Privacy Policy

Introduction

Paisan AI, LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

EDI File Processing & Your Data

Your EDI file contents are never uploaded. We do record the filename, size, SHA-256 fingerprint, envelope counts, and — for 837s — control numbers. The same facts are recorded when you continue as a guest. If the app crashes, a filename may appear in the crash report and is removed on a best-effort basis.

What stays in your browser

Viewing, parsing, splitting, anonymizing, validating, and exporting all run in your browser. The claim, remittance, eligibility, and acknowledgment contents — the segments and the patient data inside them — are not uploaded to us as the way we view or transform a file.

What we record about a file

When you open a file in the app, we store facts about it so you have a history. Continuing as a guest is not a privacy mode: the same facts are recorded.

• Filename, as it was on your disk
• File size
• SHA-256 fingerprint of the file
• How many interchanges, groups, and transactions it contains
• A count of validation issues (not the error text)
• For 837 claim files: interchange, group, and transaction control numbers

Derived filenames from split, anonymize, and export actions, plus matching counts, are recorded the same way. Closing or refreshing the browser clears the file from your session; it does not erase these records.

Crash reports

If the app crashes, an error report may go to our crash-reporting provider (Sentry). We strip identifiers and filenames from those reports on a best-effort basis. That is a floor, not a guarantee that a filename never appears. We do not send EDI file contents to Sentry as a feature of the app.

Enterprise Tier (Coming Soon)

Our upcoming Enterprise tier will offer advanced features such as AI-powered insights and clearinghouse integrations. These features require server-side processing, which means:

• EDI files will be securely transmitted to our servers for processing
• Data will be encrypted in transit and at rest
• We will implement appropriate safeguards for handling PHI
• Business Associate Agreements (BAAs) will be available for HIPAA-covered entities
• Enterprise customers will have additional data handling terms specific to their subscription

We will clearly indicate which features require server-side processing before you use them.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Contact us through our website forms
• Subscribe to our newsletters or communications
• Request information about our services
• Create an account or sign in (email address, including via Google or a one-time code)
• Engage with our services or products

This information may include:

• Name and contact information (email address, phone number, mailing address)
• Company information
• Job title and professional information
• Any other information you choose to provide

File facts

When you use the app, we record the file facts listed above (filename, size, SHA-256 fingerprint, envelope counts, and 837 control numbers), including for guest sessions.

Guest session information

If you continue as a guest, we may store browser and visit details: user agent, language, timezone, screen size, and referring page. Our servers add the IP address and country of the request.

Generator settings

If you save EDI generator settings, we store the trading-partner values you typed: submitter and receiver IDs and names, a contact name, phone, and email, and delimiter choices. These are settings you entered, not values read out of an uploaded file.

How We Use Your Information

We use the information we collect in the following ways:

• To respond to your inquiries and provide customer support
• To send you information about our services and updates
• To improve our website and services
• To communicate with you about projects and services
• To comply with legal obligations
• To protect our rights and prevent fraud

Disclosure of Your Information

We may share your information in the following situations:

• Service Providers: We may share your information with third-party service providers who perform services on our behalf
• Business Transfers: We may share or transfer your information in connection with a merger, acquisition, or sale of assets
• Legal Requirements: We may disclose your information where required by law or in response to legal process
• With Your Consent: We may share your information with your consent or at your direction

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot guarantee the absolute security of any information you transmit to us.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to object to or restrict processing
• The right to data portability

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings and other tools.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: