Privacy Policy

Data our customers entrust to us

Revaxcel is used by medical practices, healthcare groups, billing companies, and consulting groups. Reports a customer uploads to the application, and the performance figures we produce from them, are processed on that customer’s behalf under its agreement with us, including a business associate agreement where one applies. That agreement, not this policy, governs that information.

If you are a patient of one of our customers, please contact your practice about your health information. We act only on its instructions.

What we collect

On the website

• Usage information. The pages you visit, the links you select, the site that referred you, your browser and device type, and an approximate location derived from your IP address. This is collected with Google Analytics, described below.
• Meeting requests. If you book a walkthrough, the scheduling service we use (Calendly) collects your name, email address, and anything you enter, and shares it with us so we can hold the meeting. Its own privacy policy also applies.
• Messages. If you email us, we receive your message and contact details.

In the application

• Account information. Your name, email address, role, and the organization and practices you can open, provided by your organization’s administrator or by you.
• Sign-in and security information. How you sign in, your second-step settings, the passkeys and authenticator apps you register, and when your sessions start and end.
• Activity records. Actions such as signing in, opening pages, importing reports, and changing settings. These form an audit trail that your organization’s administrators can review.
• Usage analytics. Which pages of the application are opened and how people sign in, sent to Google Analytics without your name, email address, organization, practice, or any figures from your workspace.
• Error reports. Technical details when something fails, sent to an error-monitoring service without your account identity or IP address, and with email addresses masked.

How we use information

• To provide, secure, and support the application, including confirming who you are when you sign in.
• To detect, investigate, and prevent misuse and security incidents.
• To understand how the website and application are used, and to improve them.
• To answer your questions, schedule and hold meetings, and send service emails such as sign-in codes, invitations, and password resets.
• To meet legal obligations and enforce our agreements.

We do not sell personal information, and we do not share it for advertising based on your activity across other sites.

Cookies and similar technologies

Google Analytics sets cookies on revaxcel.com and app.revaxcel.com (named _ga and _ga_ followed by an identifier) to tell visits apart and count returning visitors. Google signals and ad personalization are turned off. The scheduling widget may set its own cookies when you open it.

The application also keeps information in your browser to keep you signed in and to remember display choices such as the theme. The application cannot work without these.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Who we share information with

• Service providers that host and run Revaxcel, deliver email, monitor errors, measure usage, and schedule meetings. They may use the information only to provide those services to us.
• Your organization. Its administrators can see your account, your access, and your activity records.
• When the law requires it, or to protect the rights, safety, and security of our customers, users, or Revaxcel.
• In a business transfer, such as a merger or acquisition, subject to this policy.

How long we keep information

• Website and application usage analytics: no longer than 14 months.
• Uploaded report files: deleted automatically about 7 days after upload.
• Account information and activity records: while your account is active, and afterwards for as long as your organization’s agreement and applicable law require.

Security

We encrypt information in transit and at rest, limit access by role, require a second sign-in step for administrators, record access in audit logs, and scan uploaded files for malware. No system is perfectly secure, and we will notify you and your organization of a breach as the law requires.

Your choices and rights

• You can change your name and sign-in settings in the application under My Account.
• Your organization’s administrator can change what you can access.
• You can ask us to tell you what personal information we hold about you, or to correct or delete it, by emailing support@revaxcel.com. If we hold it on behalf of one of our customers, we will pass your request to that customer.

Residents of some US states have additional rights under state law, including to know, correct, and delete personal information, and to appoint an authorized agent. We will confirm your identity before acting on a request, and we will not treat you differently for making one.

Children

Revaxcel is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will also tell account holders in the application or by email.

Contact

Questions about this policy or your information: support@revaxcel.com. Information is processed and stored in the United States.