Privacy policy.

PracticeIQ, Inc. ("PracticeIQ," "we," "us") operates the website at practiceiq.ai and the AI receptionist software described therein ("Service"). This Privacy Policy describes how we collect, use, and protect personal information about visitors to our website and customers of the Service.

For Protected Health Information (PHI) processed under a Business Associate Agreement, see our Security Policy.

From website visitors:

• Information you submit via forms (name, email, practice name, phone)
• Anonymous analytics: pages viewed, referring URL, browser type, IP address
• Cookies as described in Section 6

From paying customers:

• Account information (business name, billing address, contact)
• Payment data (handled by Stripe — we never store card numbers)
• Service usage logs (audit log of every PHI access — see Security Policy)

• Deliver and operate the Service
• Respond to your inquiries and provide customer support
• Send transactional email (account, billing, security)
• Send marketing email only if you explicitly opt in — you can unsubscribe with one click
• Comply with legal obligations (court orders, audit requests from HHS)

We do not sell, rent, or trade your information. We share information only with:

• Subprocessors necessary to operate the Service — listed publicly at /legal/subprocessors
• Legal authorities when compelled by valid subpoena, court order, or HIPAA-required disclosure
• Acquirers in the event of a merger, sale, or reorganization (with at least 30 days' notice)

We implement administrative, physical, and technical safeguards designed to protect the information we hold. Detailed technical controls and HIPAA Security Rule alignment are described at /security.

No system is perfectly secure. If we discover a breach involving your personal information, we will notify you per applicable law (and per BAA § 4.4 if PHI is involved).

We use a small number of strictly-necessary cookies to operate the website (session, CSRF protection). With your consent, we may also use analytics cookies. We do not use third-party advertising or behavioral-tracking cookies.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion (subject to legal retention requirements)
• Opt out of marketing communications
• Lodge a complaint with a data protection authority

To exercise any of these rights, email christian@practiceiq.tech (placeholder until our domain is provisioned — currently christian@practiceiq.tech).

• Marketing leads: deleted within 24 months of last interaction
• Customer account data: retained for the life of the contract + 6 years (HIPAA requirement)
• Audit logs: retained 6 years per 45 C.F.R. § 164.316(b)(2)(i)
• Billing records: retained 7 years (IRS requirement)

The Service is not directed to individuals under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy. Material changes will be announced on the website at least 30 days before they take effect. The "Effective" date at the top reflects the most recent revision.

PracticeIQ, Inc.
Orlando, Florida
christian@practiceiq.tech