Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last updated: July 4, 2025

Information We Collect

Personal Information

  • Name, email address, phone number, and business information
  • Practice details including specialty, location, and size
  • Professional credentials and licensing information
  • Billing and payment information for our services

Protected Health Information (PHI)

  • Patient demographic and insurance information
  • Medical billing codes and procedure information
  • Claims data and payment records
  • Any other information covered under HIPAA regulations

Technical Information

  • IP addresses, browser type, and device information
  • Website usage data and analytics
  • Cookies and similar tracking technologies
How We Use Your Information

Service Delivery

  • Process medical claims and manage revenue cycle operations
  • Provide credentialing and practice management services
  • Generate reports and analytics for your practice
  • Communicate with insurance providers and payers

Business Operations

  • Improve our services and develop new features
  • Provide customer support and technical assistance
  • Send service updates and important notifications
  • Conduct quality assurance and training

Legal Compliance

  • Comply with HIPAA and other healthcare regulations
  • Meet audit and reporting requirements
  • Respond to legal requests and investigations
Data Protection & Security

Security Measures

  • 256-bit SSL encryption for all data transmission
  • Multi-factor authentication for system access
  • Regular security audits and penetration testing
  • Employee background checks and security training
  • Secure data centers with 24/7 monitoring

HIPAA Compliance

  • Comprehensive Business Associate Agreements (BAAs)
  • Minimum necessary standard for PHI access
  • Regular risk assessments and compliance monitoring
  • Incident response and breach notification procedures

Data Retention

  • PHI retained according to legal and regulatory requirements
  • Business data retained for 7 years after service termination
  • Secure deletion of data when retention period expires
Information Sharing

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

  • Service Providers: Third-party vendors who assist in our operations (under strict confidentiality agreements)
  • Insurance Companies: For claims processing and payment purposes
  • Legal Requirements: When required by law, court order, or regulatory authority
  • Business Transfers: In case of merger, acquisition, or sale of assets (with continued privacy protection)
  • Your Consent: When you explicitly authorize information sharing
Your Privacy Rights

You have the following rights regarding your personal information:

  • Access: Request copies of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your information (subject to legal requirements)
  • Portability: Request transfer of your data to another service provider
  • Restriction: Request limitation on how we use your information
  • Objection: Object to certain uses of your information

To exercise these rights, contact us at privacy@curebytes.com or call +1 (959) 248-4757.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@curebytes.com

Phone: +1 (959) 248-4757

Mail:
CureBytes Privacy Officer
71 Connecticut Ave
Norwalk, CT 06850