This Privacy Policy explains how Besti Co. ("we," "our," or "us") collects, uses, and protects information through Besti Health. We are committed to maintaining the highest standards of privacy and security for Protected Health Information (PHI) and personal data in compliance with HIPAA, HITECH, and all applicable privacy laws.
2. Information We Collect
Contact and Account Information:
Name, email address, phone number
Professional credentials and license information
Billing and payment information (processed securely by Stripe)
Clinical and Usage Data:
SOAP notes and clinical documentation created through our Service
Audio recordings (temporarily processed, never permanently stored)
PDF documents and forms uploaded by users
Usage analytics and performance metrics
Technical Information:
Device information (browser type, operating system, IP address)
Log files and error reports
Cookies and similar tracking technologies
3. How We Use Your Information
Primary Purposes:
Provide and improve the Service functionality
Generate clinical documentation and notes
Process billing and manage your account
Ensure security, compliance, and system performance
Secondary Purposes:
Conduct research and development to improve AI accuracy
Provide customer support and technical assistance
Comply with legal and regulatory requirements
Important: We never sell, rent, or share your data with third parties for marketing purposes.
4. Data Processing and AI Training
AI Model Training:
We may use de-identified, aggregated data to improve our AI models
No identifiable patient information is used in AI training
All training data undergoes rigorous de-identification processes
You may opt out of having your data used for model improvement
Data Processing:
Audio recordings are processed in real-time and immediately deleted after transcription
Only text transcripts and generated notes are retained
All processing occurs within HIPAA-compliant environments
5. Data Retention and Deletion
Retention Periods:
Clinical notes and documentation: Up to 30 days (or as specified by you)
Account information: Retained while your account is active
Backup data: Up to 90 days after deletion request
Your Control:
You may delete specific notes or all data at any time