Privacy Policy

1. Introduction

Wendy.ai LLC ("Wendy.ai," "we," "us," or "our") operates the Wendy.ai MDS AI Assistant platform. This Privacy Policy describes how we collect, use, and protect information when you use our website and services.

2. Information We Collect

Contact form

When you submit our contact form (name, email, optional message), we use this information to respond to your inquiry and schedule calls. We do not sell this information.

Demo and product use

The demo uses synthetic data. When you use the product with real facility data, we may process Protected Health Information (PHI) as a Business Associate under HIPAA. Our use of PHI is governed by our Business Associate Agreement (BAA) with each customer.

Technical data

We may collect IP addresses, browser type, and similar technical data for security and operational purposes. We store your theme preference (light/dark) in your browser's local storage.

3. How We Use Information

We use collected information to: provide and improve our services, respond to inquiries, comply with legal obligations, and protect against fraud or abuse. We do not use contact form data for marketing unless you opt in.

4. Data Sharing

We do not sell your personal information. We may share data with: (a) service providers who assist our operations (e.g., hosting) under confidentiality agreements; (b) as required by law; (c) with your consent. When we process PHI, we comply with HIPAA and our BAAs.

5. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest where applicable. For PHI, we implement safeguards required by HIPAA. See our Security Policy for more detail.

6. Cookies and Local Storage

We use local storage to remember your theme preference (light/dark mode). We do not use tracking cookies for advertising. Third-party services we embed (if any) may use their own cookies; we will update this policy if we add such services.

7. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us. For PHI, your rights are governed by our BAA and HIPAA. Residents of certain jurisdictions may have additional rights under applicable law.

8. Data Retention

We retain contact form submissions as long as needed to respond and for legitimate business purposes. PHI retention is governed by our BAA and HIPAA (e.g., 6 years for audit logs). You may request deletion of your contact information at any time.

9. Children

Our services are not directed at children under 13. We do not knowingly collect information from children.

10. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated via email or a notice on our site.

11. Contact

For privacy questions or requests, contact us at privacy@wendy.ai or via our contact form.