Privacy Policy

Introduction

Healthcare Inspired LLC ("Healthcare Inspired," "HCI," "we," "us," or "our") operates the Inspired Compliance platform and website located at www.hcicompliance.com (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our Platform, or engage our services.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

Who We Are

Healthcare Inspired LLC is a healthcare consulting and compliance technology company headquartered in the United States. We provide:

• The Inspired Compliance software platform for healthcare compliance management, including policy management, compliance training, risk assessment, and corrective action tracking.
• Guided Compliance Support services delivered by independent consultants in the fields of medical coding, billing, auditing, credentialing, revenue cycle management, and compliance program development.
• Virtual and live educational programs for healthcare professionals.

For privacy inquiries, contact us at: privacy@healthcareinspiredllc.com

Information We Collect

Information You Provide to Us

We collect information you provide directly, including:

• Account registration: Name, email address, job title, organization name, phone number, and password when creating a Platform account.
• Organization profile: Healthcare organization type, specialty, number of staff, tax identification (where required for billing), and billing address.
• Service requests and intake forms: Information submitted through our demo request, concern reporting, or service intake forms.
• Compliance content: Policies, audit findings, corrective action plans, training records, and other compliance documentation that you or your staff upload or create within the Platform.
• Communications: Emails, support messages, and other communications you send to us.
• Payment information: Billing and payment card details, which are processed by our third-party payment processor and are not stored directly on our servers.

Information Collected Automatically

When you use the Platform, we may automatically collect:

• Log data: IP address, browser type and version, pages viewed, referring URLs, date and time of access, and error logs.
• Device information: Hardware model, operating system, unique device identifiers, and mobile network information.
• Usage data: Features accessed, actions taken within the Platform, training module completion events, and session duration.
• Cookies and similar technologies: See our Cookies section for details.

Information from Third Parties

We may receive information about you from:

• Your employer or the organization that provisioned your Platform account.
• Single sign-on (SSO) providers or identity verification services, where applicable.
• Publicly available sources for business contact verification.

How We Use Information

We use the information we collect to:

• Provide and maintain the Platform — create and manage accounts, deliver compliance management features, process transactions, and provide customer support.
• Deliver consulting and educational services — schedule engagements, share deliverables, and track service hours against your organization's subscription.
• Communicate with you — send transactional emails (password resets, MFA codes, onboarding), service updates, invoices, and, with your consent, marketing communications about new features and services.
• Improve the Platform — analyze usage patterns, troubleshoot issues, conduct product research, and develop new features. Analytical data is de-identified or aggregated where feasible.
• Ensure security and prevent fraud — detect and respond to unauthorized access, abuse, or violations of our Terms of Use.
• Comply with legal obligations — respond to lawful requests from regulatory authorities, enforce our agreements, and meet applicable record-keeping requirements.

We do not sell your personal information or use it to train third-party artificial intelligence models without your explicit consent.

How We Share Information

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

Service Providers

We engage trusted third-party vendors to support Platform operations, including cloud hosting, email delivery, payment processing, analytics, and customer support tooling. These vendors access information only as necessary to perform their services and are bound by confidentiality agreements.

Independent Consultants

Where your organization has subscribed to Guided Compliance Support, relevant account and engagement data may be shared with the independent HCI consultant assigned to your engagement. Consultants are bound by confidentiality obligations and applicable professional standards.

Your Organization

If your account is provisioned by your employer or another organization, that organization's designated administrators may have access to your account data, activity logs, and compliance records within the Platform. Platform administrators are responsible for the data governance policies of their organization.

Legal and Safety Disclosures

We may disclose information if we believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request.
• Enforce our Terms of Use or protect our rights, property, or safety.
• Protect the rights, property, or safety of our users or the public.

Business Transfers

In the event of a merger, acquisition, sale of assets, or reorganization involving Healthcare Inspired, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

HIPAA Notice

Healthcare Inspired may qualify as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) where our Platform is used in a manner that involves access to Protected Health Information (PHI) on behalf of a HIPAA-covered entity.

Where required:

• We will execute a Business Associate Agreement (BAA) with covered entities and their business associates prior to any access to PHI.
• PHI handled under a BAA is governed by HIPAA's Privacy Rule, Security Rule, and Breach Notification Rule.
• We implement administrative, physical, and technical safeguards consistent with the HIPAA Security Rule to protect the confidentiality, integrity, and availability of electronic PHI (ePHI).

Organizations that intend to store or process PHI within the Platform must contact us to execute a BAA before doing so. To request a BAA, contact: privacy@healthcareinspiredllc.com

Cookies & Tracking

We use cookies and similar technologies (local storage, session storage) to operate and improve the Platform. These fall into the following categories:

• Strictly necessary: Authentication sessions, CSRF protection, and user preferences essential to Platform operation. These cannot be disabled.
• Functional: Remember your theme choice, language settings, and layout preferences across sessions.
• Analytics: Aggregate, de-identified data about how pages and features are used. We use this information to improve the Platform. We do not use third-party advertising trackers.

Most browsers allow you to control cookies through settings. Disabling strictly necessary cookies may prevent you from logging in or using Platform features. We do not currently respond to "Do Not Track" browser signals, as there is no uniform standard for such signals.

Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of stored data at rest.
• Multi-factor authentication (MFA) options for Platform accounts.
• Role-based access controls limiting staff access to information necessary for their function.
• Regular security reviews and vulnerability assessments.
• Incident response procedures for potential data breaches.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at privacy@healthcareinspiredllc.com.

Data Retention

We retain personal information for as long as necessary to provide the Platform, fulfill the purposes described in this Policy, and comply with legal obligations:

• Active accounts: Data is retained throughout the term of your subscription and for a reasonable period thereafter to support account recovery or billing disputes.
• Compliance records: Policies, training records, and audit logs that your organization creates within the Platform are retained according to your subscription terms and applicable regulatory requirements. Healthcare organizations are responsible for ensuring their retention periods comply with applicable law (e.g., CMS conditions of participation, state medical records statutes).
• Deleted accounts: Upon written account termination request, we will delete or anonymize personal information within a reasonable period, except where retention is required by law or legitimate business interest.
• Aggregated/anonymized data: We may retain de-identified, aggregated data indefinitely for product improvement purposes.

Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a machine-readable export of your personal information.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Opt-out of marketing: Unsubscribe from marketing communications via the link in any email or by contacting us.

To exercise any of these rights, submit a written request to privacy@healthcareinspiredllc.com. We will respond within 30 days. Note that if your account was provisioned by your employer, certain requests may need to be directed through your organization's administrator.

California Residents

California residents may have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to correct, and the right to opt-out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA. To submit a California privacy request, contact us at the address below.

Children's Privacy

The Platform is intended for use by healthcare professionals and healthcare organizations, and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child has provided us personal information, please contact us at privacy@healthcareinspiredllc.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Provide notice within the Platform or by email to registered account holders for significant changes.

Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

Contact Us

For privacy questions, concerns, or to exercise your rights, contact:

For concerns related to HIPAA or your organization's compliance data, please also contact your organization's Privacy Officer or Compliance Officer.