1. INTRODUCTION

InfluxMD ("we," "us," or "our") is committed to protecting the privacy and security of our clients and their patients. This Privacy Policy describes how we collect, use, and protect information when you use our services, including our IMA (Intelligent Marketing Assistant) and Marketing Automation Suite.

2. HIPAA COMPLIANCE

InfluxMD is HIPAA-compliant and maintains Business Associate Agreements (BAAs) with all covered entities we serve. We implement all required physical, technical, and administrative safeguards to protect Protected Health Information (PHI) as defined by HIPAA.

3. INFORMATION WE COLLECT

a) Client Information:

• Business contact information
• Account credentials
• Website integration data
• Payment information
• Usage statistics

b) Conversation Data:

• Chat transcripts
• User queries
• Navigation patterns
• Engagement metrics

c) Patient Information:

• Only information voluntarily provided during conversations
• No PHI is stored without explicit consent
• Marketing preferences and interaction history

4. HOW WE USE INFORMATION

We use collected information to:

• Provide and improve our services
• Generate analytics and insights
• Maintain security and prevent fraud
• Comply with legal obligations
• Support technical functionality
• Enhance user experience
• Generate anonymized marketing insights

5. DATA STORAGE AND SECURITY

We implement robust security measures including:

• End-to-end encryption
• Secure cloud storage
• Regular security audits
• Access controls
• Employee training
• Incident response procedures
• Regular backups
• Monitoring systems

6. DATA SHARING AND DISCLOSURE

We may share information with:

• Your authorized staff members
• HIPAA-compliant service providers
• As required by law
• With explicit consent

We never sell, rent, or trade personal information or PHI.

7. CLIENT CONTROLS AND RIGHTS

Clients have the right to:

• Access their data
• Request corrections
• Export their data
• Delete their data
• Modify privacy settings
• Control data retention
• Receive breach notifications
• Review audit logs

8. DATA RETENTION

We retain data according to:

• HIPAA requirements
• Client preferences
• Legal obligations
• Service needs

9. CHILDREN'S PRIVACY

Our services are not directed to children under 13. We do not knowingly collect information from children.

10. CHANGES TO THIS POLICY

We may update this policy periodically. Significant changes will be communicated directly to clients.

11. COOKIE POLICY

We use cookies for:

• Essential functionality
• Performance monitoring
• User experience improvement
• Analytics

13. COMPLIANCE AND REPORTING

To report privacy concerns:

1. Contact our Privacy Officer
2. Submit written complaints

14. VENDOR MANAGEMENT

All third-party vendors must:

• Sign BAAs
• Meet security requirements
• Undergo regular audits
• Maintain compliance records

15. INCIDENT RESPONSE

In case of a data breach:

• Immediate notification to affected parties
• Investigation and remediation
• Documentation and reporting
• Prevention measures implementation

By using InfluxMD services, you agree to this Privacy Policy and our Terms of Service.