Legal
Privacy Policy
Last updated
At Wybit ("we," "our," or "us"), we understand that privacy is foundational to healthcare. This Privacy Policy explains how we collect, use, and protect information when you use our healthcare automation platform, MindScript, and visit our website.
Information we collect
We collect information in the following ways:
- Practice information. When you request a demo or sign up, we collect your name, email, practice name, and role.
- Patient data (Protected Health Information). Our AI agents process Protected Health Information (PHI) such as medical histories, chief complaints, and vitals. This data is handled strictly in accordance with our Business Associate Agreement (BAA) and HIPAA regulations.
- Usage data. We collect technical logs and analytics to monitor system performance and improve our agents.
How we use information
We use the collected data strictly to provide and improve our services:
- To operate our AI agents (e.g., generating HPIs, processing faxes).
- To securely integrate with your Electronic Health Record (EHR) system.
- To communicate with you regarding system updates, security alerts, and support.
- To train our models (only when explicitly permitted and strictly using de-identified data in compliance with HIPAA).
Data protection and HIPAA compliance
As a healthcare technology provider, we act as a Business Associate. All PHI processed by Wybit is encrypted in transit and at rest. We do not sell patient data or use it for advertising. For more details, please review our HIPAA Compliance page.
Information sharing
We only share information under the following circumstances:
- With necessary sub-processors (e.g., secure cloud hosting providers) who are also bound by BAAs.
- When required by law, subpoena, or other legal processes.
- At your explicit direction (e.g., writing data back to your EHR).
Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information. Patients seeking to exercise rights regarding their PHI should contact their healthcare provider directly, as we process that data on the provider's behalf.
Contact us
If you have questions about this policy or our privacy practices, please contact our privacy team at hello@wybit.io.