Overview & Commitment to Health Data Privacy
Ace 78 Technologies LLC ("Ace Health," "we," "us," or "our") is dedicated to protecting the privacy and security of patient Protected Health Information (PHI) and user personal data. This Privacy Policy describes how we collect, process, store, and safeguard data through our web applications, clinical portals, patient apps, ambient AI scribing services, and telephony integrations.
HIPAA Compliance & Business Associate Agreements (BAA)
Ace Health operates as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and Health Information Technology for Economic and Clinical Health (HITECH) Act. We execute binding Business Associate Agreements (BAAs) with all covered healthcare entities prior to provisioning access to patient data streams.
Data Encryption & Storage
All data in transit is encrypted using TLS. All data at rest is encrypted using AES-256 encryption. Ace Health data is hosted on Amazon Web Services (AWS), in the United States only.
Information We Collect
How We Use Your Information
- Help your clinic communicate with you and coordinate your care
- Facilitate AI-assisted voice and messaging features
- Support telehealth visits and messaging between you and your clinic
- Store and manage your medical records
- Improve app functionality and user experience
- Send appointment reminders and notifications
- Comply with legal and regulatory obligations
Third-Party AI and Automated Processing
Ace Health uses third-party artificial intelligence operated by OpenAI, Inc. when you engage AI-assisted features. Data is sent over encrypted connections. We do not sell your personal or health information to OpenAI.
Your Rights & Data Retention
Depending on applicable laws, you may have the right to access, correct, or request deletion of your personal information. If HIPAA applies, you may also request an accounting of disclosures or restrictions on certain disclosures.
We retain health and personal data as required by HIPAA, state medical record retention laws, and healthcare regulations. When no longer required, data will be securely deleted or de-identified.
Children's Privacy
Our Services are not intended for children under 13 without parental consent. If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete such information.
Website Cookies & Analytics
When you browse acehealth.site, we use Google Analytics to understand how our website is used, for example which pages are visited and how visitors found us. Google Analytics only runs if you choose Accept in the cookie banner. If you choose Decline, or make no choice, no analytics cookies are set.
Google Analytics uses cookies to tell visits apart. We never send protected health information, names or contact details to Google Analytics, and we remove private parts of page addresses (such as account setup links and checkout references) before any page address is shared.
Your choice is saved in your browser so we don't ask again. You can change it at any time with at the bottom of every page, or by clearing your browser's site data. This section covers our public website, acehealth.site.
Contact Our Privacy & Compliance Officer
If you have questions regarding this Privacy Policy, your rights under HIPAA, or our compliance posture, please contact our Data Protection Officer: