Privacy Policy

CureMed LLC (“we”, “us”, “our”) operates the website curemed.co and provides medical billing, revenue cycle management, credentialing, and related services to U.S. healthcare practices. This privacy policy explains how we handle information collected through our website and business relationships.

Information We Collect

Information you provide directly

When you submit our contact form, request a demo, or communicate with us via email, we collect the information you provide, which typically includes:

• Name and title
• Practice or company name
• Work email address
• Phone number
• Practice specialty and size
• Any details you share about your billing needs

Information collected automatically

When you visit our website, we may collect standard log information including IP address, browser type, pages visited, and referring website. We use this for website analytics and improving user experience.

How We Use Your Information

We use the information you provide to:

• Respond to your inquiries and communicate with you about our services
• Provide the medical billing and RCM services you engage us for
• Send you information about our services when you request it
• Comply with legal obligations and enforce our agreements

We do not sell your information. We do not share your business contact details with third parties for their marketing purposes.

Protected Health Information (PHI)

When we provide medical billing services under a signed Business Associate Agreement (BAA), we handle Protected Health Information (PHI) in accordance with HIPAA and applicable state laws. Our contact form and website are for business inquiries only and are not intended to collect PHI. Please do not include patient names, dates of birth, medical record numbers, or other patient identifiers in your website submissions or general business emails.

Security

We use industry-standard technical and organizational safeguards to protect your information, including HTTPS encryption for our website, access controls, secure infrastructure hosted on HIPAA-eligible AWS services, and staff training on privacy and security. No system is completely secure, but we take our responsibility seriously.

Third-Party Services

We use certain third-party services to operate our business, including:

• Amazon Web Services (AWS) for hosting and infrastructure
• Google Workspace for business email
• Formspree for handling website contact form submissions

These providers have their own privacy policies and data handling practices. We select providers who meet or exceed our security standards.

Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of marketing communications at any time

To exercise any of these rights, reach out through our contact page.

Retention

We retain your business contact information as long as we maintain a business relationship with you, and afterward as required by applicable law or for legitimate business purposes.

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will provide additional notice.

Contact Us

If you have questions about this privacy policy or our data practices, contact us at: