Privacy Policy

At Stillwyn, we understand that you're trusting us with sensitive information about your practice and your clients. We take this responsibility seriously. This privacy policy explains how we collect, use, and protect your information.

Information We Collect

• Practice information you provide during signup and setup
• Client records and notes you create within Stillwyn
• Usage data to help us improve the platform
• Communication preferences and support interactions
• Billing information for subscription management

How We Use Your Information

• To provide and maintain the Stillwyn platform
• To process your transactions and manage subscriptions
• To customize Sage AI to your documentation style
• To provide customer support and respond to inquiries
• To send important updates about the service
• To improve our platform based on usage patterns

Data Security

We implement industry-standard security measures:

• 256-bit AES encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• HIPAA-compliant infrastructure and processes
• Regular security audits and penetration testing
• Role-based access controls with audit logging
• Automatic backups with point-in-time recovery

HIPAA Compliance

Stillwyn is built to be fully HIPAA compliant. We sign Business Associate Agreements (BAAs) with all practices and maintain strict policies for Protected Health Information (PHI).

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Export your data in standard formats
• Opt out of non-essential communications
• Know about any data breaches affecting you

Data Retention

We retain your data for as long as you maintain an active account. Upon account closure, we retain data for 7 years to comply with healthcare regulations, unless you request earlier deletion where legally permissible.