Privacy
What we collect, why, who touches it, and how long we keep it — written to describe what the software actually does.
Advolutely is a case-management platform for independent patient advocates, operated by Ebenezer Software LLC, a North Carolina limited liability company doing business as Advolutely ("Advolutely," "we," "us"). This policy covers two things: this website (advolutely.com) and the Advolutely platform that advocates use to run their practices.
Advocates are our customers. They create an organization account, sign in, and enter information about their practice and their clients. Clients are the people an advocate is helping. We process client information on the advocate's behalf and on the advocate's instructions; the advocate decides what is entered, who can see it, and when it is removed. If you are a client and have a question about your information, your advocate is the right first contact, and we will assist them.
We do not sell personal information, share it with data brokers, or use it for advertising.
Some features summarize or analyze documents an advocate uploads. This processing runs on Amazon Bedrock inside our AWS environment. The model provider does not retain the content or use it to train models, and we do not use case data to train models of our own.
The platform sends transactional email only: account invitations, password resets and password-change confirmations, appointment confirmations and reminders, and short "sign in to view" notices that do not contain case details. Each message is triggered by something an advocate or client did. We do not send marketing email from the platform, and we do not send to purchased or third-party lists. Bounces and complaints are recorded automatically and the address is suppressed from further sending.
We use a small number of providers to run the service. Each is limited to the purpose listed and is bound by contract to protect the data it handles.
We do not share personal information with anyone else except when required by law, to protect the safety or rights of people using the service, or with your direction.
Data is encrypted in transit and at rest with keys we control. Advocate accounts use two-factor authentication. Each organization's data is isolated from every other organization's. Access by our own staff is limited to what is needed to operate and support the service and is logged. No system is perfectly secure; if we learn of a breach affecting your information, we will notify affected organizations as the law requires.
We keep information for as long as an organization's account is active. When an organization leaves, we always provide an export of its data. Sixty days after the account closes, the data is permanently deleted from our systems. Individual records can be deleted by the advocate at any time while the account is open.
Advocates who handle health information may have obligations under federal and state health-privacy law. Where those laws apply, the advocate's use of the platform is governed by a separate data-protection agreement between the advocate and us, which controls over this policy in the event of a conflict.
The platform and this website are for adults acting in a professional capacity. We do not knowingly collect information directly from anyone under 18. Client records entered by an advocate may concern minors; those records are handled under the advocate's instructions and the agreements described above.
We will post any updated policy here with a new date, and we will notify organization accounts of material changes before they take effect.
Ebenezer Software LLC, doing business as Advolutely
North Carolina, United States
hello@advolutely.com