HIPAA Compliance

What is HIPAA?

The Health Insurance Portability and Accountability Act is a United States act that was created primarily to modernize the flow of healthcare information, stipulate how personally identifiable information maintained by the healthcare and healthcare insurance industries should be protected from fraud and theft, and address limitations on healthcare insurance coverage. 

How our products enable you to comply with HIPAA policies

The customer operates as the data controller, and Jivrus operates as a data processor. The customer is responsible for ensuring that the personal data of the subjects they collect is processed lawfully, and, similar to controllers, processors that process personal data on behalf of a data controller are expected to comply with HIPAA.

Data Collection

With HIPAA, we take explicit consent from email subscribers that they accept our terms and conditions and privacy policy. Any marketing emails include a visible unsubscribe link so that subscribers can click to instantly unsubscribe from all your future marketing communications.

Data Storage and Processing

Customers' data is stored in their Google account: inside Google Sheets, Docs, Gmail, Google Drive, or Google Forms. Our add-ons read the data directly from your data source and perform the necessary actions (like reading/writing on Sheets, sending emails, generating documents) without storing any transactional data on our servers.

We store and process user identification, plan subscription, quota, and usage analytics data in a Google Cloud database (us-central), and its servers are located in the United States (Central) data center.

We use Google’s logging infrastructure for error tracking and debugging. It includes stack traces, error messages, and logs.

We use PayPal, Stripe, or similar payment gateways to manage your payments. The payment processors only provide the customer’s email address, subscription details, and billing address for generating an invoice. We do not have access to any banking or credit card information of our customers.

Data Portability

We do not transfer, sell, make copies, or share any of your data processed by our products to third-party services or companies. We only store data that is absolutely necessary for our products to function.

Subscribers have all their information in their Google account: Google Sheets/ Docs/ Forms/ Drive. This allows for easier migration to other services.

Data Erasure (Right to be forgotten)

Subscribers can deactivate products and can permanently delete all their data from the database. You can also contact us to submit a deletion request and, in compliance with HIPAA, we’ll permanently delete all your data.

General

If the users uninstall a product, or revoke access to the products from your Google Account, the product will not be able to access any of your data and will instantly stop functioning.

Our products facilitate compliance with HIPAA for our users.  If users are dealing with their customers using our products, they need to practice complying with HIPAA with their customers' data.