AuricWell

AuricWell Privacy Policy

Effective October 5, 2026 · Version 2026-10-05.1

How AuricWell handles information on its website, forms, accounts, and communications.

1. Who this policy covers

AuricWell is operated by Plot Twist Co. We provide technology and operational services. Participating organizations are responsible for the professional services they provide, their users’ access, their instructions to us, and their own privacy notices and consents. We do not become your treating provider by hosting an account, form, or message.

This policy applies to AuricWell's own services and its use of the platform. It does not combine the privacy practices of independent participating organizations or authorize them to contact you. A treating provider’s HIPAA notice governs its protected health information. Reading a policy does not authorize a medical-record disclosure or enroll you in SMS.

2. Information processed

  • Information you provide, such as name, contact details, account details, service requests, forms, messages, representative information, signatures, payment-related information, and communication choices.
  • Information provided by an organization or an authorized person to administer services, accounts, employment, enrollment, or participation. Depending on the service, this may include sensitive information, education records, or health information.
  • Technical information such as IP address, browser and device information, sign-in and security events, timestamps, pages or features used, and diagnostic logs. Communication data includes message contents, delivery status, consent choices, withdrawals, and related audit evidence.
  • Information from integrations you or your organization authorize. The available integration, account permissions, and your choices determine which information is received.

3. How information is used

We use information to respond to requests; operate accounts and services; support scheduling, enrollment, communications, billing, and administration; verify identity and authority; maintain records; provide support; detect misuse; and satisfy legal obligations.

When processing records on behalf of an organization, we act under its authorized instructions and applicable agreements. We may also process information for our own account administration, security, support, and other disclosed operational purposes. An organization’s records are not permission for our independent advertising.

Optional promotional messages require the consent applicable to that communication. Agreement to reminders, support, or workforce communications does not authorize promotions.

4. Access and disclosure

Authorized staff, administrators, and service providers may access information needed for their work. Support requests and messages may be handled by an authorized team, rather than a single named person.

Vendors may process information for functions such as hosting, messaging, payment processing, security, or support. Appropriate contractual limits and a business associate agreement are required where HIPAA requires them. A vendor’s access does not authorize its independent marketing.

We may disclose information with your authorization, to provide the requested service, or as permitted or required by applicable law. We evaluate legal requests and applicable confidentiality restrictions. A referral, shared technology platform, or affiliation is not blanket permission to share confidential records with every organization.

We do not sell personal information or share mobile information or SMS opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Messaging vendors and carriers may process what is needed to deliver messages and honor opt-outs on behalf of the sender. Consent is not transferred between brands.

A change of ownership or service provider remains subject to privacy obligations and does not convert existing consent into permission for unrelated marketing.

5. Text messages and your choices

A program’s consent form identifies its sender, purpose, and choices. Choosing Yes or No may be required, but Yes is never required to obtain services or make a purchase. Where we use a Yes/No form, neither choice is preselected. You can decline every optional SMS purpose.

Providing a phone number, accepting website terms, signing an unrelated waiver, or acknowledging a privacy notice does not itself enroll you in recurring SMS. Marketing requires a separate affirmative choice. Reply STOP to opt out of the sending program, or HELP for assistance. Contact the organization to request broader withdrawal or another way to communicate.

Ordinary text messages can be visible on lock screens, shared devices, and carrier systems. Do not use them to send sensitive records. Stopping texts does not necessarily erase records we must retain, including evidence needed to honor your opt-out.

SMS terms

6. Browser storage and other services

Cookies, local storage, and similar technology support sign-in, preferences, security, and site operation. Technical logs help diagnose performance or reliability problems. Blocking browser storage may prevent features from working.

External links, maps, videos, payment services, and integrations have their own terms and privacy practices. Connecting to an external service may disclose technical information to it. We do not authorize advertising vendors to independently market using patient information or SMS consent.

7. Safeguards, retention, and automated tools

We use administrative, technical, and physical safeguards appropriate to the service and information. No system is completely secure. Protect your account and notify the organization of suspected unauthorized access.

Retention depends on the record, service, legal and professional obligations, contracts, and any legal hold. Closing an account or deleting a working copy does not guarantee immediate removal from every record, log, or backup. Requests are evaluated under the law that applies.

Automation or AI-assisted functions may support administrative or documentation workflows. Authorized people remain responsible for reviewing outputs and making professional decisions. This policy does not authorize session recording, unrestricted AI use, or training a general-purpose AI model on health information. Recording and other sensitive uses require the notices, consents, and safeguards applicable to them.

8. Privacy requests and representatives

Contact us to request access, correction, or deletion where applicable; withdraw optional consent; ask about retention; or raise a privacy concern. We may verify identity and authority. Some records must be retained, and some rights are exercised through the organization that controls the record. We explain a denial and any applicable appeal or review process.

Parents, guardians, and other representatives may act only within their authority. Confidential services for minors and different categories of health or education records may have different access rules. We do not assume a parent may access every record.

Where we process records on behalf of another organization, we assist or direct your request to that organization as appropriate. A complaint or valid privacy request does not waive other rights.

9. Policy updates

Revisions are posted with their effective date. Additional notice or consent will be provided when required. An update does not retroactively expand a prior messaging consent or authorization.

Questions, privacy requests, and help

AuricWell — Plot Twist Co. Privacy contact: Michael Mendez. For privacy requests and assistance: HQ@plottwistco.com or 833-756-8894.

Please provide your contact information and the type of help you need. Do not include detailed medical records, passwords, or financial account information in an ordinary email or public inquiry. We can arrange an appropriate way to exchange sensitive information.

Email privacy questions

Call for assistance

Contact AuricWell