Privacy Policy

1. Introduction

TouchpointHQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our outcomes tracking platform for behavioral health clinicians.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, practice name, credentials)
• Patient data entered into the platform (names, email addresses, assessment responses)
• Payment information (processed securely through Stripe)
• Communications with us (support requests, feedback)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Generate anonymized, aggregate data for research purposes (with appropriate consent)

4. HIPAA Compliance

TouchpointHQ is designed to support HIPAA compliance. We implement appropriate administrative, technical, and physical safeguards to protect Protected Health Information (PHI). We will enter into Business Associate Agreements (BAAs) with covered entities as required by HIPAA regulations.

5. Data Security

We implement industry-standard security measures including encryption in transit and at rest, secure data centers, regular security audits, and access controls. While we strive to protect your information, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time by contacting us. We will retain and use your information as necessary to comply with legal obligations.

7. Third-Party Services

We may share your information with third-party service providers who assist us in operating our platform:

• Payment processing (Stripe)
• Email delivery services
• Cloud hosting providers

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: