1. Who we are and what this policy covers
Brelsi LLC (“Brelsi,” “we,” “us,” or “our”) builds software for organizations, including Voicemail Triage for medical clinics, and offers software consulting.
This policy applies to:
- our website, brelsi.com, and all of its pages (the “Site”);
- emails, calls, and meetings you have with us; and
- the account information of people who use Brelsi products at work, such as clinic staff who sign in to Voicemail Triage.
2. Patient information
Clinics use Brelsi to handle the voicemails their patients leave. Those voicemails, and the details in them, are protected health information under HIPAA, the federal law that sets rules for health information. This policy doesn’t cover patient information. HIPAA and our agreement with each clinic do.
- We sign a Business Associate Agreement (BAA) with each clinic before we receive any of its patient information.
- We use patient information only to provide our service to that clinic, as our agreement with the clinic and HIPAA allow.
- We never sell patient information or use it for marketing.
If you’re a patient, your clinic’s Notice of Privacy Practices explains your rights. To see, correct, or ask about information in a voicemail you left, please contact your clinic. If you contact us, we’ll point you to your clinic, because the clinic is in charge of its patients’ records.
3. Information we collect
Information you give us
- Booking and request form: your name, phone number, and email; what you need help with, your goals, and your budget; and, if you book a call, the time you picked and your time zone.
- Emails, calls, and meetings: whatever you choose to share with us.
Please don’t include patient information in our forms or in emails to us. Clinics share patient information with us only through our product, under a signed BAA.
Information collected automatically on our Site
We use Google Analytics to learn how people use the Site. It collects:
- the pages you visit, how long you stay, and how far you scroll;
- what you click or play, such as buttons, links, videos, and the interactive pictures on our pages;
- the website or link that brought you here, including tags we add to links we send (for example,
utm_source=email); - your device type, browser, screen size, and language; and
- your general location, such as your city or country, worked out from your IP address.
When you send one of our forms, Google Analytics records only that a form was sent and your answer to “How did you hear about us?” It never receives your name, email, phone number, or company.
We also advertise on Facebook and Instagram, and use the Meta Pixel, a tool from Meta Platforms, Inc., to see whether those ads bring people to our Site and to show our ads to people who have visited it. The pixel sends Meta:
- the pages you visit, and the website or link that brought you here, including tags like
utm_source; - how far you got in our booking form and whether you sent it, with your multiple-choice answers (what you need help with and your budget), but never your name, phone number, email, or anything you typed; and
- your IP address and basic details about your browser and device.
If you’re logged in to Facebook or Instagram, Meta may connect this to your account. We never send Meta your name, email, phone number, or company. Meta uses what it receives under its own Privacy Policy, which includes improving its ads.
Our hosting provider may also keep standard server logs, such as your IP address, browser type, the page you asked for, and the time, so we can keep the Site secure and running.
Fonts and code from other companies
Our pages load fonts from Google Fonts and some code from jsDelivr, a service that delivers website code. Like any website your browser loads files from, these services receive your IP address and basic details about your browser.
Information about people who use our products at work
- Sign-in: staff sign in to Voicemail Triage with their organization’s Google account. We receive their name, work email address, and Google account ID.
- Roles and teams: their organization tells us what each person can do in the app and which team they’re on.
- Activity log: the app records what people do in it, such as signing in, opening a voicemail, or changing a setting, along with the time, the device name, and the IP address. HIPAA requires this record.
We handle this information for the organization that gave you access, under our agreement with that organization.
Information from other sources
We may get business contact details from people who refer you to us, or from public sources such as your organization’s website, so we can tell you about Brelsi.
5. How we use information
We use information to:
- reply to you and set up calls and demos;
- provide, support, and secure our products for our customers;
- understand how people use our Site and make it better;
- send business contacts occasional emails about Brelsi, which you can ask us to stop at any time;
- prevent fraud, misuse, and security problems; and
- follow the law, respond to lawful requests, and protect our rights and the rights of others.
7. Google data in our products
Voicemail Triage uses Google services in two ways:
- Signing in. Staff sign in with their organization’s Google account. We receive their name, email address, and Google account ID, and use them only to sign them in and to show who did what in the app.
- Getting voicemails. A clinic can give our app read-only access to Gmail through its Google Workspace admin settings. Our app uses that access only to read the voicemail emails the clinic’s phone system sends to the mailboxes the clinic chooses. It never sends, changes, or deletes email. The clinic can turn this access off at any time in its Google Workspace admin console.
Voicemails we get this way are patient information, handled as described in section 2.
Brelsi’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. How long we keep information
- Messages and contact details: while we’re talking with you, or while we have a business reason to keep them. You can ask us to delete them at any time.
- Website analytics: Google Analytics deletes detailed visit data automatically after the time limit we set.
- Advertising: the Meta Pixel’s cookies expire after 90 days. Meta keeps what the pixel sends it under its own Privacy Policy.
- Product account information: while the organization’s agreement with us lasts. After that, we delete or return it as the agreement says.
- Activity logs: six years, as HIPAA requires.
When we no longer need information, we delete it or remove anything that could identify you.
9. How we protect information
We protect information with safeguards that match how sensitive it is:
- Our Site uses encrypted connections (HTTPS).
- Our products encrypt information while it travels and while it’s stored, give each person access only to what their job needs, and record every time someone opens patient information.
No system is perfectly secure, so we can’t promise that information will never be accessed without permission. If a security breach affects your personal information, we’ll tell you as the law requires.
10. Your choices and rights
You can ask us to:
- tell you what personal information we have about you, and send you a copy;
- correct information that’s wrong; and
- delete your information.
You can also stop our emails at any time by using the unsubscribe link in them or by telling us.
How to ask
Email team@brelsi.com with “Privacy request” in the subject line. To protect you, we may need to confirm it’s really you, for example by asking you to reply from the email address we have on file. Someone you choose can ask for you, with proof that you gave them permission.
We’ll reply within 45 days. If we can’t do what you ask, we’ll explain why, and you can ask us to reconsider by replying to our answer.
Some U.S. state laws give these rights only to their own residents. We honor these requests from anyone in the United States. Sometimes the law requires us to keep certain records, such as the activity logs HIPAA requires, and we’ll tell you if that applies. We won’t treat you differently for using any of these rights.
For a work account in one of our products, please contact your organization first, because it controls that account. We’ll help them with your request.
California residents
We don’t share personal information with other companies for their own direct marketing.
11. Children
Our Site and products are made for businesses and are not meant for children. We don’t knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, please contact us and we’ll delete it.
12. Other websites
Our Site links to websites run by other companies, such as Google. Their own privacy policies apply when you visit them.
13. Where we process information
Brelsi is based in the United States, and our Site is meant for people in the United States. We process information in the United States, and some of our service providers may process it in other countries.
14. Changes to this policy
If we change this policy, we’ll update the “Last updated” date at the top of this page. If a change is significant, we’ll also post a notice on our Site. When our agreements with customers require it, we’ll tell those customers directly.
15. Contact us
Questions about this policy or how we handle your information? Contact us:
Brelsi LLCEmail: team@brelsi.com