Introduction
Heyliaa is committed to maintaining the highest standards of privacy, confidentiality, and information security. Protecting patient information and customer data is fundamental to our platform.
This Privacy Policy explains how we collect, process, store, protect, and disclose information when you use the Heyliaa website, web application, mobile applications, and related services.
Our Role
Heyliaa is a healthcare technology platform that provides AI-powered solutions for scheduling, documentation, billing, patient management, and clinic operations.
Healthcare organizations remain the custodians of their patient information. Heyliaa acts solely as a technology service provider, processing information only as authorized by our customers and only for the purpose of delivering the Services.
Information We Process
We process only the information necessary to operate our platform, including:
- User account information
- Appointment and scheduling data
- Patient demographic information
- Clinical documentation
- Billing and insurance information
- Uploaded files and documents
- Audio recordings and transcripts when AI features are enabled
- Technical information necessary to secure and operate the platform
We do not collect information beyond what is required to provide our Services.
Permitted Use of Information
Information processed through Heyliaa is used exclusively to:
- Deliver requested platform functionality
- Generate AI-assisted documentation and workflow automation
- Manage appointments and clinic operations
- Process billing activities
- Maintain platform security, integrity, and reliability
- Comply with applicable legal and regulatory obligations
We do not:
- Sell personal or health information.
- Rent customer information.
- Use customer data for advertising.
- Share customer data for marketing purposes.
- Use customer data to train public or third-party AI models without explicit authorization.
Disclosure of Information
Information is disclosed only:
- To authorized users within the customer’s organization.
- To carefully selected service providers necessary to operate the platform under strict confidentiality obligations.
- Where disclosure is required by applicable law or valid legal process.
We disclose only the minimum information necessary for the required purpose.
Security
Heyliaa employs administrative, technical, and physical safeguards designed to protect sensitive information, including:
- Encryption of data in transit and at rest
- Role-based access controls
- Multi-factor authentication for privileged access
- Continuous security monitoring
- Audit logging
- Regular security reviews and vulnerability management
Access to customer information is limited to authorized personnel with a legitimate business need and is governed by strict confidentiality obligations.
Data Retention
Information is retained only for as long as necessary to provide the Services, satisfy contractual obligations, comply with applicable laws, and support healthcare record retention requirements.
Upon termination of services, data is deleted or returned in accordance with applicable agreements and legal requirements.
Google Calendar Integration
When authorized by a user, Heyliaa may access Google Calendar information solely to synchronize appointments.
Google user data is used exclusively to provide requested calendar functionality and is never sold, shared for advertising, or used to develop or train public AI models.
Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Cookies
Heyliaa uses only those cookies and similar technologies necessary for secure authentication, session management, platform performance, and service improvement. We do not use cookies to build advertising profiles or sell user behavior data.
Your Privacy Rights
Healthcare organizations remain responsible for responding to requests relating to patient records under applicable privacy legislation. Heyliaa will assist customers in fulfilling these obligations where required.
Changes to this Policy
We may revise this Privacy Policy periodically to reflect changes in legal requirements, security practices, or our Services. Updated versions will be posted on our website.
Contact Us
If you have questions regarding this Privacy Policy, please contact:
Email: support@heyliaa.com
Address: 3245 Daisy Way, Oakville, Ontario, L6M 1R1, Canada
Phone: +1 (844) 462-7548
This version reads more like the policies used by enterprise healthcare SaaS vendors. It is firm because it repeatedly limits what Heyliaa is permitted to do with data (“only,” “exclusively,” “minimum necessary,” “strict confidentiality”) rather than making broad claims that could be inaccurate or difficult to defend.