Privacy Policy

HIPAA Compliance

Tova Health, Inc. is fully HIPAA compliant. We maintain strict administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of all protected health information (PHI) that we process on behalf of our customers. We enter into Business Associate Agreements (BAAs) with all covered entity customers.

Information We Collect

We collect information that you provide directly to us, including:

• Contact information (name, email, phone number, practice name)
• Practice information (size, specialty, location)
• Communications you send to us
• Information provided through our demo request form

For customers using our products, we process data as outlined in our Business Associate Agreement and service terms, including patient interaction data necessary to provide our AI-powered services.

How We Use Your Information

• To provide and maintain our services
• To respond to your inquiries and demo requests
• To send you relevant product information and updates
• To improve our products and services
• To comply with legal obligations

Data Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, access controls, audit logging, and regular security assessments. All data is stored in SOC 2 compliant infrastructure within the United States.

Data Retention

We retain your information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted in accordance with our data retention policies.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications
• File a complaint with a supervisory authority

Third-Party Services

We do not sell your personal information to third parties. We may share data with trusted service providers who assist us in operating our platform, subject to strict confidentiality obligations and, where applicable, Business Associate Agreements.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@tovahealth.com.