Algoricum Privacy Policy

Last updated: 06/12/2026

Algoricum, Inc. (“Algoricum,” “we,” “our”) values your privacy. This policy explains how we collect, use, and protect your information when you use our platform, applications, or services (the “Services”).

Our Services help healthcare clinics communicate with and reactivate their patients, including by sending SMS, email, and voice communications and by scheduling appointments on the clinic’s behalf.

If you are a healthcare provider using Algoricum, our handling of Protected Health Information (“PHI”) is also governed by our Business Associate Agreement (BAA).

Information We Collect

We collect only the data necessary to provide and improve our Services.

• Customer & Account Data: Clinic name, address, contact information, user credentials (name, email, role), and billing information.
• Patient & Lead Data: Information you input or import into the Services, including PHI as defined by HIPAA.
• Communications Content: The content of messages and calls sent or received through the Services on a clinic’s behalf, including SMS and email text, voice call audio and transcripts, and related metadata such as timestamps, delivery status, and phone numbers.
• Integration Data: Information from third-party services a clinic connects, such as Google Calendar availability and events, Calendly, and CRM or lead-capture tools.
• Website & Device Data: IP addresses, browser type, operating system, cookies, and related technologies for analytics and functionality.

How We Use Information

We use your data to operate, secure, and improve the Services. We do not sell personal data.

• Provide, maintain, and improve the Services.
• Send appointment, reactivation, and follow-up communications (SMS, email, and voice) to patients on a clinic’s behalf.
• Use automated systems and AI models to generate, personalize, and route these communications.
• Communicate updates, support, and new features.
• Process payments and manage subscriptions.
• For PHI: Deliver Services in compliance with HIPAA as your Business Associate.
• Create and use de-identified data for analytics, benchmarking, and product development (per HIPAA de-identification standards). We do not de-identify or repurpose Google user data for these purposes.

Patient Communications, SMS & Voice

We send communications to patients on behalf of clinics. The clinic is responsible for obtaining any patient consent required by law.

• Patients can opt out of text messages at any time by replying STOP. Message and data rates may apply.
• Voice calls placed or received through the Services may be recorded and transcribed to provide and improve the Services and to maintain a record of the conversation for the clinic.
• Communications are sent through trusted providers (see Subprocessors).

Automated Processing & AI

The Services use automated systems and third-party AI providers to generate, personalize, and route communications.

• AI providers process this content under contract solely to provide the Services.
• We do not use patient data, communications content, or Google user data to train generalized or foundation AI models.

Google User Data

When you connect Google Calendar, Algoricum requests access to your calendar availability (free/busy) and the ability to create and manage calendar events. We use this access only to:

• Read your availability so our assistant can offer real open times to your patients, and
• Create and manage appointment events on your calendar when a patient books.

We store the credentials needed to maintain this connection securely, and you can disconnect at any time from the Integrations page or through your Google Account settings, which revokes our access.

Algoricum’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized AI/ML models.

Data Sharing

We share information only with trusted partners or when legally required.

• Subprocessors: Service providers such as hosting, communication, and AI vendors (current list at followup.algoricum.com/subprocessors).
• Payment Processing: Card payments are processed by Stripe; we do not store full payment card numbers.
• Legal: As required by law, regulation, or legal process.
• Business Transfers: In connection with mergers, acquisitions, or sales.

We do not sell personal data or use it for cross-context behavioral advertising.

Security Measures

We implement industry-standard safeguards to protect your data.

• Encryption of PHI in transit and at rest.
• Role-based access controls.
• Ongoing security monitoring and audit logging.

Data Retention

We retain data only as long as needed to provide Services or comply with law.

• PHI is retained for the duration of our agreement with you.
• Upon termination, you may request return or secure deletion of PHI within 60 days unless legal retention applies.

Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your data.

• GDPR/UK GDPR: Access, rectification, erasure, or restriction of processing.
• CCPA/CPRA: Know, delete, correct, and limit the use of personal data, and opt out of sale or sharing (we do not sell or share personal data for cross-context behavioral advertising).

To exercise these rights, email privacy@algoricum.com. For patient data we process on a clinic’s behalf, please direct requests to the clinic; we will assist the clinic as its Business Associate.

PHI and HIPAA Compliance

When processing PHI, we do so only under HIPAA as your Business Associate.

• We comply with the HIPAA Privacy and Security Rules.
• A signed Business Associate Agreement (BAA) is provided to each Covered Entity before Services begin.

Cookies & Tracking

We use cookies to support functionality and improve Services.

• Maintain login sessions.
• Provide analytics on feature usage.
• Improve site performance.

We do not use cookies for advertising or cross-site tracking.

Breach Notification

If a security breach affects your data, we will notify you without unreasonable delay, and no later than 10 business days for PHI — significantly faster than the 60 days HIPAA allows.

Children’s Privacy

Our Services are not directed at children under 13. Patient information processed on a clinic’s behalf may relate to minors; that information is handled under the clinic’s direction and our Business Associate Agreement.

Updates to this Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notifications.

Contact Us

Algoricum, Inc. 1954 Airport Rd, Atlanta GA 30338 privacy@algoricum.com