This Privacy Policy (hereinafter referred to as the "Policy") governs your use of the Fetch service, a proprietary web-based application developed and managed by Eyetrepreneur, LLC, doing business as SpexBot, located in Kansas ("we," "us," or "SpexBot"). The Fetch service runs on the platform operated by GRUNTWRK, LLC ("GruntWrk"). This Policy outlines how we collect, use, and protect your data when you use our service.
SpexBot is committed to protecting your privacy. We work to keep the personal data you provide, or that is processed during your use of our service, confidential and secure.
Our service may process various types of information, either provided by you directly or collected automatically through your use of the service. This Policy details the types of data we collect, how we use it, and how we protect it. Section 1.6 explains which rules apply to protected health information.
By accessing or using the Fetch service (including any earlier version), you agree to the terms of this Policy. If you do not agree to these terms, please do not use the service.
SpexBot may update this Policy from time to time. We encourage you to review it periodically to stay informed about how we are protecting your data. Continued use of the service after an update takes effect indicates your acceptance of the revised terms. (Notice of significant changes is described in section 5.2.)
This Policy covers account, contact, billing, usage and website information. Protected health information ("PHI") that your practice sends to us or that we create for your practice, such as patient names, dates of birth, member IDs, and insurance eligibility and benefit results, is governed by the Business Associate Agreement among your practice, GRUNTWRK, LLC and SpexBot (the "BAA"), not by this Policy. If this Policy and the BAA conflict about PHI, the BAA controls. If you are a patient and have a question about your information, please contact your eye care practice, which is responsible for it.
The Fetch service is designed to store and process data on cloud servers managed by SpexBot and GruntWrk. We collect only the data necessary to provide and enhance the functionality of the service, ensuring a seamless user experience.
The types of data we may collect include:
This data is used to provide and improve the service.
We do not sell your personal information or PHI. We do not use PHI for advertising or marketing.
We record calls and video meetings with customers, including support, onboarding and sales calls, and we keep the recordings and transcripts. We use them to give you support and to improve and train our product and our team. Tell us at the start of a call or meeting if you do not want it recorded. Please do not discuss patients or share patient information on these calls. If a recording does contain PHI, the BAA governs it, and we use it only as the BAA permits.
Data collected by Fetch is used to deliver the service: to verify insurance benefits, to write results to your patient records where you have connected them, to provide support, to improve and train our product and our team, including from the recordings and transcripts in section 2.4, to bill you, to keep the service secure, and to meet legal requirements. We use this data to provide accurate search results and improve the service. PHI is used only as the BAA permits.
Fetch processes data securely on cloud servers. This allows us to manage and protect your data effectively. We use appropriate security safeguards for our data operations.
Users have control over their data within the platform, including options for managing and deleting their data, and they may ask us to return or export it as described in the Terms of Service and the BAA.
We share information with companies that help us run the service, and only as needed to do so. They are:
We require each provider that handles PHI to protect it as the BAA requires. We may also disclose information when the law requires it, to protect our rights in a way the BAA permits, or in a sale or transfer of our business, with notice to you where the law requires. PHI moves in a sale or transfer only as the BAA permits.
We keep account and billing information for as long as your subscription is active, and afterward for as long as tax, audit and legal rules require. We keep PHI as the BAA requires, and when your agreement ends we return or destroy it as the BAA describes.
Data processed by Fetch is stored on secure cloud servers. All data is encrypted at rest and in transit. We also keep audit logs of access and use individual user logins to protect your data from unauthorized access.
While we take strong measures to protect your data, users are also responsible for securing their accounts. This includes safeguarding login credentials, not sharing logins between staff, removing access for people who leave your practice, and using features like multi-factor authentication (MFA) to enhance security.
If we learn of a security incident that affects your data, we will notify you as the BAA and applicable law require.
Fetch may revise this Privacy Policy to reflect changes in our practices, technology, or legal requirements. All updates will be posted on this page.
We will notify users of significant changes to this Policy by email at least 30 days before they take effect, as well as through prominent notices on our website.
SpexBot and GruntWrk recognize the importance of complying with the Health Insurance Portability and Accountability Act ("HIPAA") where applicable. We comply with the HIPAA provisions that apply to us as a business associate, and we maintain the safeguards the BAA describes.
SpexBot and GruntWrk are each a Business Associate under HIPAA. After you purchase, we email a Business Associate Agreement among your practice, GRUNTWRK, LLC and SpexBot, which new customers must sign before setup begins and before sharing any PHI with us. If you use an earlier version of Fetch or hold a Lifetime Subscription, we also send you the agreement, and you must sign it when we send it. The agreement outlines the responsibilities of the parties in handling protected health information.
You can ask us to access, correct or delete the personal information in your account, subject to the BAA, our legal obligations and our retention period in section 3.5. We will respond promptly. Requests about PHI should go to your practice, which will tell us what to do under the BAA.
Some states give residents additional rights over their personal information. Where a state law gives you a right that applies to the information we hold about you, contact us as described in Article 8 and we will honor it.
Fetch encourages open communication regarding any concerns or questions about our Privacy Policy or data practices.
For inquiries, please contact our support and compliance team at perry@spexbot.com. We are committed to providing timely and thorough responses.
We welcome your feedback to help us improve our services and policies. Your input is invaluable in helping us maintain strong standards of privacy and user satisfaction.