Privacy Policy

Introduction

Medverse RCM is committed to protecting the privacy of users who interact with our website, www.medversercm.com. This Privacy Policy outlines how we collect, use, and protect your personal information when you visit our website. It also explains how we process this information to enhance user experience, ensure compliance with applicable regulations, and provide transparency regarding your data rights. Additionally, this policy details the choices available to you regarding the use, access, and updates of your personal information over time.

As a provider of revenue cycle management services, we handle data on behalf of healthcare providers in compliance with applicable laws, contractual agreements, and industry standards, including the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act. We operate strictly within the scope of our Business Associate Agreements (BAAs) with healthcare providers, who may have their own privacy policies and data handling practices. Since we do not control how healthcare providers collect, use, or disclose personal and Protected Health Information (PHI), we encourage you to review their respective privacy policies to understand how your information is managed.

What Kind of Personal Data Do We Collect?

We collect various types of personal data to facilitate our services and enhance user experience. The information we gather depends on your interactions with Medverse RCM. When you engage with our website, fill out contact forms, or contact our support team, we may collect identifying details such as:

• Your full name, phone number, mailing address, and business email address (e.g., info@medversercm.com).
• Healthcare provider information (NPI number, credentials, practice size, and CAQH details).
• Medical claims data, billing codes, payer details, and related clinical administrative files required for RCM operations.
• Technical details automatically collected upon visit, including your IP address, browser type, device information, and active interaction metrics.

How Do We Collect the Data?

We obtain personal and professional data through transparent channels:

• Direct Submission: Information voluntarily input by you when requesting meetings, downloading compliance check sheets, or submitting customer support tickets.
• Automated Integrations: System audit files tracking secure uploads to clearinghouses, direct API connections to EHR/EMR platforms, and standard cookie tags.
• Authorized Third Parties: Credentials and organizational details retrieved from databases like CAQH, NPPES registry files, or medical referral partners.

How Do We Utilize Your Data?

At Medverse RCM, we process collected information strictly for operational, support, and compliance initiatives:

• Providing optimized revenue cycle management services (medical billing, coding, credentialing, and secure clearinghouse uploads).
• User identification, system access control, and authentication checks.
• Continuous improvement of billing performance, claims validation checks, and operational dashboards.
• Communicating crucial regulatory updates, billing industry mandates, and account changes.

Data Retention Policy

We retain personal data and clinical billing records only for as long as necessary to satisfy the operations outlined in our service agreements, comply with federal/state healthcare record retention requirements, or resolve legal disputes. When billing records are no longer required, they are securely purged using HIPAA-compliant data destruction methods.

SMS Consent and Communication

By opting into SMS communications with Medverse RCM, you agree to receive operationally critical text notifications, billing status reminders, and credentialing alerts. Marketing or promotional communications will only be transmitted if you provide explicit written consent.

You can opt out of SMS communications at any time by replying "STOP". Replying "HELP" connects you directly to our client support team. Message and data rates may apply. SMS consent data is protected and never shared with third-party marketers.

Communication Standards

We utilize secure business communications exclusively for coordinating healthcare operations with:

• Contracted healthcare providers and medical practice administrators.
• Our internal compliance specialists and billing teams.

Communications are restricted to service delivery tracking, credentialing checks, coding feedback, and clean claim notifications. We strictly prohibit unsolicited marketing or promotional campaigns through our support hotlines.

Data Protection and HIPAA Security

As a Business Associate under HIPAA, Medverse RCM implements industry-leading physical, technical, and administrative safeguards to protect Protected Health Information (PHI) and personal records:

• Data Encryption: End-to-end 256-bit secure encryption for all database connections and data transmission transfers.
• Access Auditing: Strict role-based access controls ensuring only authorized billing specialists view relevant provider records.
• SOC 2 Compliance: Partnered systems and servers meeting SOC 2 standards to ensure optimal physical infrastructure security.

Third-Party Monitoring

We collaborate with external service entities (such as cleared clearinghouses, secure database servers, and certified payment channels) to facilitate billing operations. These entities are contractually bound under Business Associate Agreements (BAAs) to maintain the identical data security protocols and compliance regulations that we follow.

Cookie Policy

Our website utilizes cookies to remember user preferences, track traffic metrics, and improve site navigation. You can manage or disable cookies in your browser settings. Please note that disabling cookies may restrict functional access to certain secure sections of our site.

Your Rights and Choices

Depending on your jurisdiction and status (such as HIPAA guidelines or the California Consumer Privacy Act), you hold the following rights:

• The right to request copies of access logs showing who has accessed your practice's billing files.
• The right to request immediate correction or modification of incorrect administrative data.
• The right to request data portability or secure deletion where not restricted by medical record laws.

Breach Notification Policy

In the event of any security incident or data breach impacting Protected Health Information (PHI), Medverse RCM executes instant mitigation protocols and notifies affected provider groups within the legal compliance timeline, in strict compliance with the HIPAA Breach Notification Rule.

Contact Information

For queries, privacy disputes, or file requests, please contact our HIPAA compliance officer: