Privacy Policy

Overview

PolicyChanges (“we,” “us”) helps healthcare providers monitor insurance payer policy changes. This policy explains what information we collect, how we use it, and the choices you have. We designed our product to need as little personal information as possible.

What we collect

• Account information: your name, email, and organization name when you register.
• Monitoring preferences: the states, specialties, and payers you choose to follow.
• Optional screening roster fields: names, organization names, NPI, date of birth, state, and optional address, city, ZIP, specialty, role, external ID, and employment dates that you provide for exclusion screening. Optional SSN and EIN values are encrypted individually and are never used for matching. The API returns masked last-four digits and presence flags, never full stored identifiers. CSV uploads are parsed into roster records; we do not retain the original upload file as a separate document.
• Usage data: pages viewed, searches run, and alerts opened, to improve the product.
• Billing details: handled by our payment processor; we do not store full card numbers.

How we use data

We use your information to deliver the service: to run your saved searches, send the email digests you request, provide AI search and chat, run the OIG screening workflow, and maintain your account. AWS Bedrock processes AI search and chat requests. Jev classifies guided page intent from the page context and minimal text needed for that classification. OIG screening summaries are emailed at most once every seven days. We also use aggregated usage data to understand which features help providers most.

Sharing & disclosure

We do not sell your personal information. We share data with the service providers that operate the product: AWS Bedrock for AI search and chat, Amazon Cognito for account authentication, Amazon SES for transactional and requested digest email, Jev for guided page-intent classification, and Stripe for checkout and subscription billing. We disclose information where required by law.

Security

We protect your data with encryption in transit and at rest, access controls, and routine security review. Optional SSN and EIN values are encrypted per value, never used to produce a match. The API returns masked last-four digits and presence flags, never full stored identifiers. CSV uploads are parsed into roster records and the original files are not retained. No method of transmission is perfectly secure, but we work to protect your information using practical safeguards.

Your rights

You can update account preferences in Settings and export screening evidence with a subscription. Contact support for other account-data access or correction requests. To request account deletion, open Settings, choose Danger zone, and email support using the “Request account deletion” link. Our team handles the request and confirms the scope and timing with you.

Contact

Questions about this policy? Email privacy@policychanges.app.