Privacy Policy

1. Introduction

NeuralRev Technologies ("NeuralRev," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our healthcare revenue cycle management platform and this Trust Center (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

• Account registration details (name, email, organization)
• Support ticket content and attachments
• Status notification subscription emails
• Communications you send to us

2.2 Protected Health Information (PHI)

In the course of providing RCM services, we may process Protected Health Information on behalf of covered entities. PHI is handled strictly in accordance with HIPAA regulations and applicable Business Associate Agreements. This Trust Center does not collect or display PHI.

2.3 Automatically Collected Information

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Services
• Process RCM transactions on behalf of healthcare providers
• Send system status notifications and service communications
• Respond to support requests and inquiries
• Detect, prevent, and address security incidents and fraud
• Comply with legal obligations and healthcare regulations
• Analyze usage patterns to improve service reliability

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers: Third-party vendors who assist in delivering our Services (cloud hosting, email delivery), bound by confidentiality agreements
• Healthcare partners: As necessary to process RCM transactions, pursuant to BAAs and applicable regulations
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate privacy protections

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Regular security assessments and penetration testing
• SOC 2 Type II attestation and HIPAA safeguards
• Automated monitoring and incident response procedures

No method of transmission or storage is 100% secure. If you believe your information has been compromised, contact us immediately at security@neuralweb.tech.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Healthcare-related data is retained in accordance with applicable regulations (typically a minimum of 6 years). You may request deletion of your personal data subject to legal retention requirements.

7. Cookies and Tracking

We use essential cookies to maintain session state and security. Analytics cookies may be used to understand usage patterns and improve the Services. You can control cookie preferences through your browser settings. Disabling essential cookies may affect service functionality.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete information
• Request deletion of your personal data
• Restrict or object to certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@neuralweb.tech We will respond within 30 days.

9. International Data Transfers

Your information may be processed in India and other jurisdictions where our infrastructure is located. We ensure appropriate safeguards are in place for cross-border data transfers, including contractual clauses and compliance with applicable data protection frameworks.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the Services. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data:

NeuralRev Technologies
Data Protection Officer
Email: privacy@neuralweb.tech
General: support@neuralweb.tech