prior authorization services
• Communicate with you about your account, demos, and service updates
• Process prior authorization submissions, follow-ups, and appeals on your behalf
• Comply with legal obligations, including HIPAA requirements
• Analyze usage trends to improve our platform

4. HIPAA Compliance

Paratus Health operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We maintain appropriate administrative, physical, and technical safeguards to protect PHI. We enter into Business Associate Agreements (BAAs) with all covered entities we serve. We do not sell, rent, or use PHI for marketing purposes.

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third-party vendors who assist in operating our platform, subject to confidentiality agreements.
• Insurance Payers: As necessary to submit and process prior authorization requests on your behalf.
• EHR Systems: Including athenahealth, to integrate with your practice workflows.
• Legal Requirements: When required by law, court order, or governmental authority.

6. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments. We are SOC 2 compliant and conduct regular audits of our data handling practices.

7. Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. PHI is retained in accordance with HIPAA requirements and our Business Associate Agreements with covered entities.

8. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Opt out of marketing communications
• Request a copy of your data
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at contact@paratushealth.com.

9. Cookies

We use cookies and similar tracking technologies to improve your experience on our website. You can control cookie settings through your browser preferences.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: