DRAFT — PENDING COUNSEL REVIEW

Privacy Policy

1. Introduction

This Privacy Policy describes how Build.MD ("Build.MD," "we," "our," or "us") collects, uses, discloses, and protects information when you visit build.md, apply to work with us, or otherwise contact us. Build.MD operates as a technology and management services organization. Clinical services described on this site are provided by Access Plus Medical, P.C. ("APM"), a physician-owned corporation, or its affiliated providers — not by Build.MD.

2. Information we collect

Information you give us. When you apply or contact us, we collect what you submit: your first and last name, work email, business or practice name, the type of business, your estimated monthly patient volume, your launch timeline, and your description of what you are trying to solve. If you email us, we receive your email address and whatever you choose to include.

Information collected automatically. Like most websites, our hosting provider processes technical information needed to deliver the site, such as IP address, browser type, device information, pages visited, and referring URLs. We use a privacy-focused analytics service that reports aggregate traffic without cookies and without building advertising profiles.

This site is not for health information. The Build.MD website is not intended to collect or process Protected Health Information (PHI). Please do not submit patient or health information through this site. PHI is collected through APM's clinical workflows and is governed by APM's HIPAA Notice of Privacy Practices, not by this Privacy Policy.

3. How we use information

We use the information we collect to:

  • Respond to your application, inquiries, and requests
  • Provide, operate, and improve our site and services
  • Communicate with you about our products, services, and business updates
  • Understand how the site is used, in aggregate
  • Comply with legal obligations
  • Protect the security and integrity of our site and services

4. How we share information

We may share information in the following circumstances:

  • Service providers — vendors who help us operate the site and our business, such as web hosting, analytics, and email delivery, under appropriate confidentiality and security obligations
  • Affiliated entities — including Access Plus Medical, P.C. and Access Plus Health, P.B.C., subject to applicable confidentiality requirements
  • Legal compliance — when required by law, regulation, legal process, or governmental request
  • Business transfers — in connection with a merger, acquisition, financing, or sale of business assets
  • With your consent — for any other purpose disclosed at the time of collection

We do not sell personal information for monetary consideration.

5. Cookies and tracking

This site does not set advertising or tracking cookies, and our analytics are cookie-free. If that changes, we will update this policy.

6. Data security

We maintain administrative, technical, and physical safeguards designed to protect the information we collect, including access controls and encryption in transit. No system is perfectly secure, and we cannot promise absolute security.

7. Your rights

Depending on where you live, you may have rights with respect to your personal information, including:

  • The right to access, correct, or delete information we hold about you
  • The right to opt out of marketing communications
  • The right to data portability
  • The right to object to certain processing

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of information we collect, the right to delete information, and the right to opt out of sale or sharing. To exercise any of these rights, contact us using the details at the end of this policy.

8. HIPAA and Protected Health Information

Build.MD provides technology and administrative services to Access Plus Medical, P.C. and other affiliated clinical entities under appropriate Business Associate Agreements. PHI collected through clinical workflows is governed by APM's Notice of Privacy Practices, which is provided to patients at intake. This Privacy Policy applies only to information collected through this website.

9. Children's privacy

This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us so we can delete it.

10. International users

Build.MD's services are intended for users in the United States. If you access the site from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by notice through the site or direct communication.

Contact

Questions about this document can be sent to build.md@accessplushealth.com.