Privacy Policy

1. Introduction

Welcome to Matterform Media, Inc. DBA HIPAA for Humans ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect information when you use our chatbot integrated with Google Workspace and made available through the Google Workspace Marketplace.

2. Data Collection and Storage

• The chatbot processes user queries to provide responses based on internal policy documents.
• Query data is stored and may be accessed by Matterform and the user's employer for debugging, improvement, and compliance purposes.
• Users must not submit Protected Health Information (PHI) through the chatbot, as it is not designed or suitable for handling PHI.
• We use third-party providers such as Google Workspace, Google Cloud Platform, and OpenAI to power our chatbot. These providers have privacy and security measures that meet or exceed our standards.
• In compliance with Google Workspace Marketplace policies, we do not collect, store, or share user data beyond what is necessary to provide and improve our service. We will not use data for advertising or resell user information.

3. Security Measures

• All communications with the chatbot are encrypted.
• Access controls restrict who can view stored query data.
• We regularly review our security practices to ensure compliance with industry standards.
• We adhere to Google Workspace Marketplace security requirements, including protecting data in transit and at rest.

4. User Responsibilities

• Users are responsible for ensuring that no PHI is entered into the chatbot.
• Users should follow their organization's policies regarding the use of AI-powered tools.
• Users should review the permissions requested by our application before installation and usage.

5. Third-Party Services

• Our chatbot relies on third-party technology providers, including Google and OpenAI.
• We ensure that any third-party providers used have privacy and security protections at least as stringent as our own.
• This Privacy Policy will be updated accordingly if our technology partners change.
• In accordance with Google Workspace Marketplace requirements, we disclose any third-party services involved in data processing and ensure compliance with Google's policies.

6. Compliance with Google Policies

• Our application complies with all Google Workspace Marketplace policies and applicable data protection regulations.
• We do not engage in unauthorized data sharing or use data for marketing or advertising purposes.
• If Google updates its policies, we will make necessary modifications to ensure continued compliance.

7. Updates to This Policy

• We may update this Privacy Policy as necessary to reflect changes in technology, regulatory requirements, or our business practices.
• Users will be notified of significant updates as required by law.

8. Contact Information

For any privacy-related questions or concerns, please contact us at privacy@hipaaforhumans.com.