Skip to content
Heepsters

Effective May 5, 2026

Privacy Policy

This Privacy Policy explains how Heepsters Creative LLC ("Heepsters," "we," "us") handles information collected through heepsterspractice.com and the Heepsters Practice application (the "Service"). Protected Health Information (PHI) processed inside the Service under an executed Business Associate Agreement (BAA) is governed by that agreement, not this policy.

1. What we collect

  • Account data: name, email, practice name, role.
  • Usage data: pages visited, features used, anonymized device and browser metadata.
  • Lead data: info you submit on the demo or signup forms.
  • Cookies: strictly-necessary cookies for auth and session. Optional analytics cookies require consent.

2. How we use it

  • To run, secure, and improve the Service.
  • To respond to demo requests and support customer onboarding.
  • To send transactional email (account, billing, security).
  • To send marketing email — only if you opted in. You can unsubscribe at any time.

3. PHI handling

PHI placed into the Service by a Covered Entity is handled under the applicable executed agreements and configured deployment controls. Product controls include staff MFA, role-based access, row-level data rules, audit trails, and consent gates. See Security & controls for the current product overview.

4. Sharing

We share data only with subprocessors necessary to operate the Service (cloud hosting, transactional email, payments, customer support tooling). The current vendor disclosures and contractual requirements are reviewed during onboarding. We do not sell personal data.

5. Your rights

You can request access, correction, export, or deletion of your account data by emailing privacy@heepsterspractice.com. For PHI, requests are handled by your Covered Entity per HIPAA.

6. Retention

Marketing leads are retained for 24 months unless you ask us to delete sooner. Customer and account data retention follows the applicable agreement, configured retention policy, and legal requirements.

7. Children

The Service is for clinical professionals and is not directed to children under 13. We don't knowingly collect data from children directly.

8. Changes

We'll post updates here and notify account holders via email at least 14 days before material changes take effect.

9. Contact

Privacy questions: privacy@heepsterspractice.com
Heepsters Creative LLC · Provo, Utah