PatientPreVue

PatientPreVue is a health information technology platform operated by Ryan Seifipour LLC (“we,” “us,” or “our”). We provide AI-assisted pre-visit intake, patient record management, and care coordination tools for healthcare providers and their patients.

We are not a healthcare provider, insurer, law firm, or covered entity as that term is used in HIPAA. We act as a Business Associate to healthcare providers who use our platform to process patient information. Professionals on the platform also include legal representatives and insurers or payers. When you use PatientPreVue independently of a healthcare provider, or submit a screener through a website widget, we handle your information directly under this policy and applicable state law.

Questions about this policy may be directed to: support@patientprevue.com

We use the information we collect to:

• Create and authenticate your account.
• Deliver platform features: assessments, AI-generated summaries, record management, provider-patient messaging, and referral coordination.
• Generate AI-assisted summaries of your health intake and make uploaded records, journal entries, and summaries searchable by you and the professionals you authorize. Our AI service providers process this information under contract and are not permitted to use it to train their models.
• Enable professionals to view and manage patient information for patients with whom they have an active, authorized connection, and deliver widget submissions to the clinic or firm that hosts the widget.
• Maintain HIPAA-required audit logs of all PHI access.
• Process subscription payments.
• Send transactional emails: account verification, password reset, and platform notifications. We do not send marketing emails. (A clinic or firm may send you promotional messages only if you opted in to them on its widget.)
• Detect and prevent fraud, abuse, and unauthorized access.

We do not sell your personal information or PHI to any third party. We do not use your health information for advertising purposes.

We do not sell, rent, or trade your personal information or PHI. We share information only in the following limited circumstances:

• With professionals you choose: patients’ assessment summaries, uploaded records, journal entries in the categories you make visible, exercise data, and messages are shared with the professionals the patient has connected with and authorized, including through referrals and record requests. You can revoke a connection or a document share at any time; this stops future access but does not undo past disclosures.
• Legal and insurance professionals: if you connect with a legal representative or an insurer or payer, information you share with them may no longer be protected by HIPAA after they receive it and may be redisclosed as the law and your agreements with them permit.
• Widget submissions: sent to the clinic or firm whose widget you used, which may contact you only by the methods you authorized.
• Service providers: we work with trusted third-party service providers to operate the platform, including cloud infrastructure, AI processing, payment processing, and email delivery. These providers are bound by contractual obligations to protect your data and, where required, have entered into HIPAA Business Associate Agreements with us.
• Legal requirements: we may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: if we are involved in a merger, acquisition, or sale of assets, information may be transferred subject to the same protections described in this policy and any Business Associate Agreements.

• Account data and health information: retained while your account is active and for at least 10 years after your account is deactivated, to meet medical record retention requirements (including Washington State law) and our obligations to the healthcare providers we serve.
• Uploaded files: retained with your account on the same schedule. Deactivating your account does not delete your files. A file you delete yourself is permanently removed from our systems.
• Widget submissions: retained on the same schedule as other records we hold for the receiving clinic or firm, and as required by law.
• Audit logs: retained for at least 6 years as required by HIPAA, and for the full account retention period where they form part of the record.

Deactivation is not deletion. While records are retained after deactivation, they stay encrypted, are hidden from search and new connections, and are not used for any new purpose. After the retention period ends, we securely delete or de-identify them.

Depending on your location and applicable law, you may have the right to:

• Access your data: request a copy of the personal information and PHI we hold about you.
• Correct your data: update inaccurate account information through your profile settings.
• Deactivate your account: you can deactivate your account in settings at any time. Patients can still sign in to download their records after deactivation. Records are retained as described in Section 6.
• Request deletion: you may ask us to delete information. We will delete information that we are not required to retain by law or by our obligations to healthcare providers, and we will tell you what we could not delete and why.
• HIPAA rights (patients): under HIPAA you have the right to access and obtain a copy of your PHI, request amendments, and receive an accounting of disclosures. Contact your healthcare provider or us at support@patientprevue.com to exercise these rights.

To exercise any of these rights, contact us at support@patientprevue.com. We will respond within 30 days.

We use only strictly necessary cookies, which the platform cannot work without, so we do not ask for cookie consent:

• accessToken / refreshToken: keep you signed in (secure, HTTP-only).
• csrfToken: protects your account from cross-site request forgery.
• authMode: tells the app you are signed in. It contains no personal information.
• Stripe and Cloudflare Turnstile: may set their own cookies during checkout and bot checks, for fraud prevention and security.

We do not use advertising cookies, third-party analytics (Google Analytics, Meta Pixel, etc.), or any tracking technology that shares your data with advertisers.

Individuals under 18 may not create accounts or use PatientPreVue themselves. A parent, legal guardian, or other authorized personal representative may use their own account to provide information about a minor in their care, and that information is protected like any other health information under this policy. If you believe a minor has created their own account, please contact us at support@patientprevue.com and we will close the account promptly.

Clinics and firms can embed a PatientPreVue screener on their own website or share it by QR code. If you use one, the clinic or firm named on the widget receives your submission and is responsible for how it follows up with you. We process your submission on its behalf, and if that clinic is a healthcare provider, we do so as its Business Associate. We never sell widget submissions or use them to market to you.

The clinic or firm may contact you only by the methods you authorized, and may send promotional messages only if you opted in. Reply STOP to opt out of texts, or contact the clinic or firm directly. Its own website’s privacy policy governs any information it collects outside our widget.

Washington’s My Health My Data Act protects “consumer health data” that is not covered by HIPAA. This can include health information you enter while using PatientPreVue independently, widget submissions, and information you share with legal or insurance professionals.

• What we collect and why: the categories in Section 2, used only for the purposes in Section 3 and to provide the features you request.
• Sources: you, the professionals you connect with, and documents you or they upload.
• Sharing: only as described in Section 5, and with professionals only when you choose to connect with them or grant access. Our service providers process data under contract on our behalf. We do not sell consumer health data.
• Your rights: to confirm whether we hold your consumer health data, access it, get a list of the third parties and affiliates we have shared it with, withdraw consent, and request deletion. Deletion requests are handled as described in Section 7.
• How to exercise them: email support@patientprevue.com. We respond within 45 days. If we deny your request, you may appeal by replying to our response, and if you are not satisfied with the appeal, you may contact the Washington State Attorney General.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and notify registered users by email for material changes. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions, data requests, or to report a concern:

This Privacy Policy was last updated on October 16, 2026. Prior versions are available upon request.