1. Who this policy covers
AuricWell is operated by Plot Twist Co. We provide technology and operational services. Participating organizations are responsible for the professional services they provide, their users’ access, their instructions to us, and their own privacy notices and consents. We do not become your treating provider by hosting an account, form, or message.
This policy applies to AuricWell's own services and its use of the platform. It does not combine the privacy practices of independent participating organizations or authorize them to contact you. A treating provider’s HIPAA notice governs its protected health information. Reading a policy does not authorize a medical-record disclosure or enroll you in SMS.
2. Information processed
- Information you provide, such as name, contact details, account details, service requests, forms, messages, representative information, signatures, payment-related information, and communication choices.
- Information provided by an organization or an authorized person to administer services, accounts, employment, enrollment, or participation. Depending on the service, this may include sensitive information, education records, or health information.
- Technical information such as IP address, browser and device information, sign-in and security events, timestamps, pages or features used, and diagnostic logs. Communication data includes message contents, delivery status, consent choices, withdrawals, and related audit evidence.
- Information from integrations you or your organization authorize. The available integration, account permissions, and your choices determine which information is received.
3. How information is used
We use information to respond to requests; operate accounts and services; support scheduling, enrollment, communications, billing, and administration; verify identity and authority; maintain records; provide support; detect misuse; and satisfy legal obligations.
When processing records on behalf of an organization, we act under its authorized instructions and applicable agreements. We may also process information for our own account administration, security, support, and other disclosed operational purposes. An organization’s records are not permission for our independent advertising.
Optional promotional messages require the consent applicable to that communication. Agreement to reminders, support, or workforce communications does not authorize promotions.
5. Text messages and your choices
A program’s consent form identifies its sender, purpose, and choices. Choosing Yes or No may be required, but Yes is never required to obtain services or make a purchase. Where we use a Yes/No form, neither choice is preselected. You can decline every optional SMS purpose.
Providing a phone number, accepting website terms, signing an unrelated waiver, or acknowledging a privacy notice does not itself enroll you in recurring SMS. Marketing requires a separate affirmative choice. Reply STOP to opt out of the sending program, or HELP for assistance. Contact the organization to request broader withdrawal or another way to communicate.
Ordinary text messages can be visible on lock screens, shared devices, and carrier systems. Do not use them to send sensitive records. Stopping texts does not necessarily erase records we must retain, including evidence needed to honor your opt-out.
7. Safeguards, retention, and automated tools
We use administrative, technical, and physical safeguards appropriate to the service and information. No system is completely secure. Protect your account and notify the organization of suspected unauthorized access.
Retention depends on the record, service, legal and professional obligations, contracts, and any legal hold. Closing an account or deleting a working copy does not guarantee immediate removal from every record, log, or backup. Requests are evaluated under the law that applies.
Automation or AI-assisted functions may support administrative or documentation workflows. Authorized people remain responsible for reviewing outputs and making professional decisions. This policy does not authorize session recording, unrestricted AI use, or training a general-purpose AI model on health information. Recording and other sensitive uses require the notices, consents, and safeguards applicable to them.
8. Privacy requests and representatives
Contact us to request access, correction, or deletion where applicable; withdraw optional consent; ask about retention; or raise a privacy concern. We may verify identity and authority. Some records must be retained, and some rights are exercised through the organization that controls the record. We explain a denial and any applicable appeal or review process.
Parents, guardians, and other representatives may act only within their authority. Confidential services for minors and different categories of health or education records may have different access rules. We do not assume a parent may access every record.
Where we process records on behalf of another organization, we assist or direct your request to that organization as appropriate. A complaint or valid privacy request does not waive other rights.
9. Policy updates
Revisions are posted with their effective date. Additional notice or consent will be provided when required. An update does not retroactively expand a prior messaging consent or authorization.
Questions, privacy requests, and help
AuricWell — Plot Twist Co. Privacy contact: Michael Mendez. For privacy requests and assistance: HQ@plottwistco.com or 833-756-8894.
Please provide your contact information and the type of help you need. Do not include detailed medical records, passwords, or financial account information in an ordinary email or public inquiry. We can arrange an appropriate way to exchange sensitive information.