Privacy Policy
Your privacy, respected.
Last updated: July 2026
This Privacy Policy explains how Catalyst Verticals, LLC, operating as Catalyst MedFlo ("Catalyst MedFlo," "we," "us," or "our"), collects, uses, and protects information when you use our website and services. By using our website or services, you agree to the practices described here.
Information we collect
We collect information you provide directly, information collected automatically, and information from the healthcare practices that use our services.
- Information you provide: name, email, phone, practice details, and anything you submit through our forms or communications.
- Automatically collected: device and usage data such as IP address, browser type, pages viewed, and similar analytics collected through cookies and comparable technologies.
- Protected health information (PHI): when a healthcare practice uses our platform, we may process PHI on that practice's behalf as a Business Associate, governed by a Business Associate Agreement and applicable law rather than by this general policy.
How we use information
We use information to provide, maintain and improve our services; to communicate with you; to secure the platform and prevent misuse; to comply with legal obligations; and for other purposes described at the point of collection.
Protected health information and HIPAA
Where we process PHI on behalf of a covered entity, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). Our handling of PHI is governed by the applicable Business Associate Agreement, and we use and disclose PHI only as permitted by that agreement and by law.
How we share information
We do not sell your personal information. We may share information with service providers who support our operations under appropriate confidentiality and data-protection obligations; with the healthcare practice associated with your data; to comply with law or valid legal process; and in connection with a business transaction such as a merger or acquisition.
Cookies and analytics
We use cookies and similar technologies to operate our website, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.
Data security
We maintain administrative, physical and technical safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data retention
We retain information for as long as needed to provide our services, comply with our legal obligations, resolve disputes and enforce our agreements, after which we delete or de-identify it.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal information, and to opt out of certain processing. To exercise these rights, contact us using the details below. Requests concerning PHI held on a practice's behalf should generally be directed to that practice.
Children's privacy
Our website and services are not directed to children, and we do not knowingly collect personal information from children through them.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date above and, where appropriate, provide additional notice.
Contact us
Questions about this policy or our privacy practices? Contact our team.