Legal
Privacy Policy
Last updated: July 13, 2026
This Privacy Policy explains how CallSphere LLC (“CallSphere,” “we,” “us”) collects, uses, discloses and safeguards information when you visit our website or use the CallSphere Health platform (the “Services”). By using the Services you agree to the practices described here.
CallSphere Health serves healthcare practices. Where we handle protected health information (“PHI”) on behalf of a practice, we act as a Business Associate under the Health Insurance Portability and Accountability Act (“HIPAA”), and our handling of that PHI is governed by our Business Associate Agreement (“BAA”) with the practice in addition to this Policy.
1. Information we collect
Account & practice data. Name, email, phone number, practice name, role and billing details you provide when you create or manage an account.
Protected health information. When a practice uses the Services, we process patient records, scheduling, clinical notes, communications and payment information on that practice’s behalf. This PHI is owned and controlled by the practice, not by CallSphere.
Usage & device data. Log data, IP address, browser type, pages viewed and similar diagnostic information collected automatically to operate and secure the Services.
2. How we use information
We use information to:
- Provide, maintain and improve the Services;
- Authenticate users and secure accounts;
- Process billing and subscription payments;
- Provide customer support and send service-related communications;
- Detect, prevent and respond to fraud, abuse and security incidents; and
- Comply with legal and regulatory obligations.
We do not sell personal information, and we do not use PHI for advertising. PHI is used and disclosed only as permitted by the applicable BAA and HIPAA.
3. How we share information
We share information only with service providers who help us operate the Services (such as cloud hosting, communications and payment processing), each bound by contractual confidentiality and, where PHI is involved, a Business Associate Agreement. We may also disclose information when required by law or to protect the rights, safety and security of our users and the public.
We do not sell or rent personal information to third parties.
4. Data security
We use role-based access controls, tenant scoping, audit controls and safeguards appropriate to the service. Practices should review current deployment security information and applicable BAA terms before introducing patient information. No method of transmission or storage is completely secure, but we work continuously to protect your information.
5. Data retention
We retain account and practice data for as long as an account is active and as needed to provide the Services. PHI is retained and disposed of in accordance with the practice’s instructions and the applicable BAA. We may retain limited information as required to comply with legal obligations, resolve disputes and enforce our agreements.
6. Your rights
Depending on your location, you may have rights to access, correct, delete or restrict use of your personal information, or to receive a copy of it. Patients who wish to exercise rights over their health records should contact their healthcare provider, who controls that PHI; we will support providers in fulfilling those requests as required under HIPAA.
To make a request about information CallSphere holds directly, contact us at the address below.
7. Children's privacy
The Services are intended for use by healthcare practices and are not directed to children. Where a practice uses the Services to care for pediatric patients, any related PHI is handled under the practice’s direction and the applicable BAA.
8. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be communicated through the Services or by email.
9. Contact us
CallSphere LLC — sagar@callsphere.ai.