Consumer Health Data Privacy Notice
Effective date: August 10, 2026
This notice applies to "consumer health data" as defined by Washington's My Health My Data Act and similar state laws: information that identifies you and reveals your physical or mental health status, condition, or treatment. It supplements the hireJudi Privacy Policy. Where a healthcare practice covered by HIPAA uses hireJudi under a Business Associate Agreement, the protected health information we process for that practice is governed by HIPAA and our agreement with the practice; this notice covers consumer health data we process outside that framework (for example, on behalf of wellness businesses that are not covered by HIPAA).
What consumer health data we collect. When a business uses hireJudi to run its front office, the following may include consumer health data, depending on what you share: recordings and transcripts of calls and web chats with Judi (our AI assistant); appointment details (such as the type of service you book); intake form responses; documents you sign; and invoice line items.
Why we collect it (purposes). Solely to provide the service to the business you contacted: answering your call or chat, booking your appointment, collecting the intake information the business requests, delivering documents for signature, and sending invoices. We do not use consumer health data for advertising, do not sell it, do not use it to train AI models, and do not use it for geofencing around health care facilities.
Sources. We collect this information from you directly — what you say on a call or chat, and what you enter into a form, document, or payment page the business sends you.
Who we share it with. Only with: (1) the business you contacted (it is their customer information); and (2) the service providers (subprocessors) we use to run hireJudi — cloud hosting/storage, database, transactional email, and AI voice/chat processing — each bound by contracts restricting their processing to providing the service. A current list of our subprocessors, by name and function, is available on request at hello@hirejudi.com. We do not sell or share consumer health data for advertising.
Customer-Connected Services. At the business's direction, we may transmit consumer health data to a third-party account or service that the business independently selects and controls. That provider is governed by the business's agreement and is not a hireJudi subprocessor solely because the business connects it. The business is responsible for the permissions, contracts, BAAs, consents, or other terms required for its use. We safeguard connection authorization material within hireJudi and use the connection only as the business directs. Supported connections and technical requirements may change.
How long we keep it. Recordings and transcripts are retained for a period the business configures (default 60 days) and then deleted. Other Service Data is retained while the business's account is active, then purged on the schedule in our Privacy Policy.
Your rights. Depending on your state, you may have the right to: access the consumer health data we hold about you; have it deleted; withdraw any consent you previously gave for its collection or sharing; and appeal a decision we make on your request. Because the business you contacted controls this information, the fastest path is to contact that business directly — we support businesses in fulfilling these requests through the platform's export, correction, and deletion tools. You may also contact us at hello@hirejudi.com and we will act on your request or route it to the business, as applicable law requires. If we deny your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general.
Changes. We will post changes here and update the effective date above.
Contact: hello@hirejudi.com · Vector Digital Solutions LLC d/b/a hireJudi, 732 S 6th St STE N, Las Vegas, NV 89101