Privacy Policy

1. HIPAA Compliance and Business Associate Status

As a specialized provider for the healthcare industry, Flex Codev LLC often operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). When we build or maintain software that handles Protected Health Information (PHI), we enter into a Business Associate Agreement (BAA) with our clients, ensuring that all data is handled with the highest standards of security and confidentiality required by U.S. federal law.

2. Information We Collect

We collect two types of information:

• Information You Provide: This includes your name, email address, company name, and project details submitted through our “Request a Solution Proposal” or contact forms.
• Automated Information: We may collect technical data such as IP addresses, browser types, and usage patterns through cookies to improve our website experience.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our engineering services.
• Respond to your inquiries and project requests.
• Comply with legal and regulatory obligations, specifically HIPAA and SOC 2 security standards.
• Communicate technical updates or relevant service information.

4. Data Security and Engineering Standards

Security is at the core of our engineering process. We implement industry-leading safeguards, including:

• Encryption: Data is encrypted using AES-256 at rest and TLS 1.3 in transit.
• Access Controls: Strict role-based access controls (RBAC) and Multi-Factor Authentication (MFA) for all our developers.
• Nearshore Security: Our Brazilian engineering team operates under strict security protocols aligned with U.S. data protection laws.

5. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We only share information with trusted service providers who assist us in operating our business (e.g., hosting providers), provided they agree to maintain the same level of confidentiality and security.

6. Your Rights

Depending on your jurisdiction, you may have rights regarding your data, including the right to access, correct, or delete your personal information. If you are a client's patient, please contact your healthcare provider directly regarding your health records.

7. Contact Us

If you have any questions about this Privacy Policy or our security practices, please contact us at: