Draft pending legal review: bracketed items are still to be completed.
Privacy Policy
Akeso Health, LLC · [Mailing address — to be added] · Effective [Effective date — to be added]
This policy describes how Akeso handles information in Akeso AI.
1. Who we are
Akeso Health, LLC ("Akeso") operates Akeso AI. This policy explains what information we handle and why. When we process patient information for a practice, we act as that practice's business associate under HIPAA, and the Business Associate Agreement governs that data; the practice's own notice of privacy practices governs its patients' rights.
2. Information we collect
Account information: name, work email, role, practice name, NPI and credential details. Customer Data: documents, case records and reference codes your staff submit, which may include PHI. Technical and security data: sign-in attempts, IP address, device and browser details, audit-log entries, and error logs. Public-site activity: anonymous page-view and click events on public pages. Communications: messages you send us, including demo requests.
3. How we use information
To provide and support the service; to draft and track appeals and authorizations; to authenticate users and prevent abuse; to maintain the audit ledger; to meet legal obligations; and to maintain and improve reliability and security. We do not sell personal information or use Customer Data for advertising.
4. AI processing
Documents may be processed by AI engines to produce drafts. Where the redaction feature is used, direct identifiers are replaced in your browser before leaving your device. Customer Data is not used to train AI models, and inference is configured not to retain prompts or outputs where the provider supports that setting. Our engines and subprocessors are listed on the Security page.
5. How we share information
We share information only with: subprocessors that help us run the service under written agreements (including BAAs where PHI is involved); destinations your practice approves, such as payer fax numbers or portals; professional advisers under confidentiality; and authorities where required by law or to protect safety and rights. If Akeso is acquired, data may transfer under the same protections.
6. Retention
Audit-ledger records are retained for six years to support HIPAA documentation requirements. Other Customer Data is kept while your workspace is active and for a reasonable export period after termination, then deleted or returned as your agreement requires. Backups roll off on a regular cycle.
7. Security
We use encryption in transit and at rest, role-based access, row-level security, rate limiting, idle-session locking and an append-only audit ledger. No method is perfectly secure. Report vulnerabilities as described on the Security page.
8. Your rights and choices
Practice administrators can manage staff access and request export or deletion of workspace data. Individuals may ask us to access, correct or delete personal account information, subject to legal limits. Requests about patient records should go to the treating practice, which controls that data; we will help it respond. You may opt out of non-essential communications at any time.
9. Cookies and similar technologies
We use browser storage and cookies needed for sign-in, security and language preference, and simple first-party usage events on public pages. We do not use third-party advertising trackers.
10. U.S. service and children
The service is intended for U.S. healthcare organizations and is not directed to children. We do not knowingly collect information from anyone under 13 outside of patient data submitted by a practice.
11. Changes
We will post updates here with a new effective date and notify account administrators of material changes.
12. Contact
Akeso Health, LLC, [Mailing address — to be added]. Privacy questions and requests: [Privacy email — to be added].