Privacy Policy

1. Introduction

Welcome to HeyDr ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of the information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Receptionist services and website (the "Service").

2. Information We Collect

A. Information You Provide to Us: When you register for an account, we may collect business information such as your name, clinic name, email address, phone number, and payment information.

B. Patient Information (PHI): In processing calls and managing appointments on your behalf, we may process Protected Health Information (PHI) provided by the callers. In these instances, we act as a Business Associate under HIPAA frameworks, governed by our Business Associate Agreement (BAA).

C. Automatically Collected Information: We may collect data relating to your usage of our Service, call durations, and technical analytics to improve system performance.

3. How We Use Your Information

• To provide, operate, and maintain the AI receptionist and automated booking services.
• To process and route calls, SMS messages, and calendar data seamlessly.
• To process your transactions and send related information (e.g., invoices).
• To monitor and analyze usage patterns and improve our AI models (excluding any identifiable PHI).
• To communicate with you regarding updates, security alerts, and support.

4. Third-Party Service Providers

We may share your data with trusted third-party vendors who assist us in operating our Service (such as Stripe for billing, Clerk for authentication, Telnyx for telephony, and ElevenLabs for voice synthesis). These providers are contractually obligated to protect your data and are not authorized to use or disclose PHI except as strictly necessary to perform their services for us.

5. Data Security & HIPAA Compliance

We implement industry-standard administrative, physical, and technical safeguards designed to protect your data and PHI from unauthorized access, loss, or misuse. However, no data transmission over the Internet or electronic storage system is 100% secure.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data. You may update your account settings at any time or contact us directly to exercise these rights.

7. Contact Us

If you have questions or comments about this Privacy Policy or our privacy practices, please contact us at:

Email: team@heydr.co