1. Scope and our role
This Privacy Policy describes how Auxo Health, Co. ("Auxo," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit auxohealth.co, request information, communicate with us, or use products and services that link to this policy (collectively, the "Services").
Healthcare organizations use Auxo to coordinate operational work across systems, maintain case context, and prepare actions for authorized review. When Auxo processes personal information, including protected health information ("PHI"), on behalf of a healthcare customer, that customer determines why and how the information is processed. In that context, Auxo acts as the customer's service provider, processor, and, where applicable, business associate. The customer's privacy notice and our contract with the customer govern that processing.
This policy does not replace a healthcare provider's Notice of Privacy Practices and does not give Auxo independent authority to use PHI for purposes unrelated to the Services.
2. Information we collect
Information you provide
- Contact and business information, such as name, work email, phone number, organization, role, and practice information.
- Account information, such as login identifiers, authentication details, permissions, and profile settings.
- Communications, including demo requests, support messages, feedback, survey responses, and meeting details.
- Commercial information, such as order details, subscription information, billing contacts, and transaction records. Payment-card information may be collected directly by our payment provider rather than Auxo.
- Candidate information, such as resumes, employment history, and information submitted in connection with a role at Auxo.
Information processed through the Services
At a customer's direction, the Services may connect to electronic health records, practice-management systems, payer portals, clearinghouses, email, fax, phone, document repositories, and other systems. Depending on the customer's configuration, Customer Data may include patient identifiers, contact information, appointment and referral information, insurance and benefit information, clinical documentation, claims, authorization records, remittance and payment information, correspondence, workflow history, and audit metadata.
Information collected automatically
We may collect IP address, browser and device type, operating system, referring pages, pages viewed, feature activity, timestamps, error records, security events, approximate location derived from IP address, and cookie or similar-technology identifiers. We use this information to operate, secure, troubleshoot, and understand the Services.
Information from other sources
We may receive information from your employer or healthcare organization, identity providers, integration partners, service providers, public business sources, and other parties you authorize.
3. How we use information
We use personal information to:
- provide, configure, maintain, support, and improve the Services;
- authenticate users, administer permissions, and protect accounts;
- connect authorized systems and carry case context across customer workflows;
- prepare, route, and present work for customer review;
- respond to inquiries, schedule demonstrations, and manage customer relationships;
- process orders and administer billing;
- monitor reliability, prevent fraud, investigate misuse, and protect the Services;
- comply with law, enforce agreements, and establish or defend legal claims;
- send service communications and, where permitted, marketing communications; and
- create aggregated or de-identified information that does not reasonably identify an individual.
Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, compliance with legal obligations, and consent. Our legitimate interests include providing secure business services, improving product performance, and communicating with current and prospective customers.
4. AI, PHI, and customer control
Auxo uses machine-learning and generative-AI capabilities to help organize information, identify next steps, and prepare work for authorized users. AI-generated material can be incomplete or incorrect. Customers and their authorized users remain responsible for reviewing outputs and deciding whether to approve, modify, or reject an action.
Auxo does not sell Customer Data or PHI. Auxo will not use Customer Data or PHI to train a general-purpose model for the benefit of other customers unless the customer has expressly authorized that use in writing. We may use de-identified or aggregated information to maintain, secure, and improve the Services when permitted by contract and applicable law.
Auxo is an operational technology provider. The Services are not a substitute for professional medical judgment and are not intended to independently diagnose or treat patients.
5. How we disclose information
We may disclose personal information to:
- Service providers and subprocessors that host, secure, support, analyze, or otherwise help us deliver the Services under contractual restrictions.
- Customer administrators and authorized users as directed by the customer organization that controls the account.
- Integration partners when needed to connect systems at a customer's direction.
- Professional advisers such as attorneys, auditors, insurers, and accountants who are subject to confidentiality obligations.
- Authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Services.
- Transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate protections.
- Other parties at your direction or with your consent.
We do not sell personal information or share it for cross-context behavioral advertising. If our practices change, we will update this policy and provide legally required choices.
6. Retention and security
We retain personal information for as long as reasonably necessary to provide the Services, satisfy customer instructions, comply with legal and contractual obligations, resolve disputes, maintain security, and enforce agreements. Retention periods depend on the type of information, the purpose of processing, and customer configuration. Customer Data is returned or deleted following termination as provided in the applicable agreement, subject to legal obligations and limited backup-retention cycles.
We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No system can guarantee absolute security. If you believe information has been compromised, contact us promptly.
7. Your rights and choices
Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of certain personal information, and to appeal a decision concerning a request. You may opt out of marketing emails using the unsubscribe link in the message. Browser controls can limit cookies, although some Services may not function correctly without essential cookies.
If Auxo processes your information for a healthcare customer, submit your request to that customer first. We will assist the customer as required by law and our agreement. We may verify your identity and may deny or limit a request where permitted by law.
State privacy disclosures
Residents of certain U.S. states may have additional rights concerning personal information. Auxo will not discriminate against you for exercising a privacy right. We do not use or disclose sensitive personal information for purposes that require a right to limit under applicable state law, except as needed to provide requested Services, maintain security, or as otherwise permitted by law.
8. Cookies and analytics
We may use essential cookies for security and site functionality and limited analytics technologies to understand website performance. We do not knowingly permit third parties to use PHI for advertising. Where required, we will request consent before placing nonessential cookies.
9. Children
The Services are intended for businesses and authorized workforce members, not for children to use independently. We do not knowingly collect personal information directly from children under 13 through our website. Patient information concerning minors may be processed only on behalf of a healthcare customer and subject to that customer's instructions and applicable law.
10. International transfers
Auxo is based in the United States. If personal information is transferred from another country, we will use a lawful transfer mechanism where required, which may include standard contractual clauses and supplementary safeguards.
11. Changes to this policy
We may update this policy as our Services and legal obligations evolve. We will post the updated version and revise the effective date. If required by law, we will provide additional notice of material changes.
12. Contact us
Questions or requests may be sent to hello@auxohealth.co.
Auxo Health, Co.