Privacy Policy

Vitalitek, Inc. ("Vitalitek," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our healthcare integration platform and related services.

1. Information We Collect

Information You Provide

We collect information that you voluntarily provide when using our services, including:

• Account information: Name, email address, organization name, and professional credentials
• Patient data: Information entered into superbills, including patient names, dates of birth, and billing codes
• Provider information: NPI numbers, practice details, and professional licenses
• Payment information: Billing details processed through our secure payment partners

Information Collected Automatically

When you use our platform, we may automatically collect:

• Device and browser information
• IP address and general location data
• Usage patterns and feature interactions
• Log data and error reports

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our healthcare integration services
• Process superbills and facilitate billing workflows
• Integrate with third-party services (Boulevard, Qualiphy, GoHighLevel) as authorized by you
• Send service-related communications and updates
• Ensure platform security and prevent unauthorized access
• Comply with legal obligations, including healthcare regulations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• Service integrations: With Boulevard, Qualiphy, and GoHighLevel as configured by your organization
• Service providers: With vendors who assist in operating our platform, under strict confidentiality agreements
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Fernet encryption for API credentials and sensitive configuration data
• Multi-tenant data isolation at the database level
• Regular security audits and vulnerability assessments
• Role-based access controls and authentication mechanisms

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Superbill data is retained in accordance with healthcare record-keeping requirements. You may request deletion of your account data by contacting us, subject to legal retention obligations.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.