Privacy Policy

1. Who We Are

Rivercrest provides clinic-focused technology implementation, workflow automation, communication, customer-relationship management, reporting, and artificial-intelligence-enabled services.

For purposes of this Privacy Policy, “Rivercrest,” “we,” “us,” and “our” refer to:

2. Information We Collect

Depending on how you interact with Rivercrest, we may collect the following categories of information.

Information you provide directly

This may include:

• your name
• business email address
• telephone number
• company or clinic name
• job title
• business location
• clinic type
• number of locations
• lead or inquiry volume
• communication channels
• current software and CRM systems
• operational challenges
• package interest
• consultation preferences
• messages and other information submitted through our forms
• communications exchanged with Rivercrest

Information collected automatically

When you use our website, we or our service providers may automatically collect:

• IP address
• browser type
• device type
• operating system
• referring page
• pages viewed
• date and time of visits
• general geographic location
• website interactions
• cookie and similar technology identifiers
• analytics and performance data

Client-service information

If a clinic becomes a Rivercrest client, we may process additional information required to design, configure, manage, support, and improve the clinic’s agreed workflows.

The types of information processed will depend on the client’s systems, services, integrations, instructions, and contract with Rivercrest.

3. Sensitive and Health Information

Do not submit medical records, diagnoses, treatment details, insurance information, payment-card information, or other sensitive health information through Rivercrest’s public website or general contact forms.

Rivercrest’s public website is intended primarily for business inquiries from clinics and clinic representatives.

When Rivercrest processes information on behalf of a clinic, the clinic remains responsible for determining what information it is authorized to collect and for providing Rivercrest with lawful instructions.

Where Rivercrest is required to process protected health information on behalf of a U.S. covered entity or business associate, that processing must be governed by an appropriate written agreement, including a Business Associate Agreement where legally required.

Nothing in this Privacy Policy represents that every Rivercrest service, integration, vendor, or workflow is automatically HIPAA compliant. Compliance requirements are determined according to the agreed implementation, applicable law, contracts, vendors, technical safeguards, and operational procedures.

4. How We Use Information

Rivercrest may use information to:

• respond to inquiries
• schedule and conduct consultations
• determine whether Rivercrest may be suitable for a clinic
• prepare proposals and implementation scopes
• communicate about Rivercrest services
• provide requested information
• design and manage client services
• configure agreed workflows and integrations
• provide support
• monitor service performance
• improve our website and services
• analyze website traffic and usage
• maintain security and prevent misuse
• comply with legal and contractual requirements
• establish, exercise, or defend legal claims
• send marketing communications where permitted by law

You may unsubscribe from promotional email communications using the unsubscribe mechanism provided in the message or by contacting us.

5. Legal Bases for Processing

Where applicable law requires a legal basis, Rivercrest may process personal information based on:

• your consent
• steps requested before entering a contract
• performance of a contract
• compliance with legal obligations
• Rivercrest’s legitimate interests, provided those interests are not overridden by your rights
• another lawful basis permitted by applicable law

Our legitimate interests may include operating our business, responding to business inquiries, securing our services, improving our website, preventing misuse, and communicating with potential or existing business clients.

6. How We Disclose Information

Rivercrest may disclose information to:

• hosting and cloud-service providers
• CRM and workflow providers
• analytics providers
• email and communication providers
• telephony and messaging providers
• calendar and scheduling providers
• artificial-intelligence and automation providers
• payment providers
• professional advisers
• contractors and implementation partners
• security and fraud-prevention providers
• government authorities when legally required
• a successor or purchaser involved in a merger, financing, restructuring, acquisition, or sale of assets

These providers may process information only as necessary to perform services for Rivercrest or as otherwise permitted by their agreements and applicable law.

Rivercrest does not knowingly sell personal information for money.

7. Cookies and Similar Technologies

Rivercrest may use cookies and similar technologies to:

• operate the website
• remember settings
• understand website usage
• measure performance
• prevent misuse
• support analytics
• improve our services
• support advertising where implemented and permitted

Some cookies may be set by third-party providers.

Where required, Rivercrest will request consent before activating non-essential cookies. Visitors may also be able to manage cookies through browser settings or an available cookie-preference tool.

Disabling cookies may affect some website functions.

