Privacy Policy

FlowHealth Solutions, Inc. ("FlowHealth," "we," "us," or "our") provides AI-powered patient communication services to medical practices, including our AI receptionist, Emma. This Privacy Policy describes how we collect, use, and share information when you visit flowhealth.ai (the "Site"), request a demo, or otherwise interact with us as a prospective or current business customer.

This policy covers our public website and sales interactions. The patient communication services we provide to healthcare practices are governed by our agreements with those practices, including business associate agreements where applicable — see "Patient information and HIPAA" below.

When you fill out a form on the Site — for example to book a demo or request a call from Emma — we collect the information you submit, such as your name, email address, phone number, practice name and website, the EHR/EMR system you use, and how you heard about us.

If you request a call, our AI assistant will call the phone number you provide. Like the calls Emma handles for practices, these calls may be recorded and transcribed so we can follow up on your request and improve our services.

We also collect information you share when you email us, call us, or communicate with us in any other way.

Like most websites, we and our service providers use cookies and similar technologies to collect information about your visit — such as your IP address, device and browser type, the pages you view, how you found us (including campaign parameters and advertising click identifiers), and how you interact with the Site.

We use analytics and marketing tools for this, which currently include Google Analytics, Microsoft Clarity (session analytics such as heatmaps and session replays), HubSpot, and visitor-identification and advertising measurement services. We use Google reCAPTCHA to protect our forms from spam; your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

We use the information we collect to: respond to your inquiries and provide demos; provide, maintain, and improve our services and the Site; communicate with you about our products, including marketing communications you can opt out of at any time; measure the effectiveness of our marketing and advertising; and protect the security and integrity of the Site and our business.

We do not sell your personal information. We share information with service providers who help us run our business — such as website hosting, analytics, customer relationship management, scheduling, and communications providers — who are permitted to use it only to provide services to us.

We may also disclose information when required by law or legal process, to protect the rights, safety, or property of FlowHealth or others, or in connection with a merger, acquisition, financing, or sale of all or part of our business.

The Site is intended for healthcare practices and their staff, not for patients. Please do not submit patient information or any other protected health information (PHI) through the Site.

When FlowHealth handles patient communications on behalf of a healthcare practice, we do so as a service provider to that practice under our service agreements, including business associate agreements where required by HIPAA. Patients with questions about how their information is handled should contact their healthcare provider directly.

You can control cookies through your browser settings, including blocking or deleting them, though parts of the Site may not function properly without them. You can opt out of Google Analytics with Google's browser add-on, and manage personalized advertising through your ad platform settings.

To opt out of marketing emails, use the unsubscribe link in any message or contact us at the address below.

We keep personal information for as long as we need it for the purposes described above — for example, for the duration of our relationship with you or your practice and as needed to comply with legal obligations — and then delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights over your personal information — such as the right to access, correct, or delete it, or to opt out of certain processing. To exercise any of these rights, contact us using the details below. We will not discriminate against you for exercising your rights.

The Site is a business-to-business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date above. Material changes may also be communicated by email or a notice on the Site.