Privacy Statement


1. IntroductionUnhush Global Inc. (“Unhush”) is committed to protecting the privacy of its users. This Privacy Statement outlines Unhush's practices regarding the collection, use, and sharing of personal information through its website, https://un-hush.com/, and platform, https://www.app.un-hush.com, (collectively, the “Services”). We recognize that information privacy is an ongoing responsibility, and we will update this Privacy Statement as necessary to reflect changes in our data practices or to comply with applicable legal requirements.

2. Data Protection Officer
Unhush has appointed a Data Protection Officer (DPO) responsible for overseeing questions related to this Privacy Statement and our data protection practices. If you have any questions or concerns about how your personal information is handled, please contact our DPO:Prairna Kumarprivacy@un-hush.com

3. Collection and Use of Personal Information
Information We Collect
Unhush collects personal information necessary for the provision of its services. This includes, but is not limited to:
For Providers:
Name
Contact information (email, phone number, address)
Payment information (credit card details)
Session data (client name, session date, time, duration, price, mode, and notes)
For Clients/Patients:
Name
Contact information (email, phone number, address)
Session preferences and data
How We Collect Information
We collect personal information directly from Providers when they enter it into our web portal, app.un-hush.com, for both their own use and on behalf of their Clients/Patients.

4. Use of the Unhush Website
Like most websites, Unhush collects certain information automatically through the use of log files, including IP addresses, browser type, and operating system. This information helps us improve our website and services. We use this data for website analytics, troubleshooting, and to enhance user experience.

5. Cookies and Tracking Technologies
Unhush uses cookies to improve your experience on our website. Cookies help us recognize you as a returning user and maintain your logged-in state. You may adjust your browser settings to manage or disable cookies; however, this may impact your ability to use certain features of our site.

6. Use of Unhush Services
Unhush processes personal information to provide mental health practitioners with AI-generated session notes. This information is stored securely and is accessible only to authorized personnel. Providers are responsible for ensuring that they have obtained necessary consents from clients before using our services.How We Use Your InformationWe use the information collected for the following purposes:Session Notes for Providers: Including progress notes and clinical decision support analytics (e.g., Risk Assessment, Mental Status Examination).
Session Notes for Clients/Patients: Including summaries, therapeutic recommendations, and progress metrics.
Analytics Dashboard: For Providers to view business performance and session history.
Client Communication: To share reviewed and approved session notes with Clients/Patients via email.Process payments


7. Sharing Information with Third Parties
Unhush may share your personal information with third-party service providers (e.g., cloud storage, payment processors) who assist in delivering our services. These third parties are bound by strict data protection agreements and may only use your information as instructed by Unhush.We may also disclose personal information as required by law, to enforce our agreements, or to protect the rights, safety, or property of Unhush, our users, or others.We share personal information with third parties based on the principle of least access, only as necessary for our business purposes:Cloud Service Providers: AWS and Google Cloud for data storage and processing.
Payment Processor: Stripe for handling payment transactions.
Contractors: Hired for technical and product development.
Legal Authorities: As required under HIPAA obligations or other legal requirements.
Unhush does not sell personal information to third parties and only shares it with service providers as necessary to deliver our services.

8. International Data Transfers
Unhush is headquartered in the United States. Personal information collected through our platform is processed in the U.S. By using our services, you acknowledge and consent to the transfer and processing of your data in the United States.

9. Data Subject Rights
You have the following rights regarding your personal information:
Right to Be Informed: About how your data is collected and used.
Right of Access: To request access to your data.
Right to Rectification: To amend or update inaccurate or incomplete data.
Right to Erasure: To request the deletion of your data.
Right to Restrict Processing: To temporarily or permanently stop the processing of your data.
Right to Object/Withdraw Consent: To object to data processing in certain circumstances.
Right to Data Portability: To receive a copy of your data in electronic format.
Right Not to Be Subject to Automated Decision-Making: Including profiling.You can exercise these rights through our web portal, website, or by contacting us at privacy@un-hush.com.

10. Security of Your Information
Unhush takes the security of your personal information seriously. We employ industry-standard measures to protect your data, including encryption, access controls, and regular security assessments. Despite these efforts, no system can guarantee absolute security. We encourage you to take steps to protect your own information, such as using strong passwords and securing your devices.How We Protect Your InformationWe employ various security measures to protect your personal information:Not sharing PII with the AI model for processing the summariesAnonymizing the session recordingsEncrypting data at rest and in transit.Limiting access to data only to necessary personnel and systems.Using HIPAA-compliant services with signed Business Associate Agreements with all subcontractors.Regularly reviewing security compliance with all service providers.24/7 monitoring of cloud systems for risk detection.Using updated software, antivirus, and MDM monitoring on all devices.Conducting annual external audits for SOC 2 and HIPAA compliance.Maintaining detailed logs of data access and usage.Daily data backups.

11. Data Storage and Retention
Unhush retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Statement or as required by law. Session recordings used to generate notes are deleted immediately after transcription. Other session data is retained for at least as long as the client contract continues, that is, until the client or the company initiates a request to delete or the company finds it necessary to delete such data. The Providers, or the Covered Entity under HIPAA, is fully responsible for abiding by all data retention requirements required by law, and does not hold us responsible for failing to retain client records as required.

12. Children's Privacy
Unhush does not knowingly collect personal information from children under the age of 13. If we become aware that we have collected such information, we will take steps to delete it as soon as possible. If you believe that we might have any information from or about a child under 13, please contact us at privacy@un-hush.com.

13. Changes to This Privacy PolicyWe may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

14. Disclaimer
Unhush uses artificial intelligence algorithms to generate session notes. While we strive for accuracy, these notes are not guaranteed to be free from errors. Providers are responsible for reviewing and approving all notes generated by Unhush. Unhush is not an Electronic Health Record (EHR) system and should not be relied upon as a legal record.

15. Questions, Concerns, or Complaints
If you have any questions, concerns, or complaints about this Privacy Statement or our data practices, please contact us at:
Unhush Global Inc.8 The Green Ste ADover, KentDE - 19901privacy@un-hush.com


This Privacy Statement was last updated on Sep 1, 2024.