8. Analytics and Advertising

Rivercrest may use analytics tools to understand how visitors use the website.

If Rivercrest later adds advertising pixels, remarketing tools, session-recording software, or other tracking technologies, this Privacy Policy and the website’s cookie controls must be updated before those tools are activated.

9. Data Retention

Rivercrest retains personal information only for as long as reasonably necessary for:

• the purpose for which it was collected
• providing requested services
• maintaining business and transaction records
• complying with legal or contractual obligations
• resolving disputes
• enforcing agreements
• security and fraud prevention

Retention periods may vary depending on the type of information, the relationship involved, and applicable legal requirements.

Rivercrest will delete, anonymize, or securely dispose of information when it is no longer reasonably required, subject to applicable obligations.

10. Data Security

Rivercrest uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, alteration, misuse, or disclosure.

However, no website, storage system, communication channel, or transmission method can be guaranteed to be completely secure.

Users should not transmit sensitive information through unsecured channels or through website forms not specifically designed for that purpose.

11. International Data Transfers

Rivercrest and its service providers may process information in countries other than the country where the information was collected.

Those countries may have different privacy laws.

Where required by applicable law, Rivercrest will use appropriate contractual, organizational, or legal safeguards for international data transfers.

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• request access to personal information
• request correction of inaccurate information
• request deletion
• request restriction of processing
• object to certain processing
• withdraw consent
• request data portability
• opt out of certain marketing
• opt out of certain sales, sharing, or targeted advertising where applicable
• appeal certain privacy-request decisions
• lodge a complaint with a privacy regulator

These rights are not absolute and may be subject to legal exceptions.

To submit a request, email: contact@rivercrest.ai

Include enough information for us to identify you and understand the request. We may need to verify your identity before completing it.

Rivercrest will not unlawfully discriminate against individuals for exercising applicable privacy rights.

13. California Privacy Information

If Rivercrest becomes subject to the California Consumer Privacy Act, eligible California residents may have rights concerning:

• categories and specific pieces of personal information collected
• sources of information
• purposes for collection and use
• categories of recipients
• correction
• deletion
• access
• portability
• opting out of certain sales or sharing
• limiting certain uses of sensitive personal information
• freedom from unlawful discrimination

Rivercrest does not currently state that it sells or shares personal information for cross-context behavioral advertising unless and until all website technologies and business practices have been reviewed to support that statement.

Requests may be submitted to contact@rivercrest.ai.

14. European and United Kingdom Privacy Information

Individuals located in the European Economic Area or United Kingdom may have rights under applicable data-protection laws, including access, correction, deletion, restriction, objection, portability, and withdrawal of consent.

They may also lodge a complaint with the applicable supervisory authority.

Where Rivercrest relies on legitimate interests, individuals may request more information about those interests.

15. Communications

Rivercrest may communicate with you by email, telephone, SMS, or another channel that you provide or authorize.

You may request that Rivercrest stop sending promotional communications.

Requests concerning service, security, transaction, or contractual communications may not apply in the same way because those communications may be necessary to manage a relationship or provide services.

16. Third-Party Websites and Services

The website may link to third-party websites or services.

Rivercrest does not control those third parties and is not responsible for their privacy, security, or content practices.

Review the privacy policies of third-party services before providing information to them.

17. Children’s Privacy

Rivercrest’s website and services are intended for businesses and adults.

Rivercrest does not knowingly collect personal information directly from children under 13 through its public website.

If you believe a child has provided personal information to Rivercrest, contact us so that we can investigate and take appropriate action.

18. Automated Technologies

Rivercrest may use automated or artificial-intelligence-enabled tools to support business communications, analysis, workflow execution, summaries, routing, and service delivery.

Rivercrest does not intend its public website tools to provide medical diagnoses, treatment decisions, prescriptions, or emergency medical services.

Material decisions and escalation requirements are addressed according to the applicable client workflow, implementation scope, and human-review rules.

19. Changes to This Policy

Rivercrest may update this Privacy Policy to reflect changes in:

• services
• technology
• legal requirements
• vendors
• business operations
• privacy practices

The updated policy will be posted with a revised effective date.

Material changes may be communicated through additional notice where appropriate or legally required.

20. Contact Us

Questions or privacy requests may be sent to: