ChiroUnchained operates a suite of software tools for chiropractic practices, including RaveWall, Cortex, InnateScan, and related services available at chirounchained.ai and its subdomains. This Privacy Policy describes how we collect, use, and protect information when you use our platform.
We collect information you provide directly, including your name, email address, business name, and practice details when you register or connect third-party services. When you authorize our platform to connect with Facebook, Google Business Profile, or other platforms, we receive OAuth tokens and the permissions you explicitly grant.
We collect usage data including log files, IP addresses, and interaction data to operate and improve our services.
We use your information to provide and operate the ChiroUnchained platform, including posting content to connected social media and business profile pages on your behalf, generating practice marketing content, and displaying review data on your waiting room displays.
We do not sell your personal information to third parties. We do not use your data to train AI models without your explicit consent.
Our platform connects to third-party services including Facebook (Meta), Google Business Profile, and Google Photos on your behalf using OAuth authorization. Your use of these connections is subject to the respective platform's terms of service. We store only the access tokens necessary to perform the actions you have authorized.
Patient records are stored on the practice's own computer, in the practice's office. Drafting notes with AI runs on AWS Bedrock, and transcription of visit audio runs on AssemblyAI. Both process patient information under HIPAA Business Associate Agreements. Read more on our Security & HIPAA page.
We retain your account data for as long as your account is active. OAuth tokens are stored securely and can be revoked at any time through your account settings or directly through the connected platform. Clinical and health-related data is retained for a minimum of seven years in accordance with HIPAA requirements.
We use AES-256-GCM encryption for sensitive credentials, HTTPS for all data in transit, and access controls to protect your data.
You may request access to, correction of, or deletion of your personal data by contacting us. You may revoke third-party platform connections at any time.
We use session cookies to maintain your authenticated state. We do not use tracking cookies or advertising cookies.
We may update this Privacy Policy periodically. We will notify registered users of material changes via email.
Data From Meta, Google and TikTok (Social Publishing Service)
When a practice clicks Connect and authorizes our app, we receive data from the platform only for the accounts that practice owns and only for the permissions it grants.
We use this data only to provide these features to the practice that authorized it. We do not sell it, do not use it for advertising, do not use it to build profiles of individuals, and do not transfer it to others except as needed to operate the service (for example our infrastructure provider) or as required by law. No patient data is sent to Meta, Google or TikTok by this service.
Access and refresh tokens are encrypted at rest on our servers and kept separately for each practice. We keep tokens, connection records and publishing logs while the connection is active. When a practice disconnects, revokes access at the platform, or asks us to delete, we delete them within 30 days. See our Data Deletion Instructions for how.
ChiroUnchained's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
ChiroUnchained's use of information received from Meta (Facebook and Instagram) will comply with the Meta Platform Terms and Developer Policies. We use Platform Data only to provide the features described above, and we delete it on request or when the connection is removed.
ChiroUnchained's use of information received from TikTok will comply with the TikTok Terms of Service and TikTok developer terms and policies. We use TikTok data only to provide the features described above and delete it on request or when the connection is removed.