Privacy Policy

1. Information We Collect

We collect the following categories of information:

a. Information You Provide

• Name, email address, phone number, and company details (when signing up for demos, newsletters, or contact forms).
• Login credentials and authentication details for customer portals.
• Billing information (for subscription or payment processing).

b. Automatically Collected Information

• Device identifiers, browser type, operating system.
• IP address, geolocation, and usage patterns.
• Cookies, web beacons, and similar technologies for analytics and personalization.

c. Information from Third Parties

• Data from clearinghouses, payment processors, and integration partners (e.g., Availity, Trizetto, RingCentral).
• Business contact information from publicly available sources or partners.

2. How We Use Information

We use personal information to:

• Provide, operate, and improve BFLOW services.
• Process payments, verify identities, and secure accounts.
• Respond to inquiries, support tickets, and demo requests.
• Send system alerts, service updates, and policy changes.
• Comply with legal, regulatory, and compliance obligations (HIPAA, HITECH, GDPR where applicable).
• Conduct analytics and develop new features.

3. How We Share Information

We may share information with:

• Service Providers: For hosting, payment processing, analytics, and communications.
• Integration Partners: Clearinghouses, payors, and telephony providers as necessary to deliver services.
• Legal/Compliance: Where required by law, regulation, or government request.
• Corporate Transactions: In case of mergers, acquisitions, or asset transfers.

We do not sell your personal information.

4. Data Security

We implement administrative, technical, and physical safeguards, including:

• Multi-factor authentication (MFA).
• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls.
• Continuous monitoring and intrusion detection.

5. Data Retention

We retain information as long as necessary to:

• Fulfill contractual obligations.
• Support compliance and audits.
• Meet legal retention requirements.

Data is securely deleted or anonymized once retention requirements are met.

6. Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Opt out of marketing communications.
• Restrict or object to processing.
• Data portability requests.

Requests can be made by contacting privacy@bflowsolutions.com

7. Cookies and Tracking

Our website uses cookies to:

• Enable functionality (session management, secure login).
• Provide analytics (traffic, engagement, feature adoption).
• Support advertising and retargeting (where applicable).

Users can adjust cookie preferences through browser settings.

8. SMS/Text Messaging Services

BFLOW Solutions provides SMS/text messaging services on behalf of our customers (DME/HME providers) to facilitate patient communication, appointment reminders, delivery notifications, and other healthcare-related messages.

Consent and Authorization

We maintain verbal and/or written consent from our customers to send SMS messages on their behalf to their patients and business contacts. Our customers are responsible for obtaining proper consent from their message recipients in accordance with applicable laws and regulations, including the Telephone Consumer Protection Act (TCPA).

Message Types

• Appointment and delivery reminders
• Order status updates
• Resupply notifications
• Account and billing notifications
• Service-related communications

Opt-Out

Recipients may opt out of SMS messages at any time by replying "STOP" to any message. Standard message and data rates may apply. Message frequency varies based on account activity and service needs.

Proof of Consent

BFLOW Solutions maintains records of consent authorization from our customers, including the date, time, and method of consent (verbal or written). These records are retained in accordance with our data retention policies and are available upon request for compliance verification.

9. Children's Privacy

BFLOW's services are not directed to children under 16. We do not knowingly collect personal information from children.

10. International Users

For users outside the U.S., data may be transferred to and processed in the United States, where privacy laws may differ from your home jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Significant changes will be communicated directly where required.

12. Contact Us

If you have questions or requests about this Privacy Policy, contact us at: