Privacy Policy

1. Introduction

Arintra, Inc. ("the Company," "we," "us," or "our") operates arintrahq.com and the Arintra AI medical coding platform. The platform reads completed clinical chart notes, assigns CPT codes and ICD-10 diagnoses, and returns results to a clinic's EHR. This Policy describes website information we collect, its use, and your choices.

When a clinic customer sends patient chart content to the Arintra coding API, the clinic and the Company handle it under a Business Associate Agreement consistent with the Health Insurance Portability and Accountability Act. API clinical data is outside this website Policy. See our Security and Compliance page for HIPAA-related technical controls.

The Company is based at 440 North Wolfe Road, Suite 100, Sunnyvale, CA 94085 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly:

• Contact details, including name, email, and phone, from forms, early-access requests, or outreach;
• Practice details you choose to provide, such as name, specialty, provider count, and EHR platform, to help assess product fit;
• The messages you send us.

We do not collect patient-identifying information through the website. It serves practice administrators, billing managers, and clinical operations staff evaluating or using the product.

2.2 Information Collected Automatically

When you visit arintrahq.com, we automatically collect limited technical data:

• IP address and approximate city or region;
• Browser, operating system, and device class;
• Pages visited, referring URLs, time on page;
• Cookies and similar identifiers, see Section 5.

2.3 We Do Not Knowingly Collect Children's Data

arintrahq.com is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child provided information, contact [email protected] and we will delete it.

3. How We Use Information

We use collected information to:

• Answer inquiries and assess product fit for your practice;
• Run, maintain, and improve the website and Arintra platform;
• Send service updates and, where required with consent, marketing about the Arintra coding product and related features;
• Detect, investigate, and prevent fraud or abuse;
• Meet legal obligations.

Website submissions are not used to train machine learning models. We do not sell personal information for monetary value. If state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers, including hosting, email delivery, and analytics vendors, that act for us under contractual confidentiality terms;
• Authorities when required by law or to protect rights, safety, or property;
• A successor entity after a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

Cookies and similar technologies help operate the site, remember preferences, and measure usage. See our Cookie Policy for details and choices.

6. Data Retention

We keep personal information only as needed for these purposes, legal or accounting duties, and dispute resolution. Contact inquiries and early-access submissions remain while needed to assess fit and maintain the relationship, then are purged after 24 months of inactivity. Server access logs remain 90 days, then are aggregated. Clinical chart data sent through the coding API is processed in transit and not retained after the coding session; the applicable Business Associate Agreement governs the Company's retention obligations.

7. Security

Administrative, technical, and physical safeguards protect personal information. They include TLS 1.3 encryption in transit, encryption at rest, role-based access controls, and audit logging for access to customer and contact records. No system is perfectly secure, so absolute security cannot be guaranteed.

8. Your General Rights

Rights may include access, correction, deletion, and limits on certain processing, depending on your jurisdiction. Email requests to [email protected]. We respond within the period required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

In the past 12 months, we collected these categories under Cal. Civ. Code §1798.140: identifiers, including name, email, and IP; commercial information, including service inquiries and practice details submitted for early access; internet activity on arintrahq.com; and inferences from these categories for service improvement. We do not collect sensitive personal information from website visitors under Cal. Civ. Code §1798.140(ae).

9.2 Sources, Purposes, Disclosure

We receive this information from you and through automatic site instrumentation. We use it to operate and improve the Service, communicate with you, and meet legal duties. Disclosure is limited to contracted service providers and authorities when required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Email [email protected] with the subject "California Privacy Request" to submit a verifiable request. Provide enough detail to verify that you are the person whose information is requested. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

We may revise this Policy. Material changes will appear with a new "Last updated" date and, when appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: