Interim version. This document is adapted from templates prepared by our legal counsel and is pending final legal review; it may change. It does not replace the terms of your organization’s written agreement with My Patient Global, which controls in the event of any conflict.

FUNDS Portal

Privacy Policy

Effective date: August 30, 2026 · interim — pending final legal review

1. Scope and acceptance

This Privacy Policy ("Privacy Policy") governs how My Patient Global, Inc. ("My Patient Global," "we," or "us"), including its affiliates and subsidiaries and the FUNDS™ platform ("FUNDS"), collects, uses, maintains, and discloses information collected from users (each, a "User") of the FUNDS portal at portal.mypatient.global (the "Site"). Together with the Terms & Conditions (collectively, the "Agreement"), it forms a binding contract between you and My Patient Global, Inc., a [STATE OF INCORPORATION] corporation, which owns and operates the Site, and applies to the Site and all products and services offered by My Patient Global.

By using the Site you represent that you are at least 18 years of age, are authorized to act for the organization on whose behalf you access the Site, and accept this Privacy Policy as it may be amended from time to time. As we add functionality, we may revise this Privacy Policy and will post changes here; your continued use after changes are posted constitutes acceptance.

2. Definitions

Personally Identifiable Information ("PII") is information that uniquely identifies a User, which may include name, email address, phone number, date of birth, and payment information, as well as other information a User chooses to share. An IP address may become PII when combined with other identifiers.

Non-Personally Identifiable Information ("Non-PII") is anonymous information not traceable to any individual or computer, such as browser name, device type, operating system, and connection information.

Individually Identifiable Health Information ("IIHI"), as defined under 45 CFR 160.103, is a subset of health information, including demographic information, that is created or received by a health care provider, health plan, employer, or health care clearinghouse and relates to an individual’s past, present, or future health, care, or payment for care, and that identifies the individual or could reasonably be used to do so.

Protected Health Information ("PHI") means IIHI that is transmitted or maintained in electronic or other media, as defined in 45 CFR 160.103.

Third Party means a business outside the My Patient Global family that is not a Partner. Partner means a business that My Patient Global works with to maintain or improve the service, or that provides services on our behalf, such as payment processors, clearinghouses, or technology providers.

3. Collection of information

My Patient Global is the owner of the information collected on the Site.

Non-PII. We may collect Non-PII whenever Users interact with the Site, using cookies, web beacons, log files, and similar technologies, to analyze trends, secure the service, and improve the user experience. Cookies are small files placed on your device for record-keeping; you may set your browser to refuse cookies, though some parts of the Site may not function properly.

PII. We may collect PII when Users access the Site, sign in, submit or manage records, complete a form, or use other features. Users may be asked for information such as name, email address, and business contact information. We collect PII only when Users voluntarily provide it; you may decline, though this may prevent certain activities.

PHI. Operational data submitted through the Site — such as claims, eligibility, and related records — may include PHI. Where My Patient Global processes PHI, it does so on behalf of the responsible covered entity or customer, as a business associate under a business associate agreement, applying the minimum-necessary principle and in accordance with applicable law, including the HIPAA Privacy and Security Rules.

Children. The Site is a business service directed to authorized organizational users. It is not directed to, and does not knowingly collect information from, children under 18.

4. How My Patient Global uses information

To provide the service — to intake, validate, route, and reconcile healthcare claims, facilitate payment and remittance, and provide related functionality you request.
To operate and improve the Site — to understand how the service is used, improve features, and support Users.
To process transactions — to carry out and reconcile the claims and payment activity you initiate; we do not share this information with outside parties except as necessary to provide the service.
To communicate — to send service, security, and account messages, and to respond to inquiries and requests.

5. Sharing of information

My Patient Global does not sell, trade, or rent Users’ PII or PHI, and does not use PHI for advertising. We share information only as needed to provide the service — for example, routing a claim to the payer, administrator, or provider responsible for it — and with Partners and service providers acting under contract on our behalf and consistent with this Privacy Policy.

We may disclose information to Third Parties under limited circumstances: (i) when required by law, regulation, or legal process, including for fraud protection; (ii) when necessary to protect and defend the rights or property of My Patient Global; or (iii) when necessary to protect the personal safety of Users. Where we share PII with Third Parties, we require them to use it only for authorized purposes on our behalf and consistent with this Privacy Policy.

6. How My Patient Global protects information

We have adopted data collection, storage, and processing practices and security measures designed to protect against unauthorized access, alteration, disclosure, loss, misuse, or destruction of information under our control, including administrative, technical, and physical safeguards. Sensitive data exchanged between the Site and Users travels over an encrypted, SSL-secured channel. Each organization’s data is isolated so that one tenant cannot access another tenant’s information.

Because no method of transmission or storage is completely secure, we urge you to protect your access, use strong credentials, and take precautions when using the Internet.

7. Third-party websites

The Site may link to third-party sites that My Patient Global does not control and is not responsible for. Those sites have their own privacy and other policies. We encourage you to read the privacy statements of any site that collects PII. This Privacy Policy applies solely to information collected by the Site.

8. Reviewing, correcting, and deleting information

Portal access is managed by your organization. A User may review, request corrections to, ask us to delete, or decline further collection or use of PII by contacting us using the information below, or by contacting your organization’s administrator, who can coordinate with My Patient Global.

9. Communications and Do Not Track

We send Users the service, security, and account communications needed to operate the platform. Where we send optional communications, each includes a way to opt out. Because there is no uniform industry standard for “Do Not Track” signals, we do not currently respond to them. We do not serve advertising on the Site.

10. Protecting your information

We recommend that Users keep software and browsers up to date, remain alert to email scams (My Patient Global will not ask for your password or payment details by email), use strong credentials, and never share account access.

11. Changes to this Privacy Policy

My Patient Global may update this Privacy Policy at any time. It is the User’s responsibility to review it for changes, which take effect when posted.

12. Limitation of liability for privacy

You understand and agree that any dispute over privacy is subject to this Privacy Policy and to the limitations, disclaimers, and dispute-resolution provisions of the Terms & Conditions (including any indemnification and limitations on damages).

13. Contact

If you have questions about this Privacy Policy, the practices of the Site, or your dealings with the Site, please contact us at:

My Patient Global, Inc.
[MAILING ADDRESS]
privacy@mypatient.global
mypatient.global